Total confidence
Digital Integrity
Get enterprise-grade security for your most sensitive agreements. Our platform is compliant with E-SIGN, UETA, eIDAS, and GDPR.
Status
All systems operational
Regulatory compliance
standard across the globe
ksign is engineered for global trust, meeting the most rigorous standards for document integrity and data protection across North America, Europe, and Asia.
SOC 2 Type II
ksign is SOC 2 Type II compliant. We provide our latest AICPA SOC 2 Type II report and assertion of compliance upon request for enterprise customers.
CCPA
The California Consumer Privacy Act (CCPA) establishes consumer privacy rights for California residents and regulates businesses handling personal information.
Data Privacy Framework
The Data Privacy Framework (DPF) Program satisfies EU, UK, and Swiss requirements for transferring personal data securely to US-certified participants.
HIPAA
ksign is fully committed to helping healthcare providers protect patients' Protected Health Information (PHI) via the Privacy Rule and Administrative Safeguards.
FERPA
ksign helps schools facilitate electronic communication between educators, administrators, and parents in full compliance with FERPA (20 U.S.C. § 1232g).
PCI-DSS
ksign integrates with PCI-DSS compliant payment processors to offer payment processing via credit cards without ever storing card data on our servers.
Data Residency in US or EU
Choose where your data gets stored and processed. ksign provides the flexibility for your business to utilize two equally secure regional locations.
21 CFR Part 11
ksign offers 21 CFR Part 11-compliant workspaces to help regulated industries meet FDA requirements for electronic records and signatures.
FIPS 140-2 DSS
ksign uses FIPS-validated AWS CloudHSM cryptographic services for document signing. Complies with the latest FIPS 140-2 Digital Signature Standard.
Software security
by design
Every layer of our infrastructure is hardened with industry standard security controls to protect your data from the application layer down to the metal.
Servers and networking
All servers that run ksign software in production are recent, continuously patched Linux systems. Hosted services include AWS RDS, S3, and standard VPC isolation.
Storage
ksign stores document data such as metadata, activity, original files, and customer data in multiple regions with AES-256 encryption at rest.
Coding and testing
Our engineering team leverages industry standard programming techniques including documented peer reviews and vulnerability scanning based on OWASP reports.
Employee access
We follow the principle of least privilege. Employees are instructed to use this principle for customer support and when diagnosing software bugs.
Isolated environments
The production network segments are logically isolated from other Corporate, QA, and Development segments via security group boundaries.
Customer payment info
ksign uses external secure third party payment processing (Stripe/PayPal) and does not process, store, or transmit any payment card data.
System monitoring
Our production application and infrastructure components are monitored 24/7/365 by dedicated teams. Critical alerts trigger on-call DevOps response.
Service levels and backups
ksign infrastructure utilizes multiple layers of techniques for high availability. We perform daily automated backups of all databases with encryption.
Vulnerability testing
Application security is evaluated by the development team in sync with the release cycle. This includes static and dynamic application security testing (SAST/DAST).
Application architecture
Our web application is multi-tiered into logical segments separated from each other in a DMZ configuration to ensure maximum protection.
Identity Verification
Add a robust layer of security with passcode verification, SMS verification, or ID Check options to ensure only verified recipients can access sensitive info.
Secure and fair AI
We apply rigorous standards for secure data handling and protection against AI-specific threats. Our AI systems are tested for fairness and bias.
Responsible Vulnerability disclosure
In case you found a potential security vulnerability, please follow ourResponsible Vulnerability Disclosure Processto report it directly to our ksign Security team.