Concept guide
How document retention works
Reader: compliance reviewer, security architect, or account owner deciding where signed documents should live.
What SignaTrust holds
SignaTrust stores your documents while they're being signed and keeps an evidence record for every envelope.
SignaTrust reads your document to prepare it, collect signatures and seal it, so the bytes pass through our service. Connect your own cloud storage — Google Drive, OneDrive, Box, Dropbox or S3-compatible storage — and completed, signed PDFs are exported there automatically.
When the signed PDF is deleted
When an envelope is completed and delivery is confirmed, SignaTrust deletes its stored copy of the signed PDF after 7 days. If delivery can't be confirmed, it is deleted after up to 97 days. Uploaded source files, drafts, evidence bundles, voided or declined envelopes and templates are retained.
Delivery confirmed
The stored copy of the signed PDF is deleted 7 days after the envelope completes.
Delivery not confirmed
The stored copy of the signed PDF is deleted after up to 97 days (the 7-day window plus a 90-day safety net).
Two things hold the signed PDF longer: a retention or legal hold on the envelope, and an export to your connected storage that has not yet succeeded — deleting SignaTrust's copy before your copy exists would lose the document.
What stays
Only the stored copy of the signed PDF is deleted. Uploaded source files, drafts, evidence bundles, voided or declined envelopes and templates are retained, and so is the envelope's evidence record — signer events, the hash-chained audit trail and the Solana transaction that anchors the signed document's fingerprint. Each removal writes a BUFFER_PURGED audit event.
Download the evidence bundle before the signed PDF is deleted if you need the signed PDF and its proof together. The fingerprint on Solana lets anyone confirm, later, that a copy you hold is the one that was signed.
What this is not
- —Not end-to-end encryption. Documents are not encrypted in your browser; the signing service reads the document to sign it.
- —Not a substitute for a BAA. HIPAA Business Associate Agreement available on request for Business customers. Do not upload protected health information until your BAA is executed.
- —Not long-term archiving. SignaTrust is not where signed documents are kept for years — your connected storage, or the copies you download, are.
Need the compliance details?
Our compliance guides cover HIPAA, GDPR, SOC 2 and financial-services record-keeping.
Download the guides