Trust
Security your IT and legal teams can sign off
Signature management touches every mailbox in your organisation, so we treat it like the critical infrastructure it is.
Security review
Review our current controls with your IT team. No SOC 2 certification is claimed.
Data processing
Read the DPA and sub-processor list. Selectable regional hosting is not generally available.
Optional SSO & SCIM
SCIM user provisioning is available with administrator setup. SAML sign-in requires provider configuration and verification.
Encryption everywhere
TLS 1.3 in transit, AES-256 at rest, with key rotation and isolated tenant storage.
Least privilege
We request the minimum Graph and Admin SDK scopes needed to apply signatures — never mailbox content.
Audit logging
Every template, rule and deployment change is recorded and exportable.
Hosting scope
Hosted application. An on-premises stamping agent and private-cloud deployment are not generally available.
No email reading
Signavique never stores, scans or forwards message bodies. Signatures only.
Sub-processors
A short, published list covering hosting, email delivery and payments (Stripe). Notified 30 days before any change.
Testing
Automated checks identify common security issues. These are not a substitute for independent penetration testing.
Uptime & recovery
No public uptime guarantee or recovery-time commitment is offered. Discuss requirements before purchase.
Need our security package?
Read our data processing terms and discuss any additional review requirements. No certification report is currently offered.
Statements on this page describe our current controls and our certification roadmap; treat any certification not yet issued as in progress rather than an attestation. Full terms, our data processing addendum and a plain list of what the platform does and does not do yet are in the legal centre.