Built like a system of record, because it is one

Every signed waiver is rendered to PDF exactly once, at the moment of signing. A SHA-256 fingerprint of the document is stamped into the PDF itself and recorded in our database. Recompute the hash of the file at any time — in court, for an insurer, years later — and compare it to the recorded value. If a single byte had changed, the hashes wouldn't match.

Signed records are append-only: not even we can edit or delete them — the database itself rejects updates. Waiver text is versioned the same way. Every signature is permanently pinned to the exact version of the exact words the signer saw, along with the consent statement they agreed to, their IP address, device, and a timestamp.

All data is encrypted in transit (TLS) and at rest. Signed documents and signature images live in private storage that is never publicly listable — files are served only through short-lived signed URLs, only to authenticated members of your business, only for your own records. Signers never get direct database access; every public submission passes through server-side validation and bot protection.

Export everything, any time: CSV of all records and bulk ZIP downloads of every signed PDF, in the app, with no volume caps and no "storage plan" fees. Exporting and viewing your existing records is never gated on your subscription — if you cancel, your signed waivers remain viewable and downloadable. Compare that to per-waiver vendors before you trust them with legal documents.