Security, privacy & reliability
SwiftSignet is designed so document content, signatures, billing state and customer history remain durable as the application evolves.
Data preservation
Production migrations are additive and release checks reject common destructive operations.
Signing security
Signed links are tokenized, expiration-aware and protected by server-side validation.
Billing integrity
Plan state, credits and lifetime Free usage are persisted independently from UI rendering.
Infrastructure
SwiftSignet uses managed application delivery, PostgreSQL, object storage when configured, transactional email and Stripe-hosted payment infrastructure. Secrets are supplied through deployment environment variables and are not intended to live in source control.
Operational controls
- Rate limiting for sensitive endpoints
- Durable idempotency for important API mutations
- Audit events for signing activity
- Signed-document integrity hashes
- Account data export and deletion controls
- Health and readiness endpoints for deployment checks
- Session revocation controls
Security reporting
Report suspected security issues to hello@swiftsignet.com. Do not send passwords, private signing tokens or unnecessary personal information.
Certification status: SwiftSignet does not currently claim SOC 2, ISO 27001, HIPAA, FedRAMP or another formal certification unless separately documented.