SignCloud is an electronic signature service. This notice explains what data is processed when you use the service, and for what purposes.
This data is processed to perform the requested signature service (contractual basis) and to maintain the technical record associated with the transaction (legitimate interest, where applicable).
For each finalised document, the customer selects a 10, 20 or 50-year retention policy according to its purpose and legal basis. A separate integrity-controlled package is deposited in external storage. This service is not represented as a certified electronic archiving system, and expiry handling remains subject to contractual, statutory and legal-hold requirements. No data is sold to third parties for commercial purposes.
The current deployment documentation identifies primary hosting in France and encrypted off-site backups in Germany. These locations and contractual safeguards must be confirmed against the active production contracts. We rely on subprocessors for specific functions, which only access the data needed for their task:
The service records technical evidence designed for electronic-signature workflows and implements personal-data protection measures. The legal qualification of each signature level and the privacy documentation must be reviewed against the production configuration and the customer's use case.
You have the right to access, rectify and erase your data. To exercise it, contact the organization that sent you the document via SignCloud.
For a SignCloud customer account, the deletion process is available on the dedicated account deletion page.