Your contracts are safe
with us — guaranteed
SignGuard protects your data with modern encryption and processes your documents confidentially and in anonymized form.
We know how sensitive contracts are — and we treat your data as if it were our own.
Our security promises
Your contracts stay private
GUARANTEED
- We do not sell your data.
- We do not share your data.
- We never use your data for advertising.
You are in control at all times
YOU DECIDE
- Which contracts are stored.
- When data is deleted.
- What happens to your information.
Your contracts can only be read by you — not even we have access.
Security in detail
How we protect your data
GDPR + EU-based servers
SignGuard stores your data on a server in Germany (Frankfurt am Main) and runs the AI analysis inside the EU. Full data sovereignty and every data-subject right guaranteed at all times.
- Server location: Frankfurt am Main, Germany (EU)
- Lawful processing under the GDPR
- Right to access, rectification and erasure at any time
- Privacy by Design & Default
TLS/HTTPS encryption
Every connection between your device and our servers is protected by modern TLS encryption. Your contract data is secure at every moment.
- TLS 1.3 for all connections
- HTTPS-only: no unencrypted access
- Encryption in transit and at rest
- Regular security audits
Your data, your control
We only collect what is necessary — and you keep full control: delete, export or transfer your data at any time, at the tap of a button.
- Minimal data collection on a need-to-know basis
- One-tap deletion in the app
- PDF export straight from the app
- Right to data portability (Art. 20 GDPR)
AI-powered processing
To automatically classify contract clauses, we use GPT models via Microsoft Azure OpenAI — processing takes place inside the EU (region Sweden). More about the AI we use: AI transparency.
- AI analysis via Microsoft Azure OpenAI inside the EU (Sweden)
- No AI models are ever trained on your data
- Original file deleted right after text extraction, contract text after 30 days
- US services only for subscription management (RevenueCat), safeguarded by Standard Contractual Clauses — all AI processing runs inside the EU
EDPB focus areas 2026 — what matters for your contract data
The European Data Protection Board (EDPB) and all national data protection authorities have set four priorities for 2026. Here is how we address them:
The EDPB's 2026 Coordinated Enforcement Action reviews your information rights across the EU — companies must clearly explain how data is used. SignGuard does exactly that, on this page and in the app's privacy policy. EDPB source
In 2026 the EDPB is publishing clarifications on AI data processing. We process your contracts with AI solely for the analysis and never use your content for model training. EDPB work programme 2026–2027
The same GDPR violations are to be pursued with equal rigor in 2026 — no matter the member state. For you, that means a consistent level of protection across the entire EU. EDPB work programme 2026–2027
Since August 2026, EU-wide transparency obligations apply: companies must make clear when AI generates or analyzes content. SignGuard labels AI-generated analysis results as such. EUR-Lex AI Act
Common questions about data security
No. Your documents are only processed during the analysis and automatically deleted afterwards.
Nobody. Your data is processed in encrypted form and is not accessible to third parties.
No. Your documents are neither stored nor used for training purposes.
Yes. Your personal information is treated confidentially and never shared with third parties. Personal data in your contracts is anonymized first (e.g. your name is replaced with "Max Mustermann", the German John Doe) before anything is passed to the AI model.