Privacy handled in the product, not in a spreadsheet
Data subject requests, encryption and tenant isolation are part of sign.yt. You spend less time on GDPR paperwork and keep the signed documents the law asks you to keep.
Export on request
Users can download all their data as a ZIP file: profile, organizations, document and signature metadata, contacts and the audit entries that refer to them. People without an account, such as recipients, can request their data by email and receive a one-time download link.
Public requests are rate limited per email and per IP address, so nobody can flood the system.
Erasure that keeps the evidence
When a user asks to be forgotten, sign.yt anonymises them: names and email addresses are replaced with opaque tags, sessions are revoked and login methods removed. Signed documents are kept, because deleting them would break the audit trail and the other parties' rights.
Super admin accounts require an extra confirmation, which protects against accidental deletion.
Encrypted at rest, per organization
Uploaded and signed PDFs are encrypted with AES-256-GCM using a key derived separately for each organization. Credentials for email and SMS providers are stored with field-level encryption, never in plain text.
Each file is bound to its organization and document, so a blob copied to the wrong place cannot be decrypted there. Keys never live in the database next to the data they protect.
Tenants never mix
Every query is scoped to the organization it belongs to. Requests on a custom domain resolve to exactly one organization, and audit chains are kept per tenant.
This isolation is what lets many companies, and many brands, share one platform without sharing data. Your clients' contracts are visible only to the people you invite into your organization.
Frequently asked questions
Can recipients without an account exercise their rights?
Yes. They submit a request with their email address and receive a link by email. The response never reveals whether the address exists in the system.
Are signed documents deleted on erasure?
No. Personal data is anonymised, but signed documents are kept to preserve the evidence and the rights of the other parties.
Is my data encrypted?
Yes. Documents are encrypted at rest with AES-256-GCM and a separate key per organization.
More features
- PAdES signatures
Every signer gets a cryptographic PAdES signature in the PDF, plus a final platform seal and a certificate of completion. Any change after signing shows.
- Public verification
Each signed document carries a QR code and short link to a public check page. Masked names, signing dates, seal status and a file comparison.
- Profil Zaufany and qualified signatures
Let Polish signers use Profil Zaufany, e-dowód or mObywatel via Węzeł Podpisu, or sign with a qualified electronic signature from a trust service provider.