Security Overview

Built with enterprise security controls to protect your documents and data

Australian Hosted
Encrypted at Rest
SOC 2 Aligned
Audit Trail

Security Controls

Authentication & Session Security

Enterprise-grade authentication protecting your accounts

  • Google-backed authentication platform with OAuth 2.0 SSO
  • Cookie-based session management with httpOnly cookies
  • Short-lived access tokens with automatic refresh
  • Cross-site request forgery (CSRF) protection
  • Rate limiting on authentication endpoints
  • Magic link passwordless sign-in option

Tenant Isolation

Complete data separation between workspaces

  • Workspace-based tenant isolation
  • All requests scoped to user's workspace
  • Role-based access controls (RBAC)
  • Envelope-scoped document authorization
  • Signing field isolation — recipients can only sign their own fields
  • Sub-group access controls

Signing Link Security

Secure, tamper-proof signing process

  • High-entropy opaque signing tokens
  • Tokens stored as hashes only
  • Time-limited token expiration
  • Single-use signing tokens
  • Witness co-signing with separate secure tokens
  • Full audit trail of link activity

Audit Trail Integrity

Tamper-evident audit logging

  • Comprehensive event logging
  • Cryptographic hash chain verification
  • Verification endpoints for chain integrity
  • Timestamped activity records
  • Export and reporting capabilities

Infrastructure Security

Australian-hosted, enterprise infrastructure

  • Data hosted in Google Cloud Platform — Sydney (australia-southeast1)
  • Managed database with Australian data residency
  • Encryption at rest (AES-256) and in transit (TLS 1.2+)
  • Automated backups with point-in-time recovery
  • DDoS protection via Cloud Run and Google Front End
  • SMS delivery via Australian carrier routes

Access Controls

Fine-grained permissions and controls

  • Admin and standard user roles
  • Granular permission settings
  • Workspace administrator controls
  • Audit log access management
  • API access controls with developer keys
  • Custom branding per workspace

About Sign and Go

Company: NT Development Group (NTDG)

ABN: 41 660 399 020

Address: Tenancy 1 Suite I, 34 McLachlan Street, Darwin NT 0800

Contact: info@signandgo.com.au

Security & Procurement FAQ

Have security questions?

Contact us for security documentation, questionnaires, or to schedule a security review.