SignSolú trust center
In short
SignSolú keeps an evidence file for every signed document.
Anyone can verify a document at signsolu.com/verificar without an account.
Data lives in the United States with encryption in transit and at rest.
SignSolú notifies the Customer of any breach within 72 hours.
What evidence does SignSolú keep for each signature?
- Server-recorded date and time of sending, opening and signing.
- Public IP address and approximate location.
- Browser and operating system.
- Drawn signature embedded in the PDF.
- SHA-256 hash of the signed document.
- PDF audit certificate, bilingual when someone signs in English.
How is a signed document verified?
Go to signsolu.com/verificar and enter the certificate number.
You can also drop the PDF to compare its SHA-256 hash.
Courts have their own verification guide in Spanish.
How does SignSolú protect documents?
- TLS across the site with HSTS on.
- AES-256 encryption at rest.
- Private storage with signed temporary links.
- Per-account isolation in the database.
- A unique link per signer that stops working after signing.
- Optional email code and ID verification.
Where does the data live?
Data is hosted in the United States.
The infrastructure provider holds SOC 2 Type 2 and ISO/IEC 27001.
The list by function is under subprocessors.
How long are documents kept?
While the account exists, at no cost and with no storage limit.
Cancelling the subscription does not delete signed documents.
The Customer exports its full history from its account.
What happens if there is an incident?
SignSolú notifies the Customer within 72 hours of confirming it.
The notice says what happened, who is affected and what was done.
Contact
Our privacy and security officer is José Rodrigo Barrios Villa.
Write to rodrigo@solufintech.com for security or procurement reviews.
Published by SignSolú, a Mexican e-signature platform that works over WhatsApp.