Your document stays yours
BuiltSign is built with privacy as its foundation. Your documents are encrypted and processed on EU-region infrastructure, never shared with anyone, and only accessed to provide technical support when you explicitly request it.
How we protect your data
TLS 1.3, encryption in transit
All traffic between your browser and our servers is encrypted with TLS 1.3. Nobody can intercept your documents during transfer.
AES-256, encryption at rest
Documents are stored with AES-256 server-side encryption in EU-based infrastructure, the industry standard for banking and government data.
EU data storage
All your data, including documents, signatures, and audit trails, is processed and stored on EU-region infrastructure. Payment, email delivery, and identity verification services may involve international sub-processors; see our Privacy Policy for the full list.
What we do NOT do
Privacy is not a marketing term for us. These are hard guarantees:
- We do not access your documents unless required to provide technical support at your explicit written request.
- We do not share your data with anyone. Not with third parties, not with governments, not with anyone.
- We do not use your documents for AI training
- We do not place advertising trackers
- Documents are automatically deleted after the retention period expires
- The only exception: when competent authorities submit a legally valid warrant related to a serious criminal matter (such as a terrorist threat). In that case we cooperate strictly within the bounds of applicable law.
GDPR compliant
BuiltSign is fully compliant with the General Data Protection Regulation (GDPR). You always have the right to access, correct, and delete your data. A Data Processing Agreement (DPA) is available for business users.
- Right of access
- Right to erasure
- Right to data portability
- Data Processing Agreement available
Our infrastructure meets the highest standards
EU-certified database infrastructure
Redundant, EU-hosted data storage. Our infrastructure providers hold SOC 2 Type II and ISO 27001 certifications.
Bank-grade document storage
Documents stored with AES-256 server-side encryption in EU infrastructure. ISO 27001 certification is held by our cloud storage provider.
PCI-DSS Level 1 payments
Payment processing meets PCI-DSS Level 1, the highest security level in the payment industry.
Edge-secured application hosting
Automatic HTTPS, DDoS protection and SOC 2-compliant hosting with global edge security.