Signi and IT Security

With Signi, your documents are safe. The security of your data is our top priority. We encrypt everything and store it on servers within the European Union.

100% protection. All data flowing into and out of Signi is secured using an HTTPS certificate, and documents are protected by unique hash keys that prevent any tampering with the content.

Your data never leaves the EU. Signi runs in the Microsoft Azure environment, across two data centers in Europe. MS Azure guarantees the highest level of security and ensures that data is processed exclusively within the EU.

How do we handle your data? The security of your documents and stored data is our main priority. We are fully aware of the sensitivity of the information you enter into the Signi environment.

Every data transfer, every piece of information flowing into and out of Signi is secured using an HTTPS certificate, and documents are protected by unique hash keys that prevent any tampering with the content. Every signature is immediately logged and stored together with all data guaranteeing its authenticity and integrity. We keep detailed logs of all activities within the application.

Critical data stored in our databases is encrypted, so no one has access to the open data from your documents.

Legality and enforceability. Documents signed digitally using Signi are recognized, valid, and legally binding in almost every industry and civilized legal jurisdiction in the world. A digital signature used in the Signi application has the same legal weight and enforceability as a paper document signed by hand. The legal regulation of digital signatures may differ in various parts of the world; we guarantee legality throughout the entire European Union and the USA.

Documents created in Signi fully comply with European legislation and are valid, binding, and legally enforceable in the Czech Republic, Slovakia, and the entire European Union. Signi also fully respects European Union Regulation No. 910/2014 (eIDAS) on electronic identification and trust services for electronic transactions in the European market, which also includes the regulation of digital document signing.

GDPR compliant. Signi is fully GDPR compliant. All processes, terms, documents, and technical solutions comply with this regulation governing the protection of the personal data of service users. You can also review the complete Privacy Policy.

We hold ISO27001 certification. Every year we undergo certification according to the ISO/IEC 27001 standard by the renowned company DNV, which independently confirms that our information security management system meets internationally recognized standards. We have established, and regularly review, processes concerning security, data storage, and data management, so we can continuously respond to new threats and operational changes. In accordance with the standard, we have implemented key policies – including, among others, an information security policy, an access management policy, an information classification and protection policy, a backup and encryption policy, a security incident management policy, and a business continuity policy. You can therefore rely on Signi being a secure partner for both companies and corporations.

Compliance with DORA regulation. The DORA regulation (Digital Operational Resilience Act) primarily targets financial sector entities and their ICT service providers. We are not directly subject to this European regulation, yet we have our processes set up to comply with its requirements – particularly in the areas of ICT risk management, operational resilience, testing, and recording of security incidents, as well as supplier management. This allows us to be a reliable and predictable partner for clients from regulated sectors, one that does not represent a weak link in their own operational resilience chain.

We meet the lighter regime of the NIS2 regulation: The NIS2 directive raises cybersecurity requirements for selected categories of entities and their suppliers. Although we are not directly subject to this regulation, we have our processes set up to comply with its principles – from cyber risk management and supply chain security, through incident reporting and handling, to regular training and service continuity. Signi thus enables companies and corporations covered by NIS2 to use our service without worrying that it would weaken their own regulatory compliance.