swipesign runs on OVHcloud, in ISO 27001 certified data centres in Germany, and in France for the AI features. Your documents do not leave the EU.
That's a deliberate choice rather than an implementation detail. A European e-signature provider that quietly stores contracts in another jurisdiction hands its customers a problem they didn't ask for, so we don't.
What that means in practice
- Documents you upload are stored in the EU for as long as we hold them, which is 14 days after completion unless you add the long-term archive.
- Audit trails, which we keep, are stored in the EU too.
- Your account data, name, email, company details, sits in the same place.
Who else touches your data
Two things happen outside our own systems, both by design.
| What | Who | Why |
|---|---|---|
| Identity verification | A qualified trust service provider: A-Trust, WebID, or the national eID you choose | eIDAS requires a qualified provider to run the check and issue the certificate. Your ID document never reaches swipesign. |
| Payments | Our payment processor | Card details go straight to them. We store only the brand, last four digits and expiry. |
For the detail on what does and does not reach us during an identity check, see What swipesign can and cannot see of your ID.
Need this in writing?
If your procurement or security team wants hosting details or a list of subprocessors for a review, contact us and we will get you what you need.