ShockSign signatures are legally binding and recognized worldwide. We comply with major e-signature laws and data protection regulations across 30+ countries.
How ShockSign meets the requirements of each major e-signature regulation.
The Electronic Signatures in Global and National Commerce Act gives electronic signatures the same legal status as handwritten signatures. ShockSign captures intent to sign, consent, signature-record association, and full audit trail retention.
The Uniform Electronic Transactions Act validates electronic records and signatures in state-level commerce. ShockSign meets all UETA requirements for attributable, tamper-evident electronic signatures.
ShockSign meets eIDAS Advanced Electronic Signature (AES) requirements: signatures are uniquely linked to signatories via PAdES with per-signer PKCS#7/CMS, identified via email verification and optional MFA, and any data changes are detectable via SHA-256 hashing and RFC 3161 timestamps.
PDF Advanced Electronic Signatures with PAdES-B-B baseline signatures using PKCS#7/CMS detached signatures embedded in PDF signature dictionaries. RSA-2048 with SHA-256, verifiable in Adobe Acrobat and compliant PDF readers.
ShockSign supports HIPAA compliance for healthcare documents with automatic session timeouts, 7-year retention policies, BAA tracking, breach notification workflows, minimum necessary access controls, and encrypted audit trails.
Trusted timestamps from RFC 3161-compliant Time Stamping Authority, plus Bitcoin blockchain anchoring via OpenTimestamps for independent, immutable proof of document existence at a specific point in time.
ShockSign e-signatures are legally valid for most business documents in these jurisdictions.
Your documents and personal data are protected by industry-leading security practices.
AES-256-GCM with per-document derived keys. PII fields use searchable encryption via HMAC-SHA256 blind indexes.
TLS 1.3 for all connections. HSTS enforced. No data transmitted in plaintext.
Configurable retention policies per plan. HIPAA-compliant 7-year retention available. Secure deletion on request.
Role-based access, session timeouts, optional MFA, and detailed audit logs for every action.
Documents stored on US-based infrastructure. Contact us for specific data residency requirements.
Automated breach detection and notification workflows compliant with HIPAA and GDPR timelines.
Our team can walk you through how ShockSign meets your industry's requirements.
Contact Us