Trust center
Your contracts aren't kept here.
asSigned holds as little of your documents as it can, for as short a time as it can. This page says exactly what it keeps, how it protects it, and who else handles it.
What asSigned keeps, and for how long
Your signed contracts live in your Notion, attached to the row, and in the inbox of everyone who signed. Those are the copies to keep. asSigned holds a document only while it's out for signature.
| What | Kept |
|---|---|
| The document: the page's text, or the PDF made from the Word or PDF file it was sent as, the PDFs, files signers attach, drawn signatures, images and every answer | Only while it's out for signature. Once everyone has signed and the signed PDF is on its Notion row, it's deleted. If it couldn't be put on the row, it's kept 7 days so you can download it, and the row says until when. A cancelled or expired document is deleted at once, and a draft you never send after 7 days. A Word or PDF file in your row is never kept as it is: only the PDF made from it, for the same time. |
| The people in it: signers' email addresses, IP addresses and browsers, and who did what | Deleted with the document. The signed PDF's last page still shows them. |
| The record: the document's title, who sent it, the signers' names, when each signed, and the signed PDF's fingerprint | As long as your account exists, so a signed copy can always be proved genuine. |
| How many free documents an email address and a Notion workspace have had, and which free-time codes they've used | 2 years after last used, even once an account is closed, so the free plan and a code can't be claimed again and again. It's kept as a one-way fingerprint, never the address. |
| A reply to a signing email | Only until it's passed on to the sender, usually within a minute, and never more than a day. asSigned keeps no copy. |
| Backups | 7 days, in two US regions: Oregon, and Northern Virginia in case Oregon is lost. Anything deleted is gone from them within a week. |
| Logs | 30 days. |
To have your account and everything in it deleted, or to get a copy of it, write to support@as-signed.com.
Encrypted, with a key that's yours
- A key for each account.asSigned's copy of your documents is encrypted with AES-256 using a key that belongs to your account alone. That key is itself locked with a master key kept in AWS Secrets Manager, never beside your documents. A copy of asSigned's database or file storage on its own can't be read.
- Your signed PDFs stay yours.The signed PDF attached to your Notion row and emailed to every signer is an ordinary PDF. It opens anywhere, for good, whatever happens to asSigned or your account.
- Closing your account closes asSigned's copy for good.Deleting your account deletes everything asSigned held for it at once, a document still out for signature included, and its key. Our backups last 7 days, so within a week it's gone from them too. If we ever had to restore from a backup made in that week, we'd close the account again first. Your own copies aren't touched.
- Encrypted twice at rest.On top of asSigned's own encryption, AWS encrypts the database and the file storage.
- Encrypted on the way.Every connection to asSigned uses HTTPS, and browsers are told to use nothing else.
Proving a signature
- A certificate on every signed PDF.Its last page says who signed, when, from where, and the consent each person gave to sign electronically.
- A fingerprint that outlives the copy.asSigned records each signed PDF's SHA-256 fingerprint. Its Verify page checks any copy against that record, in your browser, without the file leaving your computer, and keeps working after asSigned has deleted its own copy. A copy changed in any way, however small, doesn't match.
- Recognised in law.asSigned makes electronic signatures under the US ESIGN Act and UETA, and simple electronic signatures under the EU's eIDAS regulation.
Who and what can reach your documents
- Only what you share.asSigned sees only the Notion pages you share with it, and you can change that in Notion at any time. Its connection to your Notion is stored encrypted.
- Signing links that can't be guessed.Each is a long random code, stored only as a fingerprint. It expires after 14 days unless you choose otherwise, and signs once.
- Keys stored as fingerprints.A key you make for an assistant is shown once and stored only as a fingerprint.
- No card numbers.Payments go straight to Stripe. asSigned never sees a card number.
- One person, one account.asSigned runs in its own AWS account, apart from anything else, and only one person, a co-founder of Work As Intended, has access to it.
Who else handles your data
The companies asSigned relies on to run. Your Notion workspace is yours: asSigned reads and writes only what you share with it.
| Company | What for | Where |
|---|---|---|
| Amazon Web Services | Running asSigned: its servers, database, file storage and email | United States (Oregon, with backup copies in Northern Virginia) |
| Cloudflare | The network in front of asSigned and this website | Worldwide |
| Stripe | Payments, for accounts that upgrade | United States |
| Notion | asSigned's own support requests: who asked, about which account and document, and what asSigned found. Never a contract's text | United States |
Certifications
asSigned doesn't hold SOC 2 or ISO 27001 certification. Rather than a badge, this page says plainly what it does, and it changes when asSigned does.
Report a problem
If you've found a security problem in asSigned, write to support@as-signed.com with what you found and how to see it. Please don't look at or change anyone else's documents to show it. You'll get a reply, and a fix as fast as one can be made.
Last updated 14 October 2026.