Security and data protection
Security and data protection without compromise
Contracts are among the most confidential things a company handles digitally. That's why SmartDocs answers the most important question first: your data stays in Germany.
- Hosted in Germany
- GDPR compliant
- eIDAS compliant
- ISO 27001
Infrastructure
German data centers, German law
Where the servers are determines which law applies to your data. With SmartDocs, the answer is clear.
Data center in Nuremberg
All documents, signatures and evidence data are processed and stored exclusively in an ISO 27001 certified data center in Germany.
No transfer to third countries
No US cloud, no standard contractual clauses, no transfer impact assessment needed. That makes your GDPR review much shorter.
Encryption every step of the way
TLS 1.2+ in transit, AES-256 at rest. Key management and access are logged.
Role-based access
Owner, admin, member: permissions per organization, plus custom roles on the Enterprise plan. API keys carry their own role and can be revoked at any time.
Evidential value
The hash chain: tampering ruled out mathematically
Every event in a signature request gets a SHA-256 hash that includes the hash of the previous event. If even a single byte is changed afterward, the chain visibly breaks. That property is exactly what makes the audit trail so valuable in court.
- Timestamp, IP address and device for every event
- Completion certificate as PDF for every completed request
- Full evidence export for your legal department and audits
Compliance
Audited and documented
Security you don't have to take on faith, because you can check it.
eIDAS compliant
All three signature levels under EU Regulation 910/2014. QES is issued through qualified trust service providers.
GDPR package
You get the data processing agreement (DPA), documentation of technical and organizational measures (TOMs) and the deletion policy from us, without back-and-forth requests.
ISO 27001
Information security management to the international standard, from the data center to the development process.
Need documents for your data protection or security review? Talk to us, and we'll provide the DPA, TOM documentation and proof of certification.
FAQ
Questions about law and data protection
We cover the legal details in depth on a separate page: legal validity of electronic signatures.
Security you can show
Try SmartDocs for free, then win over your data protection officer. We'll help with all the documents.