swipesign is a signing platform, not a document management system. We hold your files for as long as it takes to finish the signature process, then we delete them.
What's deleted
Everything you uploaded and everything we made from it: the original, the signed output, and any versions in between. After 14 days none of it exists on our systems.
What's kept
The audit trail stays. It holds the certificate and cryptographic metadata that proves a signature was sound: who signed, when, how their identity was established, and a hash of what they signed. It doesn't contain the document itself.
So we can always help you show that a signature happened and was valid. We can't give you back the document it was applied to.
Why we do it this way
Keeping customer documents forever builds a large and attractive target, and most of our customers are signing things they'd rather nobody was stockpiling. If swipesign were breached, contracts we no longer hold can't leak.
Every completed workflow also reaches your inbox by email, so a second copy on our servers would only be redundant. Deleting it saves storage and energy.
It also keeps the data-protection picture simple. We're not the custodian of your agreements. You are.
Keeping documents longer
If you'd rather keep documents with us, add the long-term archive for €25 per month (net, excl. VAT): audit-proof, with timestamps monitored and renewed when needed.
What to do about it
- Download the signed document and the audit trail when a workflow completes: see Download signed documents and the audit trail.
- Put them wherever your company keeps executed agreements.
- Turn on the completion notification so nothing finishes without you noticing: see Email notification settings.