Your documents are safe with us.
AutoSignly is a product of a Polish company operating solely on European Union infrastructure. Below we describe how we protect documents, how we monitor our systems and what we do when something goes wrong.
No credit card · No subscription · No commitment
How we protect your data
Several layers of protection. Each one stops a different kind of attack.
None of them works alone. When one is under load, the others keep working and monitoring reports the event.
- EncryptionThe connection and the data on our servers are encrypted, and the key is stored separately. A look at the database alone reveals nothing.
- Data in EuropeServers only in the European Union, with a backup in a second country. It is protected by Polish law and the GDPR.
- Monitoring and alertsOur systems are monitored around the clock. Unusual traffic, series of failed logins, attempts to reach administration panels and outages trigger an alert to the on-duty engineer.
- Protection against abuseRequest limits and protection against password guessing stop attacks before they reach a user. We scan software components for known vulnerabilities.
Proof
A document carries a trace of every change.
After signing, the document is sealed. If someone changes it, it can be detected.
Seal and timestamp
A signed document carries an electronic seal. Any change after signing is detectable.
Signature certificate
A free PDF describing who signed, when and how identity was verified. You order it from a signed document.
The document stays yours
You can download the signed file at any time as a standalone PDF. It keeps the signatures regardless of AutoSignly.
Response
When something goes wrong, we follow a procedure.
Five steps we repeat for every incident.
Detection
An automatic alert or a report. The on-duty engineer confirms the event.
Assessment
We establish the scope: which data and which users are affected.
Containment
We isolate the problem, cut off access and preserve evidence.
Notification
We inform affected users. A personal data breach is reported to the data protection authority within 72 hours.
Lessons
We analyse the cause and improve the safeguard so it does not happen again.
Your data, protected
What we do to keep your documents secure.
No technical jargon - just what actually matters to you, in short.
Access only for you and the people you invite
Your documents are visible only to you and the people you invite to sign. Sensitive data - such as personal details or account numbers - is encrypted in the database, and the key is stored separately: viewing the database alone reveals nothing.
Your data stays in Europe
We store your documents exclusively on servers in the European Union, with a backup copy in a second country. Nothing leaves the EU.
Monitored around the clock
Our systems are monitored around the clock, and data is backed up regularly. If anything raises a concern, we respond immediately.
Your document stays yours, permanently
You can download your signed document as a standalone PDF with the signatures embedded at any time - you keep it regardless of what happens to AutoSignly.
One document, three levels of legal certainty.
Three levels of electronic signature, with increasing verification of the signer's identity. Each compliant with the European Union eIDAS regulation (910/2014).
Simple signature
The signer clicks "I accept" - no identity verification. The document is sealed with AutoSignly's non-qualified electronic seal, which certifies the moment and integrity of the consent.
How it works
The recipient gets an email link → opens the document in a browser → drags the stamp into place → clicks "Sign". No code, no installation, no registration.
from 0,25 PLN net / signature
Identity-verified signature
The signer's identity is additionally verified - for example with an SMS code sent to their phone. The document is sealed three times with a qualified seal from KIR (Krajowa Izba Rozliczeniowa, the Polish national clearing house).
How it works
Email link → browser → SMS OTP verification → "Sign". A one-time code sent to the phone, resendable after 5 minutes. Works across many countries.
from 0,60 PLN net / signature
Qualified signature
Equivalent to a handwritten signature in every EU country (Article 25 eIDAS, Article 78¹ of the Polish Civil Code). Requires a qualified certificate - purchased from any QTSP (KIR Szafir, CenCert, Asseco eCert). The private key never leaves the signer's USB card.
How it works
Email link → AutoSignly desktop app → USB QSCD card + PIN → the signature is created locally. Alternatively, a personal certificate on a card can be linked to the mObywatel app (5 free signatures - for private individuals only; you cannot sign company agreements this way). AutoSignly orchestrates the flow - we do not issue certificates.
from 0,99 PLN net / signature
Certification and liability
We are preparing for ISO 27001 and we are financially liable.
We are building an Information Security Management System (ISMS) compliant with ISO/IEC 27001:2022. Regardless of the certification stage - we hold PLN 1,000,000 in liability insurance through Lloyd's of London.
Information Security Management System
16IT sp. z o.o. is preparing for ISO/IEC 27001:2022 certification through an accredited certification body. The ISMS covers the entire data lifecycle: from employee onboarding, through system operation, to incident response and disaster recovery.
- Formal risk analysis and Statement of Applicability (SoA) against the standard's Annex A - 93 controls across four areas: organizational, people, physical and technological
- Documented information security policies covering the entire data lifecycle
- Business continuity and disaster recovery plans (BCP/DRP) with regular testing
- Goal: formal certification audit by an accredited body · Q4 2026
Liability insurance sum - Lloyd's of London policy
Protection against claims for professional error, faulty service or negligence in providing the electronic signature and document processing service.
Covers the costs of a personal data breach incident (GDPR), cybercrime, system recovery and any claims from affected parties.
Insurer: Lloyd's of London · Professional liability extended with GDPR and cyber cover
FAQ
Questions about security.
Answers to what's worth checking before you sign your first document.
Didn't find your question? Write to us - we answer clearly and directly.
Have a question that's not listed? Get in touch - we reply the same business day.
Get in touch →Can AutoSignly or 16IT access my documents?+
Only you and the people you invite to sign can see the document. Sensitive data - such as personal details or account numbers - is stored in the database in encrypted form, and the key needed to read it is kept separately, so browsing the database alone reveals nothing. Our team does not look into your documents as part of day-to-day work, and every access is logged. We disclose your data only when ordered to by a Polish court - never at the request of a foreign government.
How do you protect data against attacks and breaches?+
Your data is protected by several independent safeguards: the connection to the site is always encrypted, data on the servers is encrypted, and a firewall filters traffic to protect against attacks. Our systems are monitored around the clock, and we respond immediately whenever something raises concern. If a breach of your personal data were to occur regardless, we report it to the supervisory authority (UODO) within 72 hours - as required by the GDPR.
What does it mean that you are "ISO 27001 ready"?+
We have already implemented the procedures and safeguards required by the ISO 27001 standard - including risk management, access control, incident response, and disaster recovery plans. The certificate itself is issued by an independent, accredited audit firm after a formal audit - we are aiming to undergo it in Q4 2026. So "ISO 27001 ready" means the procedures are already in place at our company, and the certificate will be their formal confirmation.
How does identity verification work with an electronic signature?+
With an identity-verified electronic signature, the signer confirms it is really them with a one-time SMS code sent to their phone. We record every such identity confirmation in the document history. Verification via the national node (trusted profile / mObywatel) and confirmation in a banking app - coming soon.
Didn't find your question? Write to us - we answer clearly and directly.
Sealed electronically · eIDAS · data in the EU
Your first document can be signed today.
Create your account today and 20 AC land in your wallet straight away. Sign your first documents without spending a penny. No credit card, no commitment.
Start for free