Legal

Data Processing & Security Policy

Last updated: 24 June 2026

This policy describes how NibSign approaches the security of your documents and signing activity. It is designed with security and traceability in mind.

Secure signing links

Each signer receives a unique, signer-specific link to review and sign. Links are tied to the intended recipient and the specific document, so recipients only access the documents assigned to them.

Document access controls

  • PDF and Word document workflow
  • Admin dashboard access for senders
  • No public browsing of documents
  • Recipients only access their assigned documents

Audit trail

NibSign records document events with timestamps, including views, signatures, signer activity, and completion. This audit trail helps every signing request stay traceable.

Storage practices

Completed signed documents are stored securely so the relevant parties can access them, and signed copies are emailed to all parties. Access to stored documents is controlled.

Your responsibilities

  • Keep your account credentials confidential
  • Only send documents to recipients entitled to receive them
  • Download and retain your own copies of completed documents
  • Notify us promptly if you suspect unauthorised access to your account

No overclaimed certifications

NibSign is designed with security and traceability in mind. We do not claim formal certifications or compliance frameworks — such as SOC 2, ISO 27001, HIPAA, or GDPR certification — unless and until they are implemented. Electronic signature laws vary by jurisdiction; users should seek legal advice for specific regulated documents.