Trust
Safe, private, and provable.
Everything your business runs on can live in XOsign, so you should know exactly how we protect it. Every promise on this page points to the feature behind it.
Only you see your data
No other account can reach it.
Never used to train AI
Your documents teach no one's model.
Signatures that hold up
Built to US e-signature law.
Proof anyone can check
No account needed, no trust in us.
Your data stays yours
Your contracts, payroll, bank statements and emails are the most private things a business has. Here is what protects them.
No other account can see yours
The walls between accounts are built into the database itself, not left to the app to remember.
For your IT person: Postgres row-level security on every table that holds account data.
Locked on the way and at rest
Everything is encrypted while it travels and while it is stored. The keys that could get around this never reach a browser.
For your IT person: TLS in transit, AES-256 at rest; service keys live only in server functions.
Never used to train AI
Your documents are never used to train a model, ours or anyone's. Our AI provider, OpenAI, is set not to keep what we send it.
For your IT person: OpenAI API with storage turned off on every request.
We don't hold your card
Payments go through Stripe. We keep only a customer number, never card details.
Your original is never changed
What you upload stays exactly as you uploaded it. Any editable copy is a separate working copy, with the original kept beside it.
Take everything with you, any time
Download a summary of everything we hold on you, or the full bundle with every file, from Settings → Privacy.
Our error reports never see your papers
When something breaks, we get the error and nothing else: no screens, no cookies, no addresses.
Signing in, for you and your team
Getting in should be easy for you and hard for anyone else.
Sign in your way
Email and password, Google, or a one-time link by email.
Two-step sign-in
Turn on an authenticator code for yourself today. An owner can require it for the whole team, with a warning and a grace period, so no one is locked out mid-task.
Signers don't need an account
Each person gets their own private link for that one document, and it can't be reused.
For your IT person: A 192-bit single-use token for each recipient and document.
Signatures that hold up
In the US, an e-signature counts when the signer agreed to sign electronically and there is a record of what happened. XOsign does both, every time.
Consent before anyone signs
Signers see the electronic-records consent and accept it. That acceptance is saved with the signature.
For your IT person: Built to ESIGN and UETA.
Who signed, when, and from where
Every step (sent, opened, signed, declined, cancelled) is recorded with the time, address and device.
Nobody can quietly change the record
Not our staff and not our own app. The history can only be added to, never edited or erased.
For your IT person: Append-only audit table; update and delete are revoked in the database.
Signed means really signed
Being named on a document isn't signing it. You count as signed only when your own signature marks are on the page.
Read it in your own language
A signer can read the document in the language they understand, which is where courts look when a signature is challenged.
We don't play lawyer
XOsign points out what contracts usually include. It never tells you a contract is or isn't valid. Big calls stay with you and your attorney.
Proof anyone can check
You shouldn't have to take our word for it. Neither should the other side, their lawyer, or a judge.
A fingerprint on every signed document
A unique code that changes completely if even one character of the file changes.
For your IT person: SHA-256 hash of the completed PDF.
A timestamp from someone who isn't us
An independent service signs that fingerprint with the time. Even if XOsign disappeared, the proof would still stand.
For your IT person: RFC 3161 timestamp from FreeTSA.
- 1
Open the check page
No account, no sign-in.
- 2
Drop in the signed PDF
It's checked in your browser; only the fingerprint reaches us.
- 3
See the answer
Whether it matches, when it was signed, and by how many people. Never what it says.
Know where every copy went
Most documents stop being yours the moment they leave. XOtrace keeps the thread.
Every copy that leaves is on record
A download, a print, an email attachment: each gets its own serial, who took it, when, and from where.
Only your account can read that record
No one, including us, can change or delete it through the app.
A hidden mark that survives paper
On paid plans, every copy carries a mark that survives printing, scanning and screenshots, so a leaked page leads back to where it came from.
Where we're headed
The honest list. We won't call something finished until it is.
Every plan, including the free one, gets the same protection.
The privacy, the signature record, the fingerprint and the timestamp are never an upgrade.
Delete your account
Ask from Settings. It waits 30 days so a mistake can be undone, then your data is erased. The signing history stays, because a legal record you can erase isn't one.
Accessibility
We aim for WCAG 2.1 AA, and our statement says plainly where we meet it and where we don't yet.
SOC 2
A SOC 2 Type II audit is planned. We haven't started one, and we claim no certification today.
Found something that looks wrong? Security researchers and IT reviewers can write to security@xosign.ai. We reply to every report within 24 hours.
Every outside service we use