Identity & security
Know who signed. Prove nothing changed. Show anyone.
A signature is only worth what you can prove about it later. AiresDocs lets you choose how each person proves it is them, seals the finished file so any change shows, and prints a certificate anyone can read and anyone can check.
- Access code, SMS code or ID check per signer
- Tamper-evident digital seal
- Public verification, no account
The right level of proof for each person
An email link for your regular clients; an SMS code or a passport check for a guarantor you have never met. You choose per signer.
A file that shows if it has been touched
The finished contract carries a digital seal and recorded fingerprints. Change a comma and both say so.
A certificate a judge can read
Plain English: who, how they proved it, when, from where, what they agreed to. No jargon, no decoding.
Checkable by anyone, forever
Your counterparty, their lawyer or an auditor can verify the file on a public page without trusting you or us.
Each signer proves it is them, the way you decide
Set the identity method per recipient when you send. The method used, and the details behind it, are recorded on the certificate.
- Email link
- Every signer gets a unique, unguessable link to the address you supplied. Opening it, consenting and signing are logged with time, IP address, browser and time zone.
- Access code
- You set a code and share it separately, by phone or in person. Codes are stored hashed and limited to 5 attempts before a lock.
- SMS one-time code
- A code sent to the signer's phone that they must enter before the contract opens. The phone number is recorded on the certificate. £0.10 per code, available on request.
- Government ID check
- The signer photographs a passport or driving licence and takes a selfie; the result is recorded on the certificate. £1.50 per check, available on request.
Nothing changes after signing without it showing
When the last person signs, the fields are fixed into the file, the certificate is appended and the file is sealed with a cryptographic document signature. Fingerprints of the original and final files are recorded too.
- The digital seal
- A PAdES-style signature inside the finished file. Standard readers show it is intact; any later edit invalidates it. If the signing certificate is ever a self-signed fallback rather than one from a public authority, the security page says so.
- SHA-256 fingerprints
- The original upload and the final file are both hashed and the hashes printed on the certificate, so the file can be checked anywhere with no special software.
- An audit trail that cannot be tidied up
- Events can be added, never edited or deleted, enforced in the database. Not by you, not by us.
- The law behind it
- This is what makes the signature attributable and the record reliable, the two things courts look for. When electronic signatures are binding.
Everything a dispute would ask, on one page
A plain-English certificate is appended to every finished contract and emailed to everyone, with the same information available in your dashboard while the contract is in progress.
- Files
- Every file in the pack with its name, page count and fingerprint.
- People
- Each recipient with their role (signer, approver, witness, in-person, CC), the identity method used, their email and phone where used, and any delegation.
- Events
- Sent, viewed, verified, consented, signed, approved, declined, reminded, corrected, voided, completed, each with UTC time and the actor's time zone, IP address and browser.
- What they agreed to
- Attachments uploaded, supplementary terms acknowledged, the version of the consent wording shown, and comments if you chose to include them.
Anyone can check a finished contract is genuine
Open <a href="https://app.airesdocs.com/verify">the verification page</a>, drop in any file of the pack or type the contract ID, and see whether it matches the record made at completion.
- No account, no trust required
- Verification recomputes the fingerprint and compares. The arithmetic is the same on any computer; our guide shows how to do it yourself.
- Works years later
- The record lives with the contract and on the certificate itself. A file that still verifies in 2032 is the file that was signed in 2026.
- What a mismatch means
- The file has been changed since completion, re-saved by a viewer, or is not an AiresDocs file. How to verify a signed contract.
Your contracts stay in the EU, run by a UK company
Contracts, signatures and audit events are stored in the EU (Ireland), encrypted in transit and at rest. Infinity Square Labs Ltd is registered in England and Wales.
- Private by default
- Files live in private storage reachable only through links that expire in minutes, minted for the owner or the specific signer. Staff do not read your contracts.
- Your account, protected
- Two-factor authentication, sign-in by magic link or Google, row-level security in the database, API keys with scopes.
- Yours to keep or delete
- Export everything as a ZIP, set retention rules so finished contracts are deleted on your schedule (Team), delete your account from Settings.
- The full picture
- Encryption, the seal, sub-processors, retention and responsible disclosure are on the security page; the legal side is in the privacy policy and DPA.
Who gets the most from this
- Finance & accountingEngagement letters, direct debit mandates and approvals with proof for the auditors.
- Landlords & letting agentsTenancy agreements, deposit paperwork and inventories signed from the tenant's phone.
- HR & recruitingOffer letters, contracts and policies signed before the candidate changes their mind.
The rest of the product
- Send contractsPrepare any agreement in minutes, route it to the right people in the right order, and know where it stands.
- Sign anywhereYour customers sign from an email on any device, in their language, with no account to create.
- Team & brandingShared templates and contacts for up to ten people, your logo on every email, reports and retention rules.
- The whole productEvery capability on one page, by plan.
Which plan you need
The seal, the certificate, verification, access codes and 2FA are in every plan, including Free. SMS codes (£0.10) and ID checks (£1.50) are pay as you go on any plan; Team includes 25 SMS codes and 5 ID checks a month.
Read nextCommon questions about identity & security
Anything missing? The help page has more, or email support and a person will reply within one business day.
Which identity method should I choose?
For everyday agreements with people you know, the email link plus the audit trail is what most businesses rely on. Add an access code (shared by phone) when the email address might be shared. Use an SMS code when you want a second factor the signer holds in their hand. Use a government ID check for high-value or high-risk agreements, or when you have never met the signer. The method used is printed on the certificate.
What is the digital seal?
When a contract completes, the final file is signed cryptographically with a document-signing certificate (a PAdES-style signature inside the file). Any later change to the file breaks the seal, and standard readers show it. Alongside the seal, the SHA-256 fingerprints of the original and final files are recorded, so the file can also be checked without any special software.
What does the certificate contain?
Every file in the pack with its fingerprint and page count; every recipient with their role, the identity method used, their email and phone where used, and any delegation; every event (sent, viewed, verified, consented, signed, approved, declined, reminded, corrected, voided, completed) with UTC time and the actor's time zone, IP address and browser; attachments and acknowledgements; the version of the consent wording; and, if you chose, the comments.
How does verification work?
Anyone with a finished contract can open the public verification page, upload any file of the pack or enter the contract ID from the certificate, and see whether it matches the record. A match means the bytes are identical to what was produced at completion. No account is needed, and the uploaded file is hashed and discarded, not stored.
Where is my data stored?
Contracts, signatures and audit events are stored in the EU (Ireland), encrypted in transit and at rest, in private storage reachable only through short-lived links. The company behind AiresDocs is Infinity Square Labs Ltd, registered in England and Wales. The security page lists every sub-processor.
What do SMS codes and ID checks cost?
SMS one-time codes are £0.10 each and government ID checks £1.50 each, pay as you go. Team includes 25 SMS codes and 5 ID checks a month. Both are switched on for your account on request; they rely on connected providers (Twilio and Stripe Identity) listed on the security page.
Proof you can hand to anyone, on the free plan too
Every AiresDocs contract, free or paid, comes sealed with a certificate and a public verification page. Try it with a contract to yourself.