Trust
One table, in plain words. Every line links to the document that backs it.
| Where documents live | EU (Frankfurt) for European workspaces; US (N. Virginia) for others. Chosen per workspace and fixed once it holds data. |
|---|---|
| Who can see a document | Members of the workspace, by role, and the people it was sent to. Application access is limited by those permissions. Staff use the support view only with the timed, read-only access you request. |
| How a signature is proven | Signer, time, network address, device, and a SHA-256 hash of the file, chained event by event in an append-only trail and printed on the certificate. |
| How long records are kept | Deleted signing documents can be restored for 30 days, then their records and files are purged. Workspace deletion queues permanent file removal. Backup copies expire within 30 days; minimal seal proofs remain. Billing records stay as tax law requires. |
| Encryption | In transit with TLS; at rest on every database and file store. |
| File links | A link made while you are on the page expires within 15 minutes. A link we email you, so that you can open a signed document or an export later, lasts seven days. Both are issued only to somebody entitled to that file at that moment. |
| What we never do | Sell data, use documents for advertising or model training, or edit an audit trail. |
| Who runs it | ShareSign, Inc. Contact support@sharesign.co. |