SOC 2 Compliance

Xodo Sign is built on a security-first foundation. Our infrastructure follows industry-standard security practices to protect your documents and data.

Our Security Standards

Xodo Sign implements multiple layers of security including:

• 256-bit AES encryption for all documents stored at rest
• TLS 1.2+ encryption for all data in transit
• SOC 2 Type II certification through our infrastructure partners
• Regular third-party security audits and penetration testing

Data Storage and Privacy

Your documents and data are stored on secure, access-controlled servers. We comply with major data protection regulations including:

• EU GDPR
• HIPAA (for eligible plans)

Access Controls

Access to your documents is strictly controlled:

• Only authorized team members can view documents based on their role and permissions.
• All access is logged and auditable.
• Two-factor authentication is available for added account security.

Questions About Security?

For detailed security documentation or enterprise compliance inquiries, please contact our support team.