Your document stays yours
BuiltSign is built with privacy as its foundation. Your documents are encrypted and stored in the EU, never read by us, and never shared with anyone.
How we protect your data
TLS 1.3 — encryption in transit
All traffic between your browser and our servers is encrypted with TLS 1.3. Nobody can intercept your documents during transfer.
AES-256 — encryption at rest
Documents are stored with AES-256 server-side encryption in EU-based infrastructure — the industry standard for banking and government data.
EU data storage
All your data — documents, signatures, audit trails — is stored exclusively in the European Union.
What we do NOT do
Privacy is not a marketing term for us. These are hard guarantees:
- We do not read your documents
- We do not share your data with anyone — not with third parties, not with governments, not with anyone
- We do not use your documents for AI training
- We do not place advertising trackers
- Documents are automatically deleted after the retention period expires
- The only exception: when competent authorities submit a legally valid warrant related to a serious criminal matter (such as a terrorist threat). In that case we cooperate strictly within the bounds of applicable law.
GDPR compliant
BuiltSign is fully compliant with the General Data Protection Regulation (GDPR). You always have the right to access, correct, and delete your data. A Data Processing Agreement (DPA) is available for business users.
- Right of access
- Right to erasure
- Right to data portability
- Data Processing Agreement available
Our infrastructure meets the highest standards
EU-certified database infrastructure
Redundant, EU-hosted data storage with SOC 2 Type II and ISO 27001 certification.
Bank-grade document storage
Documents stored with AES-256 server-side encryption in ISO 27001-certified EU infrastructure.
PCI-DSS Level 1 payments
Payment processing meets PCI-DSS Level 1 — the highest security level in the payment industry.
Edge-secured application hosting
Automatic HTTPS, DDoS protection and SOC 2-compliant hosting with global edge security.