Where your PDF goes, who holds the key, and what proof you get.

This page is written from what the code does, limits included. Without an account the file never leaves your browser. With one, it is encrypted in your browser before it is saved.

Sign a PDF Check a file's fingerprint

1765111f e50dfe33 7165111f e50dfe3f 4dc8bf39 eb4f0ac8 bd522d97 4ccc023e 4f37f5ac 45a72a62 c7a1a867 5e0ae933 8037d2f8 f1836101 e2368a35 2aadf373 5964d004 8adc8bf5 dc8bd002 5f08d002 52e83ae9 100023c1 424e209a 9574bf7f 8deb49a7 05ae9161 dd6a1cbe 50f29436 d87d4360 9a769511 fc35ccc0 2315209c c046d6a3 f6e812fa 4b2835ab 4f089b8f 6efcb43e c2c45c0f acc83cc2 bdc5e6ad 2799f776 59bafb06 72a62c7a 1ead39c0 c7223636 57ec1a24 6f1e669b c4577c57 7c240131 964e2b5b b47b163c 76e62c5b 9004ff2f 64cc0469 434ad663 a1aa50d1 0f3b428c 952c79ef b0672a62 c7a1ea62 1de1aa3d 520ae71b 9ff6c8ce fa0bf3b1 65fe6ea4 d31acab8 d010f08b e3f6d661 c9dcbc47 afb295ca 4517f0eb 3b3b3b3b 3e63273c f273a1aa 50d537f5 cff6a5d0 ae933803 7d2f8f17 5dcae73a 2c563e4e 0c23c37d 4230588a d7401446 9309a953 28163e60 bd64f4a0 a09eb6e8 35ec7843 6db8ded7 5bfcea4f 2924e536 b845d06f 1092ae16 bdd3bbdb 00a68a57 eae25974 b07bf714 48ce5e2b 7e64bd44 48ab6c7b 390f271b 7c45a4f1 6707b186 749cce1b 8121dba0 9eb6e835 ab7e64d0 04bd6749 c0048ad8 78e1aa3d 24e4c362 fc37f7d4 77e2d979 448e5388 2e3300a7 d1e11040 94ba1c9b afb0672a a5329413 2b5bb076 19bb2845 988ed76e 62c58695 5cc83cb4 1b1e6cd9 1c35b910 e2b7e609 ab5fd33a 0cd10023 c146763e 62ebd396 f869511f c35ccc02 3e4f3b18 7afd1403 5daa51fc 125ccc02 7f7d436b 5c9de941 5435ac6b a3d338e0 cdfd520a e7177c24 4262c586 95532941 3277b5a9 55532941 4046b3b1 8988e5af b0675b9f 15465111 fe50dff1 9661db8d ed75bb28 459cb3a4 bd319b8d 0025f08d 00250ae7 177037d2 f8f179ef b2a434f7 0563c12f 8def6c8a b6ea60be 5ec78013 07b3b49e a707edf4 213a8d6e 44eace9b 22d9749e b6e835ae 5ec78013 07b7c459 66fb089d aa3f4cd1 ee738015 25daa932 d554e0ac 68328163 e60bd23c 37165111 fe50d31a a3d24090 6e277be6 b7286d64 f089b8f3 b391db8d edb6e835 ab4b3705 65fd33a4 f4f906e2 342e040e 90e3f95a d40cd104 d081c1c3 dc2f00e6 8d494928 a3755b10 6153b187 af93089b 8f3f4cd1 ee738018 48ab6d58 261bb08b f5a7079f d5426fb2 a4deb6c6 84791ee9 530565fd 33a0cd10 065fe913 3d34d12f dcd9f757 bbc9de94 15437d2f 8f175dce 1f3b4b4e bca68c83 2f2f0226 1bb0bd24 ac89b91e c6a3d338 e0007e60 bd23c780 130a5071 38657ec4 b528b851 90505e46 f6e62e83 6d64f0cb e50f2c56 3e4fe501 25ee719f 889f5289 5906e242 bffd0bc8 040e033a e910cff6 a5dc8bb2 65bb2845 988ab49c ac6a5ff4 cf39f9ed 99976d85 76b7036b 7e51fc12 1b9ff609 cad95530 79000467 2837f5cb e3d4575d ab5deb91 ecadcc04 69438d45 ffc68479 2c7a1a83 4c10f0c3 757a9d4b 528b855b 33215a12 dd5d4e2d 77c47b16 3c3cc81c 3fedf42d 27bba7d2 f832a2e8 14251102 3f294390 f294360b e50f2943 6d87a1cb 188f4b14 469309ad 66f9ed99 976d8576 bb7ffed1 6de58e9b 41d396cd 9d4a2678 36d64f08

EMPLOYMENT CONTRACT

Between the Employer and the Employee named in Schedule 1.

1. Position. The Employee joins as Senior Designer, full time, from the first day of next month.

2. Salary. 4,200 per month, paid on the last working day, reviewed every twelve months.

3. Probation. Three months. Notice during probation: one week.

4. Confidentiality. Everything learned about clients and projects stays private, during and after employment.

5. Notice. One month on either side after probation.

6. Hours. 37.5 a week, Monday to Friday, with flexible start and finish times agreed with the team.

7. Leave. 25 working days a year, plus public holidays.

The Employer

The Employee

What a stored document is to anyone without the key: bytes. These are the real AES-256-GCM bytes of the page, encrypted in this tab with a key made here. Move over the page: where the key goes, it reads.

