01
Personal data is separated
Personal data sits in its own table that no other query may join against. All reads pass through a single function.
Security
What exists today, and what is in progress.
This page lists controls that exist in the product now. Work in progress is marked as work in progress. We hold no certifications and claim none.
Every read, write and erasure is logged in the same database transaction as the access itself, so the log and the access cannot diverge. The log is append-only.
02
Collection bound to a purpose
Swedish data protection law requires a clear purpose to process a personal identity number. “Good to have” is not a purpose.
§4 compensation
Legarch asks for one only when the counterparty's choice actually creates an invoicing relationship. The retention basis is recorded per record.
03
Links that work exactly once
Only a sha256 hash of the signing link is stored. The link itself exists exactly once, in the email, and cannot be recovered from the database.
issued→delivered→opened→consumed
sha256 4f9c1ab7…d20e · stored value
revokedon reminder at 14:02
new link issuedsha256 91be07c4…8a13
It is single-use, time-bounded and revocable. Sending a reminder revokes the previous link, so an older email will correctly stop working.
04
The document cannot be swapped mid-signing
The document's content hash is taken when it is opened and sent back with the signature. If it no longer matches, the signature is refused.
at open
c19f8a4b7e…d20e
c19f8a4b7e…d20e
signature accepted
c19f8a4b7e…d20e
c19f8a9d02…d20e
signature refused
05
Where the data sits
Agreement data is stored in Stockholm, Sweden, on AWS eu-north-1.
That covers agreement data. Email delivery and site hosting run with other providers and are not covered by that statement.
State
Control, state and note
| Control | State | Note |
|---|---|---|
| Agreement data stored in StockholmAWS eu-north-1. Covers agreement data. | In place | AWS eu-north-1. Covers agreement data. |
| Complete audit logEvery transition carries actor and origin. | In place | Every transition carries actor and origin. |
| Separated personal dataOwn table, one access function, log in the same transaction. | In place | Own table, one access function, log in the same transaction. |
| Single-use links stored as hashessha256, time-bounded, revocable. | In place | sha256, time-bounded, revocable. |
| Data processing agreementText is being drafted. Nothing to sign yet. | Being drafted | Text is being drafted. Nothing to sign yet. |
| eIDAS alignmentWork under way. No qualified signature today. | In progress | Work under way. No qualified signature today. |
| ISO 27001No audit started. | Not started | No audit started. |
| SOC 2No audit started. | Not started | No audit started. |
We update this page when a state changes, not when a sales conversation needs it.