Security Center
Qik Sign is built with security and data protection as core requirements. This page describes our product controls, infrastructure practices, and contractual commitments.
Product security controls
Every Qik Sign account includes security features that give teams control over their document workflows.
Signer verification
When enabled, signers must verify their identity through an email confirmation code before accessing a document. This reduces the risk of unintended parties viewing or signing agreements.
Audit trail and completion certificates
Every envelope generates a detailed event history with timestamps and a completion certificate. These records capture when a document was sent, viewed, signed, declined, or expired.
Document controls
- Document expiration and decline controls.
- Signing order enforcement for sequential workflows.
- Field validations and formatting rules.
Access controls
- Role-based access for template and account management.
- Individual user accounts with attributable activity.
- SSO integration on qualifying plans (Business Plus and Enterprise).
Infrastructure and data protection
Qik Sign operates on modern cloud infrastructure with industry-standard security practices. Specific certifications, encryption standards, and data residency details are available upon request as part of your organization's security review.
Data encryption
Data is encrypted in transit and at rest using industry-standard protocols. Specific algorithms and key management practices are documented in our security documentation.
Data storage and retention
- Document storage follows the retention terms in your plan and the applicable data processing agreement.
- On qualifying plans, you can use supported cloud storage providers for document storage.
- Data export and deletion processes are available to account owners upon request.
Infrastructure security
- Cloud infrastructure with access controls and monitoring.
- Regular vulnerability assessments and patch management.
- Access restricted to authorized personnel with justified need.
Contractual commitments
Enterprise customers can include security and compliance commitments in their service agreement. These may include:
- Service-level agreement (SLA) with defined uptime and performance targets.
- Data Processing Addendum (DPA) for GDPR compliance.
- Security documentation for procurement and vendor reviews.
- Compliance support for security questionnaires and audits.
Contact our sales team to discuss your organization's specific security and compliance requirements.
Certifications and compliance
Qik Sign is designed to support organizations subject to US and EU regulatory requirements, including ESIGN, UETA, and eIDAS frameworks for electronic signatures. Organizations should evaluate Qik Sign against their specific compliance obligations with the assistance of their legal counsel.
Security reporting
If you believe you have discovered a security vulnerability in Qik Sign, please contact our security team. We will acknowledge receipt and provide a timeline for evaluation and remediation.
Security contact: security@qiksign.com