The two paths of a file.

Which one your PDF takes depends on one thing: whether you are signed in.

Without an account

You open itpdf.js reads the PDF in this tab, up to 50 MB.
You sign itpdf-lib writes your signature into the PDF, in your browser. Nothing is sent.
You pay on StripeWhile the payment page is open, the file waits in this browser's storage (IndexedDB).
It downloads hereBack on SignQuick, the payment is checked and the file downloads from your browser. SignQuick never receives it.

With an account

Signed in your browserWith a paid plan, a verification seal is added to the last page.
FingerprintedYour browser computes the SHA-256 of the signed file; that fingerprint is kept so the file can be checked later.
Encrypted, then savedAES-256-GCM, with your account's key, before the file leaves the browser.

Who holds the key.

It depends on how you sign in, and it changes who could read a stored file.

How you sign in	How your key is protected	Who can decrypt a stored file
Email and password	Wrapped, in your browser, with a key derived from your password (PBKDF2, 100,000 iterations). The server keeps only the wrapped key.	You
Google sign-in	Generated on the server and stored encrypted with a server secret. The same goes for any account without a password-wrapped key.	You, and SignQuick's server
No account	No key: nothing is stored.	Nobody; the file never left your browser

If you want to be the only one able to decrypt your files, sign up with an email and a password.

Who holds a signing link's key.

When you send a document, your browser encrypts it with a key made for that request. By default, SignQuick keeps that key, sealed with a server secret, until the request is signed, declined, canceled or expired, so it can email each signer their link, remind them and tell the next one it is their turn; then the key is deleted. In private mode, the key goes only into each signer's link, after the #. Browsers never send that part of an address to a server, so SignQuick's server never sees the key, and you send each link yourself.

signquick.app/sign/token#k=key&u=…&v=…

In private mode, the part in blue stays in the browsers of the people you send it to.

Without its key, a stored file is only bytes.

The proof you get.

On Pro and Business. A $2.99 download carries your signature and nothing else.

The verification sealA band at the bottom of the last page of a PDF you sign yourself: “Verified by SignQuick”, the document's ID, and a QR code that opens its check page.
The fingerprintThe SHA-256 of the signed file, computed in your browser and kept, so the file can be checked later.
The audit certificateA PDF with the file's name, its SHA-256, and each signature or refusal: the email, the IP address and the time. Download it from your documents.
Checking a documentScan the seal's QR code, or drop the PDF on the check page: your browser computes its SHA-256 and only that fingerprint is sent, never the file.

Try the fingerprint on any file.

Drop a file here. Its SHA-256 is computed in this tab, the way the check page does it, and nothing is sent anywhere. Change one byte of the file and the whole fingerprint changes.

Choose a file or drop it here

What the seal covers: PDFs you sign yourself, in the signer, with a paid plan. A document sent to several signers gets no seal and can't be found by the check page, and its certificate lists signatures and refusals, not when it was sent or opened.

What SignQuick keeps, and for how long.

Signed documentsThey stay in your account until you delete them.
Unsigned draftsDeleted after 7 days without a plan, 30 on Pro, 90 on Business. A document in a signing request that hasn't been canceled or expired is never removed.
Without an accountNothing on our side: the file stays in your browser. This browser keeps your signature and where you placed it, as a draft, until you download or start over.
Your accountYou can delete it from Settings.

Legal standing, without the gloss.

This is not legal advice.

What SignQuick makesA simple electronic signature (SES). Under the EU's eIDAS regulation (article 25), it can't be denied legal effect or refused as evidence because it is electronic. In France, article 1367 of the Civil Code recognizes electronic signatures. In the United States, the ESIGN Act and UETA (adopted by 49 states and DC; New York has its own law) give it legal effect for most transactions.
Advanced (AdES)Uniquely linked to the signer and able to identify them (eIDAS article 26). SignQuick doesn't make these.
Qualified (QES)The only level eIDAS treats as equal to a handwritten signature, with a qualified certificate. SignQuick doesn't make these.
In courtAn electronic signature can't be refused as evidence because it is electronic. On Pro and Business, the audit certificate records who signed, when and from which IP address; how much weight it carries is up to the court.
The usual exceptionsWills, some family-law documents, court orders, notarial deeds and some public forms need more than an electronic signature.

Where it runs, and who else is involved.

Stripe and Amazon SES never receive your documents. The server and the file storage only receive them encrypted.

Service	What for	Where
Hetzner	The server (a VPS) that runs the app.	Germany (EU)
Vercel Blob	Stores the files saved to accounts, encrypted in the browser before they are sent.	Vercel's storage
Stripe	Card payments.	United States
Amazon SES	Emails: sign-in, notifications, signing invitations and reminders.	Ireland (EU)

The full list is with the subprocessors.

The limits, plainly.

Not end-to-end for every accountWith Google sign-in, our server holds your key, encrypted.
Simple signatures onlyIf a law or the other party requires an advanced or qualified signature, use a qualified trust service provider.
Proof needs a planThe seal and the audit certificate come with Pro and Business.
Payments leave the EUStripe processes them in the United States. Your documents are not sent to it.

Found something wrong? Security reports go to [email protected].

Without an account, your PDF stays in your browser from start to finish.

Sign a PDF The privacy policy