Siggy
E-signature infrastructure

Signatures that don't get in the way

Siggy sends documents for signature, keeps a sealed audit trail, and gives your engineers a real API instead of a portal to click through. Signers get one page and one task.

signwithsiggy.com/workflows
Product screenshot
Active Workflows · signwithsiggy.com/workflows
How it works

Three steps, no training required

01
Upload and place anchors

Drop in a PDF and place fields right on the page — signature, initials, date, text, checkbox, name and email stamps. Each signer role keeps its own colour, so a three-party contract stays readable.

02
Define the workflow once

Document order, reminder cadence and signing roles — saved as a reusable definition. Send the same agreement a hundred times without rebuilding it.

03
Signers sign, Siggy seals

One link, no account, works on a phone. When the last signature lands, Siggy seals the document and appends the certificate to the PDF itself.

Features

Everything the day actually needs

Reusable workflow definitions

Document order, reminder cadence and signing roles, saved once and reused — and every edit recorded with a before-and-after snapshot.

Anchor placement on the PDF

Place signature, initial, date, text, checkbox and stamp fields right on the page — colour-coded per signer role, or bound to a {{token}} in the document text.

Automatic reminders

Nudges on your schedule, stopping the moment a signer completes. No chasing by hand.

Webhooks you can trust

Every event HMAC-signed, https-only, and retried three times with backoff before it's given up on.

Sealed audit certificate

Document hash, signer email, IP and timestamps, hash-chained and attached to the finished PDF.

Teams, contacts and roles

A contact book the whole workspace shares, an admin-and-signer split on everything that bills or configures, and per-tenant isolation from the first document onward.

Developers

An API first, a dashboard second

Launch a workflow in one call — PDFs in, signer links out. Status changes arrive as signed webhooks, keys are tenant-scoped, and every retry is idempotent.

Idempotent by header
Pass an Idempotency-Key and a retry can never become a second workflow — the replay returns the original response, flagged as a replay.
Signed webhooks, retried
HMAC-SHA256 on every event, https-only targets, three attempts with backoff. Launched, viewed, step signed, completed, cancelled, resent.
Deliver the link yourself
Ask for returnSignLink and Siggy hands back a one-shot URL — 24 hours, single use. Redirect into it from your own app, or let Siggy send the email and SMS.
Anchor on a token
Drop {{customer_sig}} where the signature belongs and Siggy binds to it. Generated documents need no placement step at all.
POST /api/v1/workflows
curl -X POST https://signwithsiggy.com/api/v1/workflows \
  -H "X-Api-Key: $SIGGY_API_KEY" \
  -H "Idempotency-Key: order-4821" \
  -F 'metadata={
    "subject": "Master service agreement",
    "message": "Please review and sign.",
    "signers": [{
      "firstName": "Dana", "lastName": "Reed",
      "email": "dana@northwind.co", "role": "Customer",
      "order": 1, "sendEmail": true, "returnSignLink": true
    }],
    "documents": [{
      "fileName": "msa.pdf",
      "anchors": [
        { "role": "Customer", "fieldType": "FullSignature", "tokenKey": "{{customer_sig}}" }
      ]
    }]
  };type=application/json' \
  -F "msa.pdf=@./msa.pdf"
Returns 201 with the workflowId, a signerId per recipient, and a sign link for each signer you asked one for.
Security & compliance

Built to survive a dispute

An electronic signature is only worth what you can prove about it. Every Siggy workflow carries the evidence with it.

Audit certificate contents
Document hashSHA-256
Per signatureEmail, IP, UTC timestamp
ConsentAttestation confirmed, timestamped
Event trailIssued, opened, viewed, signed
SealHMAC-SHA256, per-workspace key
Tamper checkHash-chained, verify by link
Intent, on the record

The signer confirms an attestation before the signature is taken. The confirmation, its timestamp and their IP are part of the trail.

Hash-chained audit

Every event is SHA-256 chained to the one before it. Edit a row and the chain stops replaying — which is the point.

Per-workspace seal keys

Each signature is sealed with an HMAC key held in Azure Key Vault for your workspace alone. Versioned, and rotated on schedule.

Verify without us

The certificate carries a verify link. Anyone holding it can recompute the seals and replay the chain — no account, no support ticket.

One-shot links

Twenty-four hours, single use, hashed at rest. Add a per-signer access code when the link alone isn't enough.

Signing window

Choose 7, 30, 90 or 365 days at launch. Past it the workflow expires and the links stop working.

Pricing

Priced by plan, metered by usage

Seats plus metered usage.

Start free
Couldn't load plan details
Start free
Couldn't load plan details
Start free
Couldn't load plan details

Plan details are unavailable right now.

FAQ

Questions we get asked

Anything else, email hello@siggy.com — a person answers.

Siggy's job is to produce the evidence. The signer confirms an attestation before signing, and the finished PDF carries a certificate of completion: the document's SHA-256, each signer's email, IP and UTC timestamp, the seal on each signature, and the full event trail — every event hash-chained to the one before it. Whether a particular agreement is enforceable where you operate is a question for your counsel, and we would rather hand them a record than a compliance badge.

Send your first workflow today

Free for 50 workflows a month, no card, no sales call. Bring one contract and see how far you get in ten minutes.