Send for signature from your own systems

A REST API over everything that matters

Create envelopes from your templates, filling in roles and variables, or from your own PDFs with fields placed by coordinates. Send, void, remind and resend. Follow each recipient's progress, and download the sealed documents, the combined PDF and the certificate of completion. Retries are safe: creating and sending take an Idempotency-Key, so a timeout never becomes a second contract.

A Word document in POST /envelopes becomes a PDF as the envelope is made, with its fonts embedded (Calibri drawn in Carlito, the same widths), comments removed and pictures or links to other places unlinked; one with tracked changes is refused with a 422 that says so. A file past the size limits, or one that isn't a Word file inside, is converted the simpler way instead, never refused. Only the PDF is kept.

Webhooks, signed so you can trust them

Choose the events you want — sent, viewed (once per recipient, the first time they open it), signed, completed, declined, expired, voided, and an email that bounced — and we POST each one to your HTTPS endpoint, signed with a secret only you hold, with a timestamp so a recorded delivery can't be replayed. A delivery your endpoint doesn't accept is retried for about three days, and every attempt is in a delivery log you can resend from.

Keys that do only what you allow

Each API key has the scopes you give it — read envelopes, send them, read templates, download documents, manage webhooks — and an optional expiry. You can change either, or its name, at any time, and a key you delete stops working on its next request. Keys are shown once and stored only as a hash. A key acts as the owner or admin who made it, so every envelope has a real sender, and it stops working if they leave.

On the record, like everything else

Every action taken through the API is on the envelope's tamper-evident audit trail, naming the person and the key it was made with. Making, changing and deleting keys and changing webhooks is on your workspace's activity log.

Embedded signing for people in front of you

For a customer signing at your counter or inside your own app, the API hands you a fresh signing link for that in-person signer, which replaces any link issued before it. People signing from an email keep their link to themselves — that link is the proof it was them.