Enterprise Security

Security & Compliance

ShockSign protects every document with AES-256-GCM encryption, PAdES digital signatures, RFC 3161 timestamping, blockchain anchoring, and full HIPAA compliance.

How We Protect Your Data

Security built into every layer, from cryptographic signing to encrypted database fields.

AES-256 Encryption

All documents encrypted at rest with AES-256-GCM and per-document derived keys. TLS 1.3 in transit.

PAdES Digital Signatures

PDF Advanced Electronic Signatures with PKCS#7/CMS embedded in PDF signature dictionaries, verifiable in Adobe Acrobat.

Tamper-Evident Sealing

SHA-256 document hashing with RFC 3161 trusted timestamping and Bitcoin blockchain anchoring via OpenTimestamps.

Encrypted Audit Trails

26+ event types logged with encrypted IP addresses and user agents. Complete chain of custody for every action.

HIPAA Compliant

Automatic session timeout, 7-year retention, BAA tracking, breach notification, and minimum necessary access controls.

Searchable Encryption

HMAC-SHA256 blind indexes enable searching encrypted fields without decryption. PII is never stored in plaintext.

Compliance Standards

Signatures created with ShockSign are legally binding and recognized worldwide.

HIPAAESIGN ActUETAeIDASPAdESRFC 3161Australian ETA

Your data is safe with us

Enterprise-grade security on every plan. Questions about compliance?

Contact Us