Security & document care

Esyned is built to do as little as possible with your documents, and to protect what it does keep.

Free PDF tools: nothing leaves your device

The free tools at esyned.com/tools open, merge, rotate, annotate and sign PDFs inside your browser tab. There is no upload: the file is never sent to our servers.

Your Esyned account

• Hosted on our own servers at DigitalOcean in Frankfurt, Germany (EU).
• Documents you save or send for signature are stored encrypted.
• Every completed signing has an audit trail and a digital seal, so later changes can be detected.
• Signers open a private, unguessable link. They do not need an account.
• Payments are handled by Paddle. We never see or store your card details.

How we run the service

• HTTPS everywhere, with a strict Content Security Policy, frame blocking and referrer restrictions.
• Administrator access needs multi-factor authentication. Server access uses keys only, behind a firewall.
• Payment notifications from Paddle are verified by signature before they change a subscription.
• Encrypted backups are kept separately from the server, and restores are tested.
• No advertising trackers, no external fonts and no cross-site marketing cookies.

Claims we do not make

Esyned does not claim ISO 27001 or SOC 2 certification, qualified trust-service-provider status or end-to-end encryption. Esyned signatures are electronic signatures with an audit trail, not qualified electronic signatures (QES).

Reporting a concern

Report a security concern to support@esyned.com with the subject “Security report”. Privacy questions go to privacy@esyned.com and misuse reports to abuse@esyned.com. Please do not include passwords, signing links or payment details in a first report, and do not test in a way that disrupts other users or accesses their information.