Protection before storage.
PDF files are encrypted with AES-256-GCM before being stored in a private GitHub repository. Server encryption keys stay out of the browser.
Included in your free workspaceSECURITY AT WC-SIGN
Thoughtful protection.
Clear safeguards and honest information, before you put pen to PDF.
CARE, BUILT INTO THE WORKFLOWYour documents.
Your documents.
Your peace of mind.
Encrypted files, controlled access and a recorded signing process. Understand how your information is handled before you start.
Read our privacy policyProtection at every step.
The safeguards used in the current signing workflow.
Your workspace. Your documents.
Document requests check account ownership. Administrative actions check the account’s server-side role. Recipient links carry random private tokens.
Included in your free workspaceA little care at the door.
Cloudflare Turnstile protects authentication forms and signature submissions. Verification tokens are checked on the server for the expected action and hostname.
Included in your free workspaceA history you can follow.
Uploads, preparation and signatures are recorded with timestamps. Completed PDFs include an audit report and document ID footers.
Included in your free workspaceClear about what happens.
Account and workflow records are stored in Supabase. Encrypted PDF files are kept in GitHub. Our privacy policy explains providers, access and retention.
Included in your free workspaceKeep private links private.
Possession of a signing link can allow signing. WC-Sign does not independently verify identity or issue qualified digital-signature certificates. Git history may retain earlier encrypted versions.
Included in your free workspace1 / 6
A private link is a key.
Share it with care.
Anyone holding a valid signing link may be able to access and sign the document until the link expires or becomes unavailable. This version does not use recipient OTP or government-ID verification.
Understand the signing workflowClear about where your information goes.
Different parts of your workflow use different service providers.
Account & workflow records
Authentication, account information and structured document and recipient records.
Encrypted PDF files
PDF bytes encrypted before storage in the private document-vault branch. Earlier versions can remain in Git history.
Website & verification
Website delivery, server requests and Turnstile human-verification checks.
Understand the limits.
WC-Sign does not claim an independent security audit, malware scanning, signer identity verification or qualified digital-signature certificates. Revoking a signing link does not erase encrypted files or their Git history.
Read the full data and retention information