Is Xodo Sign Secure?

Yes — Xodo Sign is built with security at its core. Every document you send, sign, and store is protected by multiple layers of security.

How Xodo Sign protects your data

• 256-bit HTTPS encryption — All data transmitted to and from Xodo Sign is encrypted using industry-standard HTTPS/TLS.
• Encrypted document storage — Documents are encrypted at rest using unique hash keys, ensuring only authorized parties can access them.
• Tamper-evident audit trail — Every action on a document — views, signatures, declines — is recorded in a timestamped log embedded in the completed document.
• Separate production environments — Production data is fully isolated and accessible only through secure systems.
• Redundant data storage — Data is stored in multiple secure locations to ensure availability and prevent data loss.

Audit trail and document integrity

Every completed document includes a Certificate of Completion — a tamper-evident record that logs signer identities, IP addresses, timestamps, and all actions taken. This makes it easy to verify the authenticity of any signed document at any time.

Is Xodo Sign compliant with data protection regulations?

Yes. Xodo Sign is designed to meet major data protection standards including GDPR for EU-based users. Signatures comply with eIDAS (EU), ESIGN (US), and UETA regulations.

Still have questions?

If you have specific security or compliance questions for your organization, contact our Support team.