Terms of Service

By creating an account or using the service you accept these terms, on your own behalf and on behalf of the organisation whose workspace you use. If you act for an organisation, you confirm that you may bind it. The service is made for business use. Where mandatory consumer law of your country applies, it takes precedence.

A separate written agreement (for example an Enterprise contract or a data processing agreement) takes precedence over these terms where the two differ.

A workspace belongs to the organisation or person that created it (the customer). Its owners and admins act for the customer. They are responsible for:

• who is a member, which role each member has, and removing people who should no longer have access;
• the workspace settings — storage region, signing-link expiry, automatic deletion, SMS verification, API keys and webhooks;
• the documents, templates and data that members upload or send, and having the right to do so;
• having a lawful basis for the personal data of signers and contacts, and informing them where the law requires it;
• choosing a signature level that fits each document, and checking who its signers are (sections 5 and 6);
• everything members do in the workspace and everything done with its API keys.

We act on the workspace's instructions. We do not check the content of documents and are not responsible for it.

• Each login is personal and belongs to one named person. Do not share your email codes, password, passkeys or sessions, and do not use one login for several people (for example a shared team mailbox that several people sign in with).
• Every person who works in a workspace needs their own membership. On plans billed per seat, each member uses a seat.
• API keys are for connecting systems, not for people. Keep them secret, give each system its own key, and revoke a key you no longer need or that may be exposed.
• Sign-in codes are sent to your email address, so anyone who gets into your mailbox — or into your Google account, if you sign in with Google — can sign in as you. Protect both with a strong password and two-step sign-in.
• Tell us at once at support@wesign.now if you suspect someone else is using your login or a key.

If we see signs that a login is shared or misused, we may ask you to add members or seats, require the person to sign in again, or suspend the login or key until it is resolved. As between you and us, signatures and actions carried out with your login or your API keys count as yours, even if someone else used them; to the extent permitted by law, we are not liable for their misuse (section 16).

The person who sends a document chooses its recipients and enters their email addresses and phone numbers. Signers act through the personal link they receive; they do not need an account and are not our customers. We do not check a signer's identity or authority to sign: section 6 sets out what a signature shows and who is responsible for checking signers.

Signing links stop working when they expire (by default after 21 days, adjustable per workspace and request) or when you withdraw them.

By default a signature is a simple electronic signature (SES). With SMS verification turned on, it is designed to meet the requirements of an advanced electronic signature (AES) under eIDAS and the Swiss ZertES; whether a particular signature meets them also depends on how the sender identified the signer (section 6). Every signed document is sealed (PAdES) and, when an independent timestamp authority answers, time-stamped under RFC 3161. We do not issue qualified electronic signatures (QES). Details: certifications and signer checks.

Some documents require a particular form by law — for example a qualified signature, handwriting or a notary. Whether a signature level is sufficient for a document is for you to decide; our pages on the legal situation in different countries are general information, not legal advice.

What a signature on wesign.now shows depends on how the signer was reached, and it never shows more than this:

• Simple electronic signature (SES): the signer opened the personal signing link we sent to the email address — or, by SMS, the phone number — that the sender entered. This shows that whoever signed had that link at that moment, normally because they had access to that inbox or phone.
• Advanced electronic signature (AES): in addition, the signer entered a one-time code we sent by SMS to the phone number the sender entered. This shows that whoever signed also had access to that phone number at that moment.
• Links you deliver yourself: if you copy a signing link, take it from the API or open signing inside your own website or app, you deliver the link, and we cannot tell who received it.
• Shared documents and forms: on a document or form that a workspace shares through a link, whoever has the link can sign, under the name and email address they enter; whether that address is confirmed depends on how the workspace set up the link.

None of this proves who the signer is, that they are the person the sender meant, or that they may sign for someone else (for example a company). Anyone who has the inbox, the phone, the link or the code can sign. wesign.now does not check identity documents and offers no identification beyond the above.

The customer alone is responsible for:

• checking each signer's identity and authority to sign, by means outside wesign.now where the document or the law requires it (for example a known contact, an identity document or a call-back);
• choosing the signature level and how each signer is reached, and deciding whether that is sufficient for the document;
• the email addresses and phone numbers it enters or sends us through the API: that they are correct and belong to the intended signer personally, not a shared mailbox or a phone others use;
• giving links it delivers itself only to the intended signer, and deciding who may open the documents and forms it shares;
• withdrawing a request at once, and telling us, if it suspects that someone other than the intended signer has a link, a code or the document.

Signers are responsible for keeping their email account and phone secure (for example a strong password and two-step sign-in for their email, a screen lock and a SIM PIN on their phone), for not forwarding their signing link or sharing an SMS code, and for telling the sender at once if a document shows a signature they did not make or if they think someone else has their link or code.

To the extent permitted by law, NC Labs GmbH is not liable for any loss or damage arising because a signature, or any other step in signing, was made by someone other than the intended signer, or by someone without authority to sign — in particular through:

• impersonation of a signer, a sender or anyone else;
• unauthorised access to an email account, inbox, phone or phone number, including a SIM swap or a transferred number;
• a lost, stolen, shared or compromised device or account;
• a signing link, sign-in code, SMS code or document that was forwarded, intercepted or disclosed;
• a wrong or outdated email address or phone number.

This applies to simple and advanced signatures and to every other way of signing on wesign.now, including links you deliver yourself, embedded signing and shared documents and forms. The customer indemnifies us against third-party claims arising from it (section 17). Nothing in this section limits our liability for our own unlawful intent or gross negligence (section 16).

