How this service handles your documents

In short

This service exists so that Pure Current and its clients can sign contracts with each other. It is not a public service and it is not offered to anyone else. It collects the minimum needed to make a signature stand up, and it keeps executed contracts rather than deleting them.

What is collected

• The documents uploaded for signature
• For each signatory: organisation, name, title, email address
• At the moment of signing: the name typed, the date and time, the IP address and the browser used, and the fact that consent was given
• A SHA-256 hash of each document, before and after signature

No payment details, no identity documents, no tracking, no analytics, no advertising.

Why the signing details are recorded

An electronic signature is only as good as the evidence behind it. The time, address and browser are what connect a signature to a person and a moment, and the hash is what proves the document has not changed since. All of it is printed on the certificate of completion attached to the executed document, so every party holds the same record.

How long it is kept

Executed contracts are kept indefinitely and are never deleted automatically. They are the agreement, and the record of signature is part of it. Deleting one is a deliberate act.

A signing request that is never completed is removed after 90 days, along with its uploaded files.

A withdrawn request keeps its record and its audit trail, because a withdrawal is evidence in the same way a signature is. The unsigned file is removed.

Who sees it

The parties to the contract, who see each other's names and partly masked email addresses while signing, and receive the executed documents. Pure Current, as the operator. Render, which hosts the service, and Brevo, which delivers the email, both as infrastructure providers.

Nothing is sold, shared or used for any other purpose.

Security

• Every connection is encrypted
• Each signing link is a unique token, valid for one party only, expiring after three weeks
• Forms are protected against cross-site request forgery
• Database access uses parameterised queries
• Email addresses are masked in the signing interface

Questions

Write to admin@pure-current.com.