Complete audit trail
Every send, view, signature, and approval is recorded with a timestamp and IP address — the evidence trail courts look for.
Compliance
Signatures that hold up.
A signature is only useful if it's enforceable. BeeSign is built around the regulations that make electronic signatures legally binding in the US and EU — and the safeguards regulated industries like healthcare require. The security controls underneath have been examined by an independent CPA firm under SOC 2.
SOC 2
Type 1 · Security
ESIGN Act
United States
UETA
US States
eIDAS
European Union
HIPAA
US Healthcare
GDPR
European Union
AATL
Adobe Trust List
FIPS 140-2
Level 3 HSM
SOC 2 Type 1 · Security
Audited by an independent CPA firm
BeeSign completed a SOC 2 Type 1 examination of its Electronic Signature Platform as of August 12, 2026. Zero Day CPA, PC examined how we design the controls that protect your documents — access, encryption, change management, monitoring, and incident response — against the AICPA Trust Services Criteria for Security, and issued an unmodified opinion.
The report is restricted-use and isn't published publicly, but we share it with customers and prospects under NDA on request.
The standards we're built on
What each regulation covers, and how BeeSign meets it.
SOC 2
Type 1 · Security
An independent CPA firm examined BeeSign's security controls against the AICPA Trust Services Criteria and issued an unmodified opinion. The full report is available to customers and prospects under NDA.
Learn moreESIGN Act
United States
The federal Electronic Signatures in Global and National Commerce Act gives electronic signatures the same legal standing as ink. BeeSign captures the intent, consent, and record retention ESIGN requires.
Learn moreUETA
US States
The Uniform Electronic Transactions Act, adopted across nearly all US states, governs electronic records at the state level. Every BeeSign signature is attributable, auditable, and retained.
Learn moreeIDAS
European Union
BeeSign issues Advanced Electronic Signatures (AES) under the EU eIDAS regulation — signatures uniquely linked to the signer through identity verification and a per-signer digital certificate.
Learn moreHIPAA
US Healthcare
Patient intake forms, consent documents, and care agreements are handled with HIPAA-compliant safeguards: encryption in transit and at rest, access isolation, and complete audit logging.
Learn moreGDPR
European Union
GDPR-ready data practices: data is collected for a stated purpose, never sold, and protected with encryption. Identity verification data is handled privacy-first.
Learn moreAATL
Adobe Trust List
Finalized documents are sealed with an SSL.com certificate on the Adobe Approved Trust List, so signatures validate as trusted automatically in Adobe Acrobat and Reader.
Learn moreFIPS 140-2
Level 3 HSM
The private key that seals every document is generated and stored in Google Cloud HSM — a FIPS 140-2 Level 3 validated hardware module — and is non-exportable.
Learn moreEvidence behind every signature
Compliance isn't a badge — it's the record you can produce when it matters.
Certificate of completion
Each completed document ships with a tamper-evident certificate summarizing every signer and every event in the document's history.
Signer authentication
Email-bound signing links by default, with optional SMS OTP, authenticator-app TOTP, and full government-ID identity verification.
Blockchain timestamp proof
Every completed document is hash-anchored to the Bitcoin blockchain via OpenTimestamps — an independent, decentralized proof of exactly when it was signed that anyone can verify, with no trust in BeeSign required.
Need more than a standard eSignature?
For high-value contracts and cross-border agreements, upgrade any document to an eIDAS-compliant Advanced Electronic Signature. Each signer completes government ID capture, a biometric face match with liveness detection, and database validation — then receives a personal digital certificate bound to the signature.
It's optional per document, so you only add it where the stakes call for it.
Advanced Electronic Signatures include
- Government ID capture from 200+ countries
- Biometric face match with liveness detection
- Database validation of signer identity
- One-time passcode confirmation
- A digital certificate issued per signer
Compliant from your first document
Every BeeSign plan includes legally binding signatures, audit trails, and certificates of completion. Start your free trial today.