Encrypted persistent files
Original PDFs, completed PDFs, and signature images are stored as authenticated Fernet ciphertext, not readable PDF or image files.
SignaCoreBack to SignaCoreTrust & data
Your documents are not our product.
SignaCore protects document contents and signer information with encryption, limited access, and a security boundary described here without zero-access claims the current architecture cannot support.
Persistent protection
What is protected.
Encrypted signer information
Signer contact details, entered text, IP records, and sensitive document metadata are encrypted before they are stored in the database.
Verified document access
A signing link does not reveal the document. The recipient must pass email OTP verification before fields or page previews are returned.
Encrypted in transit
HTTPS/TLS protects document and account data while it moves between the browser, SignaCore, and the public API.
The honest boundary
Encrypted storage. Brief plaintext processing.
A usable PDF cannot be protected by a one-way hash. SignaCore decrypts a document only inside the service for field detection, authorized page rendering, signature flattening, and completion email delivery. Temporary files use private memory-backed storage and are removed when each operation finishes.
That design sharply limits exposure, but it is not cryptographic zero-knowledge: the service holds the key needed to perform those operations. True zero-knowledge would require client-side document processing or customer-held keys and a different product architecture.
Access and responsibility
Who can access what.
The workspace administrators who prepare and manage the document can retrieve it through authenticated SignaCore controls.
A signer can view the assigned document only during a verified signing session. Recipients receive the completed document when the workflow finishes.
Completion email delivery sends the finished PDF through SignaCore’s configured email provider to each recipient’s mail provider and device, which then control their own copies.
Infrastructure administrators who control the application and its encryption key retain technical access. SignaCore therefore does not claim zero-knowledge encryption.
Encrypted documents remain stored for workspace access. SignaCore does not claim automatic deletion until an explicit retention and deletion policy is implemented.
Content use
No advertising profiles. No document-content AI training.
SignaCore does not sell document contents or use them to train AI models. If AI-assisted features are introduced, their data flow, provider boundary, retention, and opt-in controls must be disclosed before customer documents are sent to any model.