Zero retention
Once everyone has signed, we delete your document.
Most e-signature services keep every signed document on their servers until someone deletes it. True Autograph emails the signed PDF to every signer and to you, then deletes the document, the signatures, and the data in its fields. We keep only the proof: who signed, when, and from where.
1
You send it
Upload a PDF or use a template, place the fields, and send it. Each signer gets a unique private link.
2
Everyone signs
Signers consent to sign electronically, then sign in a browser. No account and no app are required.
3
Everyone gets the signed PDF
The signed copy is built once, fingerprinted, and emailed to every signer and to you, with a certificate of completion.
4
We delete it
Right after the final email, True Autograph deletes everything besides the proof of signature. Your inbox holds the signed copy; we hold only the proof.
What we delete
- The PDF you sent. The signed copy is never stored at all: it is built once and emailed.
- Every signature and initials image
- Every field value typed or picked on the document, and anything you filled in before sending
What we keep: the proof
- Who signed: name, email address, and role
- When and how each person signed, from which IP address and browser
- The consent each signer gave to sign electronically
- The name and title each signer typed
- The request’s title and message, and the contact details you entered for each signer
- The amount and status of any payment collected at signing
- SHA-256 fingerprints of the original and the signed PDF, which identify a copy but cannot rebuild it
When deletion waits
A few requests are kept a little longer, for a reason, and then deleted the same way.
Sent from Salesforce or HubSpot
Kept until your CRM has its copy, for up to 72 hours.
Too big to attach
Signed copies over 28 MB go out as a download link that works for 7 days. The document is kept until the link expires.
Expired before everyone signed
Kept 30 days, so you can reopen it with Resend and reopen.
Drafts never sent
Deleted 30 days after they were last touched.
Declined or voided
Deleted right away.
Templates you save
Yours until you delete them. A template is the blank document: it never holds anyone’s signature or field values.
Why it matters
Nothing to leak
A breach cannot expose signed contracts that are no longer on our servers.
Your copy is the record
Each party holds the actual signed PDF. Anyone can check a copy against its fingerprint on our Verify page, and the file never leaves their device.
Less for you to clean up
No purge rules to set and no admin to remember. It happens on every request, on every plan.