Security & compliance

Every signature is cryptographically sealed — and provable.

VXSign doesn’t just capture a signature image. It wraps each completed document in a PAdES signature, stamps it with a trusted timestamp, and seals it so any later change is detectable. If a signature is ever questioned, the evidence is in the file.

PAdES / PKCS#7 digital signaturesPKI-backed signatures embedded in the PDF itself.
RFC 3161 trusted timestampsIndependent proof of when each signature was applied.
Tamper-evident SHA-256 sealAny modification after completion breaks the seal.
Full audit trailIP, user-agent, and timestamps for every action, in the Certificate of Completion.
Identity verificationEmail OTP, SMS OTP, access code, and knowledge-based authentication.
Standards-alignedBuilt to support ESIGN, UETA & eIDAS, operated with SOC 2-aligned controls.

Questions people ask about security

Are documents signed with VXSign legally binding?+

VXSign is built to support the ESIGN Act, UETA, and eIDAS, and every completed document includes a Certificate of Completion with a full audit trail. As with any e-signature, legal validity depends on your jurisdiction and use case — confirm high-stakes requirements with your legal counsel.

How do you keep a signed document from being altered?+

Each completed document is signed with a PAdES/PKCS#7 digital signature, stamped with an RFC 3161 trusted timestamp, and sealed with a SHA-256 hash. If a single byte changes after completion, the seal breaks and the tampering is detectable.

How do you verify who signed?+

You can require email OTP, SMS OTP, a pre-shared access code, or knowledge-based authentication before a signer opens the document — configurable per signer and per envelope.

What is in the audit trail?+

Every action in the envelope’s lifecycle — sent, viewed, verified, signed — with IP address, user-agent, and timestamps, compiled into a Certificate of Completion you can export.

This page is general information, not legal advice. Whether a specific electronic signature is enforceable depends on your jurisdiction, the document type, and how it was signed. Consult qualified counsel for high-stakes agreements.