Compliance

The ESIGN Act is the U.S. federal law for electronic signatures, and UETA is its state-level counterpart, adopted by 49 states and Washington, D.C. Together they make electronic signatures and records as legally binding as their paper equivalents.

• Legal validity. A signature or contract cannot be denied legal effect just because it is electronic.

• Electronic records. An electronic record satisfies any law that requires a document to be in writing.

• Consent. Everyone involved has to agree to do business electronically before signing that way.

• Record retention. Signed records have to stay accurate and available to the people who signed them.

• Signer consent

  Every signer agrees to the e-sign disclosure before adopting a signature.

• Audit trail

  Each step is logged with a timestamp, IP address, and device in the audit trail.

• Copies for everyone

  Every party is emailed the signed PDF and its Certificate of Completion.

Both laws exclude a few documents that still need ink, such as wills, adoption and divorce papers, and court orders.

eIDAS is the EU regulation that governs electronic signatures across every member state. A signature that meets it is recognized throughout the EU, and courts cannot reject it as evidence just because it is electronic.

• Simple Electronic Signature (SES). The standard level for everyday contracts, where the signature captures who signed and that they meant to.

• Advanced Electronic Signature (AES). Uniquely linked to and able to identify the signer, under their sole control.

• Qualified Electronic Signature (QES). Backed by a certificate from an EU-qualified trust provider, equal to a handwritten signature.

• Signer intent

  Each signer adopts their own signature and submits it themselves.

• Linked to the signer

  Private links sent to each signer's own email tie every signature to a person.

• Changes are detectable

  A SHA-256 fingerprint on the certificate shows if the signed PDF is ever altered.

Inkly provides Simple Electronic Signatures, which suit most business agreements. It does not offer AES or QES, which a few documents require by law.

The General Data Protection Regulation sets the rules for collecting and handling personal data of people in the EU. It asks companies to collect only what they need, protect it, and give people control over their own data.

• Lawful and transparent. People are told what data is collected and why, and it is used only for that purpose.

• Data minimization. Only the data needed to provide the service is collected and kept.

• Security. Personal data is protected against unauthorized access and loss.

• Individual rights. People can access, correct, export, or delete their personal data.

• No selling data

  Inkly never sells personal data and shares it only to run the service.

• Delete what you send

  Senders can delete their documents, and anyone can request deletion of their data.

• Your rights, on request

  Email hello@inkly.so to access, correct, or export your data.

Read the privacy policy for what Inkly collects and how long it keeps it, and see our sub-processors. Business customers can request a data processing addendum (DPA) at hello@inkly.so.