Trust & Security

Hubnexa Sign is built to handle signed documents with the same care you'd expect from any provider you'd trust with a real contract.

Private by default

Uploaded documents are stored privately and are never publicly accessible. Access is only possible through a secure, non-guessable signing link sent directly to each signer.

Encrypted in transit

All connections to Hubnexa Sign are encrypted over HTTPS.

Full audit trail

Every meaningful event on a document — when it was sent, viewed, consented to, and signed — is timestamped and recorded, giving you a clear record of what happened.

Isolated access

Only the document owner can see their own documents. Data is isolated at the database level so no other account can access it.

Proving who signed

Every signing link is single-use and tied to one person. On envelopes marked Verified, the signer must also enter a six-digit code sent to their email address before they can begin, which shows they controlled that inbox at the moment of signing rather than merely that a link reached it. The certificate records which method was used and when the code was entered.

Certificate of completion

Every completed envelope produces a certificate as a separate document. It names each signer, the time they signed, the address they signed from, how they proved who they were, and the method they used to sign. It also carries a SHA-256 fingerprint of both the original and the signed document, so any later alteration would be detectable.

Records that cannot be edited

Audit records can be written and read but not changed or deleted, including by us. That is enforced in the database rather than by policy, because a record anyone can quietly amend is worth little as evidence.

The legal position

In New Zealand, Part 4 of the Contract and Commercial Law Act 2017 sets out when an electronic signature has legal effect. In Australia, the equivalent rules are in the Electronic Transactions Act 1999 and the corresponding State and Territory legislation. Both ask that the method identifies the signer, indicates their approval, and is as reliable as is appropriate in the circumstances. Hubnexa Sign is built to meet those requirements and to produce the evidence that shows it did.

Some documents carry additional formalities or cannot be signed electronically at all, and the rules differ between the two countries. Whether a particular document may be signed this way is a judgement for you or your adviser.

Your documents remain yours

If your subscription ends, you keep full access to view and download everything already signed, with its certificate and audit trail. Completed documents and their records are retained for at least seven years.

Questions

If you have a specific security question, get in touch at support@hubnexa.net.