MusiSign Security

Musifacts Europe BV operates MusiSign with technical and organisational safeguards designed to protect Documents, accounts, audit evidence and signing workflows.

1. Infrastructure

Platform infrastructure is operated on Musifacts-controlled infrastructure in Europe. Document files are stored using configured S3-compatible document storage, and transactional email is delivered through Mailgun Europe SMTP. Administrative access is intended to be limited to authorised personnel and protected through appropriate account and system controls.

2. Transport security

MusiSign should be accessed through HTTPS. Encrypted transport helps protect data in transit between Users, Recipients and the platform.

3. Access controls

Access to accounts, Organisations, Documents and administrative functions is controlled by authentication, authorisation and role-based permissions where applicable. Users are responsible for protecting credentials and limiting access to authorised persons. The platform supports email/password authentication and may support externally configured identity-provider sign-in when enabled.

4. Account security

Account security features may include secure session cookies, CSRF protection, revocable sessions, password hashing, authenticator-app 2FA, email-based 2FA for certain signing flows, passkeys and user security audit logs.

5. Audit and traceability

MusiSign records audit events and may apply unique identifiers, timestamps, envelope references, signature references, certificate-based PDF signatures and document verification markers to support traceability and evidential value.

6. Integrations and secrets

Production integrations such as S3-compatible storage, Mailgun Europe SMTP, public API tokens and webhooks should be configured with least-privilege credentials and rotated when exposure is suspected. Any future identity, analytics, billing or other external provider integrations should follow the same principle.

7. Backups and continuity

Musifacts Europe BV may maintain backups and operational procedures intended to support continuity, recovery and integrity of Documents and platform data. Backup scope and retention may depend on the production configuration.

8. Limitations

No security programme can eliminate all risk. Users should report suspicious activity, unexpected emails, unauthorised access or potential vulnerabilities promptly.

9. Security contact

Security concerns may be reported to info@musisign.com.