Data processing addendum

Signu acts as processor for documents and signer data you place in a tenant workspace, and as controller for billing identity needed to run the subscription.

Location. Processing on isolated Hetzner servers in Finland and Hetzner Object Storage in the EU. Sub-processors: Stripe (payments and tax), Brevo (transactional email), Hetzner (hosting and object storage). DocuSeal runs as an unmodified container we operate for you.

eIDAS. Signu provides Simple Electronic Signatures (SES) under eIDAS Article 3(10).

GoBD. When an account is cancelled, control-plane account data is deleted. Signed contracts and audit logs are kept in cold storage for 7 years.

Security measures include logical database isolation per tenant, TLS on the Coolify Traefik reverse proxy, and object-storage prefixes separating active and cold data.