eSora Sign⁠An eSora Labs company
Security and trust

Proof you can check yourself.

A signature is only worth what you can show later. Here is what we record, where it lives, and how anyone can check it.

Who signed

Identity checks

Email code, SMS code, an access code you share yourself, or a photo ID and selfie. The check used is printed on the certificate.

What was signed

Tamper seal

The finished PDF is sealed and its SHA-256 fingerprint recorded. Any change breaks the seal in every PDF reader.

When

Trusted timestamp

On paid plans, an independent time authority stamps the sealed record, so it can’t be backdated.

Where

Stored in Canada

Documents and evidence are stored in Canada by default and encrypted at rest and in transit.

Who can see it

Roles and company sign-in

Admins, senders and viewers see only what their role allows. Enterprise adds single sign-on.

What changed

A log nobody can edit

Every admin action is logged and kept for seven years. Owners can't delete it either.

Certifications

We'll list our certifications and audit reports here as they're issued. Need them for a vendor review? Ask for the security pack.

Ask for the security pack

Found a security issue?

Tell us before telling anyone else and we'll work with you on a fix.