Security Overview
Built with enterprise security controls to protect your documents and data
Australian Hosted
Encrypted at Rest
SOC 2-Aligned Practices
Audit Trail
Security Controls
Authentication & Session Security
Enterprise-grade authentication protecting your accounts
- Google-backed authentication platform with OAuth 2.0 SSO
- Short-lived session tokens with a 15-minute idle timeout and re-authentication
- Rate limiting on authentication endpoints
- Magic link passwordless sign-in option
Tenant Isolation
Complete data separation between workspaces
- Workspace-based tenant isolation
- All requests scoped to user's workspace
- Role-based access controls (RBAC)
- Envelope-scoped document authorization
- Signing field isolation: recipients can only sign their own fields
- Sub-group access controls
Signing Link Security
Secure, tamper-proof signing process
- High-entropy opaque signing tokens
- Tokens stored as hashes only
- Time-limited token expiration
- Single-use signing tokens
- Witness co-signing with separate secure tokens
- Full audit trail of link activity
Audit Trail Integrity
Tamper-evident audit logging
- Comprehensive event logging
- Cryptographic hash chain verification
- Verification endpoints for chain integrity
- Timestamped activity records
- Export and reporting capabilities
Infrastructure Security
Australian-hosted, enterprise infrastructure
- Data hosted in Google Cloud Platform: Sydney (australia-southeast1)
- Managed database with Australian data residency
- Encryption at rest (AES-256) and in transit (TLS 1.2+)
- Automated backups with point-in-time recovery
- DDoS protection via Cloud Run and Google Front End
- SMS delivery via Australian carrier routes
Access Controls
Fine-grained permissions and controls
- Admin and standard user roles
- Granular permission settings
- Workspace administrator controls
- Audit log access management
- API access controls with developer keys
- Custom branding per workspace
About SignAndGo
Company: Fintech Development Pty Ltd (ACN 655 608 969)
ACN: 655 608 969
Address: Level 1, 18-20 Knuckey Street, Darwin NT 0800
Contact: sign@signandgo.com.au
Security & Procurement FAQ
Have security questions?
Contact us for security documentation, questionnaires, or to schedule a security review.