Confidential documents, kept confidential
Hosted at OVHcloud in Germany, identity checks stay with qualified trust service providers, and your documents stay in Europe.
- Hosted in Germany
- GDPR compliant
- Deleted after 14 days
- No US cloud
Your documents stay in Europe
Hosted, operated and accountable in the EU, not just as a setting, but by design.
OVHcloud in Germany
Documents, audit trails and account data sit in ISO 27001 certified data centres in Germany. The AI features run in France.
No US cloud, no CLOUD Act risk
Hosting, storage and processing of your documents stay with European providers, under European law.
Operated from Vienna
Your contract partner is swipesign GmbH, an Austrian company headquartered in Vienna.
What happens to your documents, and what doesn’t
- Qualified
A qualified electronic signature is equivalent to a handwritten signature. A signed PDF can be checked independently of swipesign in any validation tool, its chain of trust fully traceable.
- Deleted after 14 days
You receive the signed document by email. We delete our copy after 14 days. That protects not only your data, but the environment too. With a swipesign Business subscription, you can keep your documents in the audit-proof long-term archive instead.
- Your ID stays with the trust provider
Identity checks run at a qualified trust service provider such as A-Trust or WebID. Your ID document never reaches swipesign.
- Every access on record
Who signed, opened or downloaded what, and when: logged and sealed into a tamper-evident audit trail.
Security questions, answered
Where your documents live, who checks your ID, and how long anything is kept.
How long do you keep my documents?
Until 14 days after the signature workflow completes. You receive every completed workflow by email anyway, so a second copy on our servers would only be redundant. Deleting it reduces what could ever be exposed, and it saves storage and energy. The audit trail stays: it proves who signed what, when and how, without containing the document itself. If you want to keep documents longer, the long-term archive costs €25 per month (net, excl. VAT).
Does swipesign see my ID document?
No. Identity verification runs at a qualified trust service provider: A-Trust, WebID or the national eID you choose. eIDAS requires a qualified provider to run the check and issue the certificate. swipesign receives the result, not your ID document.
How does identification hold up against deepfakes?
We work with WebID, specialists in identity verification certified to banking standards. Identity is not established from an uploaded selfie but from the chip of the ID document, via the state eID, or in an attended video identification with liveness and document checks: the type of procedure ETSI TS 119 461 describes for remote identity proofing.
Who processes my data besides swipesign?
Hosting runs on OVHcloud in Germany, and in France for the AI features. Identity checks are handled by the qualified trust service provider you use. Card payments go straight to our payment processor; we store only the card brand, the last four digits and the expiry date.
Why does swipesign offer a self-hosted video conferencing tool?
So that a signing appointment never has to leave our infrastructure. Like the rest of swipesign, the video conference runs on OVHcloud in Germany, end-to-end encrypted and without any third-party provider. When a contract is discussed and signed during a call, the conversation, the document and the signature all stay in one confidential environment, instead of passing through an external meeting service. Recordings are made only with every participant’s consent.
Four European specialists behind every signature
Qualified from the first upload
Send your first document today. Questions about data protection? Write to us.