Security you can trust.
Enterprise-grade protection with Indian compliance built in. Your documents and keys are safe with us.
Compliance & Certifications
We meet the highest standards for document security and legal validity.
IT Act 2000
Fully compliant with India's Information Technology Act for digital signatures
256-bit AES
Documents encrypted at rest using AES-256, the same standard used by banks
TLS 1.3
All data in transit protected with the latest transport layer security
Adobe AATL
Signatures trusted by Adobe Reader globally via DigiCert certificate chain
SOC 2 Type II
Audit in progress — expected completion Q2 2026
GDPR Ready
Data processing compliant with EU General Data Protection Regulation
How we protect your documents
Every layer of Falcon Sign is designed with security-first principles.
Hardware-Backed Key Storage
Your private keys are stored in your device's secure hardware (Android Keystore / iOS Secure Enclave). They never leave your device and cannot be extracted — even by us.
Certificate-Based Digital Signatures
We use real PKCS#7 / CMS digital signatures — not just an image stamped on a PDF. Every signature is cryptographically bound to the document and verifiable by any compliant reader.
Tamper-Proof Audit Trail
Every action is logged immutably — who viewed, who signed, when, from what device and IP. The audit trail is embedded in the final PDF and cannot be altered.
RFC 3161 Timestamping
Every signature includes a trusted timestamp from an RFC 3161 Time Stamping Authority. This proves exactly when a document was signed, even if the certificate later expires.
End-to-End Encryption
Documents are encrypted at rest (AES-256) and in transit (TLS 1.3). For request-signature workflows, documents are accessible only to designated recipients.
Aadhaar eSign Integration
Government-grade identity verification via Aadhaar eSign (through licensed ESP partners). Signers are authenticated with OTP before signing — no certificate needed.
Our Data Practices
Transparency about how we handle your information.
We never read your documents
Your PDFs are encrypted and processed in isolated environments. No Falcon Sign employee can access your document content.
Minimal data retention
Request-signature documents are stored only until all parties have signed + 30 days. Self-signed documents are never stored on our servers.
Your keys stay with you
For self-signing with DSC, your private key never leaves your device. We use hardware-backed secure storage on both Android and iOS.
Right to deletion
Delete your account and all associated data at any time. We comply within 48 hours, with cryptographic proof of deletion.
Indian data residency
All data is stored on servers located in India (Mumbai region). Your documents never leave Indian borders.
Have security questions?
Our security team is happy to answer your questions or provide detailed compliance documentation.