Compliance & Security
Last updated: July 2026
ScribbleSign is an early-stage product. This page describes the security measures currently in place and the ones we are working toward. We only state what we have implemented.
Security Measures in Place Today
- TLS encryption for all data in transit, with certificates issued by Let's Encrypt
- An activity log that records document events (creation, viewing, signing) with timestamps, IP addresses, and device information
- Hosting on Amazon Web Services (AWS) infrastructure
On Our Roadmap
The following are in development and not yet available. We will update this page when each ships:
- Multi-factor authentication for account holders
- A tamper-evident audit trail and downloadable completion certificate for signed documents
- Encryption at rest for stored documents
- Automated backup and recovery procedures
Certifications and Audits
ScribbleSign has not undergone a SOC 2 examination, ISO 27001 certification, penetration test, or other independent security audit. We do not currently offer HIPAA Business Associate Agreements, and ScribbleSign should not be used for data regulated under HIPAA. If we complete an independent audit in the future, this page will be updated to say so.
Electronic Signature Laws
Laws such as the U.S. ESIGN Act, the Uniform Electronic Transactions Act (UETA), and the EU eIDAS Regulation give legal effect to electronic signatures in many circumstances. ScribbleSign is designed to support electronic signature workflows, but it has not been independently assessed against these frameworks, and whether a particular electronic signature is enforceable depends on the transaction, the jurisdiction, and how the signature was captured. Nothing on this page is legal advice; consult a lawyer for questions about your specific use case.
Privacy
How we collect and process personal data is described in our Privacy Policy. We have not undergone an independent assessment of GDPR compliance.
Availability
ScribbleSign runs on AWS infrastructure. We do not currently offer an uptime SLA.
Contact
For security or compliance questions:
ScribbleSign
Email: compliance@scribblesign.com