Your contracts are safe
with us — guaranteed
SignGuard protects your data with modern encryption and processes your documents confidentially and in anonymized form.
We know how sensitive contracts are — and we treat your data as if it were our own.
Our security promises
Your contracts stay private
GUARANTEED
- We do not sell your data.
- We do not share your data.
- We never use your data for advertising.
You are in control at all times
YOU DECIDE
- Which contracts are stored.
- When data is deleted.
- What happens to your information.
Your contracts can only be read by you — not even we have access.
Security in detail
How we protect your data
GDPR + EU-based servers
SignGuard processes all data in line with the GDPR, on servers located in the European Union. No transfers to third countries, full data sovereignty, and every data-subject right guaranteed at all times.
- Servers located in Germany / the EU, no third-country transfers
- Lawful processing under the GDPR
- Right to access, rectification and erasure at any time
- Privacy by Design & Default
TLS/HTTPS encryption
Every connection between your device and our servers is protected by modern TLS encryption. Your contract data is secure at every moment.
- TLS 1.3 for all connections
- HTTPS-only: no unencrypted access
- Encryption in transit and at rest
- Regular security audits
Your data, your control
We only collect what is necessary — and you keep full control: delete, export or transfer your data at any time, at the tap of a button.
- Minimal data collection on a need-to-know basis
- One-tap deletion in the app
- PDF export straight from the app
- Right to data portability (Art. 20 GDPR)
AI-powered processing
To automatically classify contract clauses, we use AI technology from OpenAI. Processing runs through our own EU-hosted server infrastructure. More about the AI we use: AI transparency.
- AI analysis via OpenAI technology, inside our EU infrastructure
- No AI models are ever trained on your data
- Data processing agreement (DPA) in place with OpenAI
- All requests are routed through EU-based servers
EDPB focus areas 2026 — what matters for your contract data
The European Data Protection Board (EDPB) and all national data protection authorities have set four priorities for 2026. Here is how we address them:
The EDPB's 2026 Coordinated Enforcement Action reviews your information rights across the EU — companies must clearly explain how data is used. SignGuard does exactly that, on this page and in the app's privacy policy. EDPB source
In 2026 the EDPB is publishing clarifications on AI data processing. We process your contracts with AI solely for the analysis and never use your content for model training. EDPB work programme 2026–2027
The same GDPR violations are to be pursued with equal rigor in 2026 — no matter the member state. For you, that means a consistent level of protection across the entire EU. EDPB work programme 2026–2027
From August 2026, EU-wide transparency obligations apply: companies must make clear when AI generates or analyzes content. SignGuard labels the AI-generated parts of every contract report. EUR-Lex AI Act
Common questions about data security
No. Your documents are only processed during the analysis and automatically deleted afterwards.
Nobody. Your data is processed in encrypted form and is not accessible to third parties.
No. Your documents are neither stored nor used for training purposes.
Yes. Your personal information is treated confidentially and never shared with third parties. Personal data in your contracts is anonymized first (e.g. your name is replaced with "Max Mustermann", the German John Doe) before anything is passed to the AI model.