Your documents, locked down by default.
Your documents are often your most sensitive records, so security is built into tuyaform from the ground up rather than bolted on. We seal every completed document with a SHA-256 hash so any later change is detectable, enforce owner-scoped, least-privilege access, and rely on our infrastructure providers (Vercel and Supabase) to encrypt data in transit and at rest. Because tuyaform is free and ad-supported, our advertising never trades on the contents of your documents, which are never sold, mined for ad targeting, or shared with advertisers.
Standards we hold ourselves to
How we protect every document
Encryption in transit
All connections to tuyaform are served over HTTPS with HSTS enforced, so documents and signatures cannot be intercepted or read as they move between your browser and our servers. TLS termination and version negotiation are handled by our infrastructure providers.
Encryption at rest
Stored documents and their metadata are encrypted at rest by our infrastructure providers (Vercel and Supabase), so your records are protected on disk without any extra setup on your part.
Tamper-evident sealing
When signing completes, the final PDF is hashed with SHA-256 and digitally sealed. Any alteration to a single byte changes the hash and invalidates the seal, so a tampered document is immediately detectable and the Certificate of Completion lets anyone verify integrity.
Access controls
Owner-scoped, least-privilege access (with owner, editor, and analyst collaborator roles) governs who can see a document. Only the owner and designated recipients can reach a document, and signing links are unique tokens that can be protected with an optional per-signer access code.
Backups and resilience
Completed records are retained on managed cloud infrastructure with provider-default backups, so your signed documents remain durable and recoverable.
Privacy-respecting advertising
tuyaform is funded by ads, not by your data. We use standard, consent-gated advertising; the contents of your documents are never read for targeting, never sold, and never shared with advertisers or data brokers.
Where your data lives
tuyaform runs on managed infrastructure rather than servers we rack ourselves. Your documents, form responses, and account data live in a Supabase-managed Postgres database, and files — such as the source PDFs you upload for signing — are kept in Supabase's object storage. The application itself runs on Vercel.
Every connection is encrypted in transit with TLS — the whole site is HTTPS-only with HSTS enforced — and stored data is encrypted at rest by the platform providers. We deliberately keep this stack small: fewer systems holding your documents means fewer places where something can go wrong.
What the sealed PDF proves
When the last signer finishes, tuyaform generates the final PDF and computes its SHA-256 hash — a digital fingerprint that changes completely if even a single byte of the file is altered afterwards. That hash is recorded at sealing time, which is what makes the document tamper-evident: anyone holding the file later can recompute the hash and check that it still matches.
Alongside the seal, the document's audit trail records the key events of the signing — when it was sent, viewed, signed, and completed, with timestamps — and the Certificate of Completion summarizes the whole transaction: each signer, the email address their request was sent to, IP address and browser details, the event timeline, and the document's integrity hash.
Who can access what
Signers never need an account. Each recipient gets a unique tokenized link that opens exactly one document and nothing else, and an optional per-signer access code adds a second check when you want one.
Everything on your side — the dashboard, your documents, responses, and analytics — sits behind an authenticated account, with database-level rules scoping every query to the owner and the collaborators they've invited. And because signing and form-fill pages handle sensitive links, they load no third-party ad scripts at all: ads only ever appear on our public marketing pages, and only after cookie consent.
Free shouldn't mean less safe
tuyaform is funded by ads, not by your data. We don't sell documents, signatures or personal information — the same encryption and controls protect every account, free or not.
Sign with confidence — free forever.
Completed signatures are tamper-evident sealed and audit-trailed; all data is encrypted in transit and at rest.