E-signature security and compliance Security that
shows its work
LedgerSign is built so you never have to take our word for it. Every document carries its own evidence: a consent record, an audit trail, and a fingerprint anchored on the Hedera public blockchain.
How does LedgerSign meet ESIGN and UETA requirements?
Consent is captured, versioned, and preserved before a single field is filled. Both laws ask for consent, intent, and a retained record; each one is a first-class object in LedgerSign.
ESIGN & UETA consent
Before anyone signs, LedgerSign captures their consent to use electronic records and signatures, as the ESIGN Act and UETA require.
Disclosure versioning
We record which version of the electronic-records disclosure each signer accepted, so you can show exactly what they agreed to.
Certificate of Completion
Every completed document ships with a certificate generated directly from the audit record.
The Certificate of Completion, generated from the audit record
The statutes themselves: the ESIGN Act (Public Law 106-229) and the Uniform Electronic Transactions Act. Our plain-language guide to what makes an electronic signature legally binding explains how consent, intent, and retention map to the product.
What does the audit trail record?
Every action on a document is logged: who did it, when, from which IP address, and with which browser. The log is append-only, and the Certificate of Completion is generated from it, not from anything a user can touch. API users can pull the same record through the audit-trail endpoint.
- Actor, timestamp, IP address, and user agent on every event
- Covers creation, sending, viewing, signing, and completion
- Append-only: nothing is rewritten after the fact
- Exportable for reviews and disputes
From the product: a document's audit timeline
Where does the proof live? On Hedera, outside our servers
On completion, the signed document is hashed with SHA-256 and the hash is written as a message to the Hedera Consensus Service. The transaction id is printed on the certificate and is yours to keep. Anyone can re-hash the document and check it against the record on HashScan, with or without us. The verify tool does it in the browser, and this explainer covers why we chose Hedera.
- SHA-256 fingerprint of the final signed PDF
- Anchored on Hedera with a public transaction id
- Timestamped and permanent once written
- Independently verifiable by any third party
Anchor record
- network
- hedera
- transaction
- 0.0.481…@1753…
- anchored
- 2026-07-24 14:02:14 UTC
- status
- ✓ verifiable
How are documents protected at rest, in transit, and at sign-in?
Four controls, each one something you can ask us to demonstrate.
Encrypted storage
Documents are stored encrypted on AWS S3.
Time-limited access
Files are served through presigned URLs that expire.
TLS in transit
Every connection to LedgerSign is encrypted with TLS.
AWS Cognito authentication
Account sign-in is handled by AWS Cognito.
Which certifications does LedgerSign hold?
None yet. LedgerSign is not SOC 2 certified, not ISO 27001 certified, and not HIPAA compliant, and we do not describe ourselves as GDPR certified. We would rather you read that here than discover it in a security questionnaire.
What you can verify today without trusting us: the consent record on every document, the append-only audit trail, and a document hash on a public ledger. If your procurement process needs a completed questionnaire or a subprocessor list, ask us and we will send what we have.
Who can see what? Four roles, clear boundaries
Every member of your organization gets exactly the access their role requires.
| Role | Access |
|---|---|
| Owner | Full control of the organization, including billing and deletion. |
| Admin | Manages documents, templates, and members. No billing access. |
| Member | Creates and sends documents, uses templates. |
| Viewer | Read-only access. Useful for auditors and reviewers. |
Questions about our security practices?
Talk to our teamCheck our work
on a real document
Send a document on the free plan, or drop any LedgerSign PDF into the verify tool and compare it with the public ledger yourself.
No credit card required · Free plan includes 5 documents to try · Cancel anytime
Page updated September 13, 2026