Trust is built on facts.
We protect your documents with modern cloud infrastructure, strong encryption, and rigorous access controls. No hype, just secure engineering.
Core Security Infrastructure
Our platform is built on secure foundations to ensure your data remains protected at all times.
SOC 2 Compliant
eSignIQ is SOC 2 compliant. We maintain security controls, monitoring, and processes aligned with SOC 2 trust principles for customer data protection.
HIPAA Compliant
eSignIQ is HIPAA compliant to support healthcare and related workflows that require protected health information safeguards alongside secure eSignature processes.
Cloud Infrastructure
Hosted on secure Vercel and AWS environments with strict, role-based access controls and continuous monitoring.
Encryption in Transit
All data moving between your browser and our servers is protected using TLS 1.2+ / TLS 1.3 with strong ciphers.
Encryption at Rest
Sensitive data, including documents and signatures, is encrypted at rest using industry-standard AES-256 encryption.
Access Protections
Robust session management, rate limiting on sensitive endpoints, and comprehensive account takeover protections.
Penetration Testing
We conduct regular third-party penetration testing to identify and remediate potential vulnerabilities proactively.
Secure Payments
Payments processed securely via Paddle. eSignIQ explicitly does not store any raw credit card data on our servers.
Account & Authentication
Robust access controls designed to prevent unauthorized account access and protect sensitive document operations.
2FA via Authenticator App (TOTP)
Standard time-based one-time passwords supported by Google Authenticator, Authy, etc. Includes one-time backup recovery codes.
Step-up Authentication
Password reconfirmation required for sensitive actions like disabling 2FA or changing primary email.
Signed Email Verification
Cryptographically signed verification flows. Password reset processes implement anti-enumeration behavior to prevent account discovery.
Two-Factor Authentication
Enter the 6-digit code from your authenticator app.
Secure Document Lifecycle
Tokenized Access
Public signing and view links use unguessable tokens.
Secure Signing
Signed email verification flow ensures identity context.
Audit Trail
Comprehensive logging of all document interactions.
Verification
Tools to verify signature authenticity post-completion.
Security FAQ
Common security and trust questions, answered clearly.