Do not use wesign.now to:

• send documents that are illegal, fraudulent, infringing or deceptive, or that impersonate someone else;
• sign, or let someone sign, in another person's name, or use a signing link, code or login meant for someone else;
• send unsolicited mass mail or SMS;
• get around limits, plans, seat counts or security measures, or probe or overload the service;
• resell or give access to the service to third parties outside your organisation, unless we agree in writing.

For the documents, signers and contacts in a workspace, the customer is the controller and we are its processor: we process that data only to provide the service. For account, billing and website data we are the controller. A data processing agreement (DPA) is available on request at support@wesign.now. How we handle personal data, where it is stored and which providers we use is set out in the privacy policy. We never sell personal data.

Each workspace chooses where its document files are stored (EU, Switzerland, the UK or the US). Documents we write on our servers are encrypted at rest with AES-256-GCM on top of our storage provider's own encryption; files uploaded directly from the browser rely on the provider's encryption. Details: security documentation.

You are responsible for downloading and keeping copies of the documents you need. Files can be removed by your workspace's automatic-deletion settings, when you delete them, or when access to the workspace ends (for example deletion, payment lapse beyond the grace period, or a legal order). We cannot restore deleted files, and we cannot hand documents to someone we can no longer verify as entitled to the workspace. If our encryption key were permanently lost, encrypted documents could become unrecoverable; our liability for that is limited as set out in section 16.

The template editor offers an AI assistant and translation. They only run when you start them, and they receive only the text you give them — never your documents or signer data. AI output can be wrong or incomplete: review it before you use or send it. You are responsible for documents you create with it.

We aim for high availability and announce planned maintenance where we can. Outages of our providers, networks or email and SMS delivery can occur. Uptime commitments (an SLA) exist only where agreed in an Enterprise contract. We may develop and change features; we will not remove a core function of a paid plan during a paid period without notice.

Paid plans are billed in advance for the chosen period and renew automatically until cancelled. Annual plans are refundable pro rata within the first 14 days. Monthly plans are not refunded once the billing period has started, but can be cancelled at any time to prevent future charges. Prices are listed on the pricing page; we announce price changes to workspace owners in advance by email.

Every workspace has a personal referral link at /settings/referrals. Referral rewards are being rebuilt: no credit, discount or other reward is currently issued for a referral. Before rewards are offered again, this section will set out the rules that apply to them.

Unless you tell us otherwise, we may name you as a customer, including your name and logo on our website and in marketing materials. We never disclose the contents of your documents or who you send them to. To opt out or have a reference removed, email support@wesign.now.

Trademarks, product names and logos of third parties shown on our website or in the service belong to their owners. Showing them does not mean that an owner endorses, sponsors or partners with NC Labs GmbH. Third-party tools connect to the service through Zapier, Make, n8n or our API — no partnership implied; their own terms and privacy policies apply to them.

To the extent permitted by law:

• we are not liable for indirect or consequential loss, lost profit, lost revenue or savings, loss of data, or business interruption;
• we are not liable for the legal validity, effect or enforceability of a signed document, for a signer's identity or authority, or for the content of documents;
• we are not liable for a signature or other action made by someone other than the intended signer or member, or by someone without authority — through impersonation, unauthorised access to an email account, phone or phone number, a forwarded or intercepted link or code, or in any other way described in section 6 — whether the signature is simple, advanced or of any other kind;
• we are not liable for acts of signers, recipients or members, for misuse of logins or API keys, or for failures of networks, email or SMS delivery and other services outside our control, or for force majeure;
• our total liability for all claims in a calendar year is limited to the fees the customer paid us in the 12 months before the event giving rise to the claim, and to CHF 100 on a free plan.

Nothing in these terms excludes or limits our liability for unlawful intent or gross negligence (Art. 100 of the Swiss Code of Obligations), for personal injury, or where mandatory law does not allow it. Where an exclusion or limitation cannot apply in full, it applies to the extent the law permits.

To the extent permitted by law, the customer indemnifies NC Labs GmbH against claims of third parties — including signers and the people or organisations they sign for or claim to be — and the reasonable costs of defending them, that arise from:

• the documents and data its workspace sends, shares or stores;
• use of the service in breach of these terms or the law;
• the use of its logins and API keys;
• a signature on a document its workspace sent or shared that was made by someone other than the intended signer, or by someone without authority to sign, including in the cases listed in section 6;
• the email addresses and phone numbers it entered, and its choice of signature level and of how signers are identified.

This does not apply to the extent a claim results from our own unlawful intent or gross negligence. We will tell you promptly about such a claim and let you take part in the defence.

You can cancel your plan or close your workspace at any time. We may suspend or end access, in whole or for single logins or keys, if the terms are breached, an invoice remains unpaid after a reminder, there is a security risk, or the law requires it. Where possible we warn you first and give you time to fix the issue and download your data. After a workspace is closed we delete its data within a reasonable period, except for what we must keep by law (for example invoices).

We may update these terms. We inform workspace owners by email at least 30 days before an important change takes effect. If you do not agree, you can cancel before then; if you keep using the service afterwards, the new terms apply. The date at the top shows the current version.

These terms are governed by Swiss law, excluding the UN Convention on Contracts for the International Sale of Goods. The courts of Zurich, Switzerland, have exclusive jurisdiction, subject to mandatory consumer-protection law of the user's country of residence. If a provision is invalid or cannot be enforced in full, the rest remains in force, and that provision applies to the extent the law permits.

Questions: support@wesign.now.