FAQ & Security, ZingZee Sign

1. Getting started

How do I send an envelope?

Three steps inside the Studio:

Click New envelope, drop in one or more PDFs (multi-file is supported and they merge in upload order).
Add your recipients with name + email, then drag-place the fields each signer should fill (signature, initials, date, text, checkbox).
Click Create & send. We email each signer a private link in routing order.

How do I add multiple recipients in order?

In the Recipients panel, add each person and set their order. Signer #1 gets their email first; signer #2 is notified only after signer #1 completes. Carbon-copy (CC) recipients receive the final signed PDF when the envelope is complete but never have to sign.

How do templates work?

Save a frequently-used field layout once, then reuse it on future envelopes with the same document type. Templates store field types, positions, and signer assignments, not the document itself.

How does a signer complete a document?

The signer clicks the private link in their invitation email, reviews the document with their fields highlighted, fills each required field, draws or types their signature, and submits. They get a copy of the fully signed PDF by email.

How do I track envelope status?

The Envelopes tab inside the Studio shows every envelope you have ever sent with a per-recipient status pill (Pending, Viewed, Signed, Declined). The detail page shows the full timeline of events for each recipient.

How do I download a signed PDF?

From the Envelopes list, click into the envelope detail. A Download signed PDF action appears once every signer has completed. The full audit certificate is the final page of the PDF.

2. Security & compliance

What we do

TLS in transit: all traffic uses TLS 1.2 or higher.
AES at rest: original PDFs, signed PDFs, signature and initials images, and ID uploads are encrypted on disk with a master key stored outside the project tree (mode 600).
Per-sender accounts: bcrypt-hashed passwords plus optional TOTP-based multi-factor authentication.
Rate limiting: login attempts, signing-link access, and SMS or KBA checks are rate-limited per IP to slow brute-force attacks.
Append-only audit log: every security-relevant event is written to a hash-chained JSON-line log. Any tampering with a past line breaks the chain and is detectable.
Post-completion purge: 24 hours after an envelope completes, we delete the original and signed PDFs from our storage. Your own storage destination keeps the permanent copy.

Compliance matrix

Standard	Status	What this means
ESIGN (US federal)	COMPLIANT	Electronic signatures captured here are legally binding under 15 U.S.C. 7001.
UETA (US state)	COMPLIANT in all UETA states	Recognised in every US state that has adopted UETA.
eIDAS Simple	COMPLIANT	Meets the EU Simple Electronic Signature class.
eIDAS Advanced (AES)	COMPLIANT (Item 16)	Per-envelope assurance levels: SMS OTP, knowledge-based questions, or government-ID upload, with RFC 3161 timestamping.
eIDAS Qualified (QES)	NOT pursued at this time. Available via partnership for specific EU deals.	Requires a Qualified Trust Service Provider; we partner on demand.
GDPR	ALIGNED. DPA available on request. Sub-processor list public. (Item 15)	Data minimisation, 24h purge, public sub-processor list, signable DPA template.
HIPAA	NOT pursued at this time. Not for use with Protected Health Information.	Do not use ZingZee Sign for PHI until we ship a HIPAA program.
SOC 2	NOT pursued at this time. Working toward general security baseline equivalent.	No formal audit; we publish our posture instead.
PCI	N/A (we do not process payment cards)	Out of scope by design.

For the full detail, read our security changelog or our internal sub-processor list. Engineering questions: [email protected].

3. Bring-Your-Own Storage (BYO Storage)

Your documents. Your storage. Always.

ZingZee Sign holds documents only long enough to route them between signers. The signed PDF lands in your Dropbox, Google Drive, OneDrive, S3 bucket, or stays email-only. Our servers retain nothing after the 24-hour washout.

Why this matters

You keep full chain-of-custody of your own contracts. No vendor lock-in.
If ZingZee Sign ever shuts down, you lose zero documents. They are already in your own storage.
If law enforcement, opposing counsel, or a regulator subpoenas us, our hands are clean: we do not have the docs to hand over after 24h. You are the sole custodian.
Reduces our liability footprint and your exposure surface in one move.
Aligns with the GDPR data-minimisation principle out of the box.
Email-only mode is even more minimal: we never persist the signed PDF at all post-delivery.

Storage options

Mode	Where signed PDFs live	ZingZee Sign retention	Best for
Dropbox	Your Dropbox	24h then purged	Most users
Google Drive	Your Drive	24h then purged	G-Suite shops
OneDrive	Your OneDrive	24h then purged	M365 shops
S3-compatible	Your bucket	24h then purged	Enterprises, compliance teams
Email-only	Email inboxes only	24h then purged	Privacy-first, minimal footprint

Compared to traditional e-signature platforms, your documents stop being someone else's data on someone else's hard drive. They are yours, in your storage, the moment they are signed. We invert the default, and we make it the only mode we ship.

4. Common questions

Is this legally binding?

Yes for US contracts under ESIGN and UETA, and yes for EU contracts at the Simple and Advanced eIDAS classes. For Qualified eIDAS (QES) we partner on demand. We do not yet ship for HIPAA-regulated PHI.

How long are documents kept?

24 hours after completion, your original and signed PDFs are purged from our storage. The permanent copy lives in the storage destination you chose at envelope creation (Dropbox, Drive, OneDrive, S3) or in the email inboxes for email-only mode.

Who can see my documents?

Only the sender and the assigned signers. ZingZee Sign staff have no production access in normal operation. Operational access (an engineer responding to an incident) is logged in the audit chain.

What if I lose my signing link?

Ask the sender to use the Resend link action from their Envelopes dashboard. The token is regenerated and emailed to you again.

Where is the service hosted?

Currently a single US-region VM. The customer's chosen storage dictates true residency for signed documents; our cache is incidental and short-lived. EU residency is on the roadmap and contingent on EU customer demand.

Do you sell or share data?

No. We have no advertising, no analytics tracking of signers, no data resale arrangement, and no plans to add any.

How do I delete my data?

Your own storage is your own delete. Inside ZingZee Sign, completed envelope contents are purged automatically at 24h. For a formal DSAR (export or delete), contact [email protected].

Can I export everything and leave?

Yes. You already have everything: the signed PDFs are in your storage, not ours. There is no proprietary export to extract.

Last reviewed: 2026-06-17. Posture changes are versioned at /security/changelog.