Your contracts stay yours.
You're trusting SignItSure with the contracts your business runs on, and with your customers' signatures. So we hold on to them for as little time as possible — and then delete them.
Zero retention by design
We do not keep your documents. Files are held only while the workflow needs them — AI explanation, customer questions, signing — and are permanently erased once signing is complete or the link expires.
Nothing to steal if we were breached
Because originals, extracted text, embeddings and signed files are deleted after delivery, there is no archive of customer documents sitting in our systems for anyone to access.
Delivered only to the two parties
Completed, signed documents are handed directly to the business sender and the customer signer through a short download window, then that temporary copy is deleted too.
Processing stays server-side
Credentials and API keys are never exposed to the browser, and files are processed server-side over encrypted connections. AI providers process text to answer, not to train on your contracts.
How long we keep anything
- Uploaded files: kept only until the signing workflow finishes, never longer than 24 hours if the document is never sent, and never longer than 7 days under any circumstances.
- AI text and explanations: the original file, extracted text, embeddings, AI context and answers and the captured signature images are all deleted at finalization. AI only ever processes the current temporary document — account preferences hold no document text and there is no cross-document search.
- Signed documents: generated once and automatically deleted within 24 hours of delivery.
- What remains: only the minimal signing audit record the law expects — who signed, when, and from where — with no document content attached.
- Anonymized trends, never documents: we separately keep fully anonymized, aggregated trends — a question's general category, a flagged clause's general category, roughly how long signing took, and the sending workspace's industry — in a table with no link back to any document, signer or request. Never your document content or identity, and never the question or clause text itself.
Why you can trust us with a contract
- We never build an archive. There is no library of customer contracts inside SignItSure. Deletion is automatic and part of the workflow, not a setting someone has to remember to switch on.
- The audit record contains no document content. All we keep is the proof a signature happened — signer name, email, timestamp, IP address and the activity log. Not a page, paragraph or clause of what was signed. These are the audit events we record as evidence of the signature.
- We don't sell or mine your documents. Your contracts are never used for advertising, resale, or to train AI models. AI providers process the text to answer your question, and that's where it ends.
- Only two people ever receive the file. The finished, signed document goes to the business that sent it and the customer who signed it — by download link and, where enabled, emailed directly to both addresses. Nobody else, including us, keeps a copy afterwards.
- Access is scoped and expiring. Signing links are single-purpose, time-limited (1 hour to 7 days), optionally access-code protected, and stop working the moment they're revoked or expire — and the files behind them are erased at the same time.
Website analytics, and the cookie we ask about
We measure how our marketing pages are used with one tool, and only with your agreement.
- Google Analytics (GA4) sets cookies, so we do not load it until you accept the banner. If you decline, it is never loaded at all — there is nothing left running to opt out of, and no analytics of any kind run. Your choice is remembered in your browser; clearing your site data will ask you again.
- It never runs on a signing link. When you open a document to read or sign it, no analytics load on that page at all, whatever you chose. The address of a signing link contains the secret that opens the document, so it is never sent to an analytics provider.
It sees ordinary web traffic — pages visited, rough location, browser type. It never receives the contents of a document, the text of a question asked about one, or a signing link.
A note on what SignItSure is
SignItSure explains documents in plain English and captures electronic signatures so your customers know what they are agreeing to. It is not a law firm and does not provide legal advice. For high-stakes agreements, use SignItSure alongside your own counsel.