Sub-processors

Last updated 10 July 2026

Private beta draft. Signet is in private beta. This document is accurate to how the product works today, but it has not yet had formal legal review and may change before general release. We will tell you before anything material changes. Questions? Email [email protected].

To run Signet we rely on a small number of trusted providers, called sub-processors. Each one receives only the data it needs to do its job, and each is bound to protect it. This is the current list.

Our sub-processors

  • Hosting and database. Our application and PostgreSQL database run on infrastructure in the EU. Purpose: to run the service and store account and agreement records. Data: all service data, with UK/EU residency.
  • Object storage. An EU, S3-compatible object store. Purpose: to hold documents, signatures and certificates, encrypted at rest. Data: agreement files.
  • Resend. Purpose: sending transactional email such as signing links, completed documents and security notices. Data: recipient email address, the message, and attached documents or certificates where relevant.
  • Stripe. Purpose: payments and subscriptions for paid plans. Data: workspace name and billing details you provide to Stripe. We do not send Stripe your documents or signer data.
  • Loops. Purpose: product and lifecycle email (for example, onboarding or update emails you can opt out of). Data: account email and basic account context.
  • Notion. Purpose: receiving in-app feedback you choose to send. Data: the feedback you write and your account email.
  • Apple Push Notification service. Purpose: delivering push notifications to the Signet iOS app if you use it. Data: a device push token and the notification content.

Not sub-processors: connections you set up

Some integrations are configured by you inside the app, such as connecting your own CRM (for example HubSpot). When you connect one, you are choosing to send your data to that service under its own terms and your own account. These are your connections, not Signet's sub-processors, and you can disconnect them at any time.

Signing in with Google is optional and used only to authenticate you; it does not receive your documents.

Changes

We keep this list current. If we add or change a sub-processor in a way that affects you, we will update this page. To ask a question, email [email protected].

Questions about this?

We're happy to explain anything here in plain terms.

Email us