Open sourceWraft is AGPLv3 and self-hostable — read the source on GitHub

E-signature

Signing that never leaves the system that made the document

The agreement, the signer details and the evidence trail all stay on your infrastructure. No upload to a signing vendor, and no per-envelope charge.

Self-hosted · No per-envelope fees · Evidence in your database

signature.evidence
document   service-agreement · rev 7
signer     legal@northwind.example
intent     accepted 2026-07-29 14:02:11Z
address    203.0.113.24
artifact   sha256:9f2a…c471   sealed

# Written to your database, not ours.
Your evidenceYour retention

How it will work

Five stages, inside one boundary

The value is not the signature itself — it is that the document, the routing and the evidence never separate.

What is planned

What signing does

Signature is a stage of the document's life here, not an integration bolted to the end of it — which is why the evidence ends up in the same place as the document.

Multiple signature types

Drawn, typed and uploaded signatures, with per-field requirements so initials, dates and full signatures can be demanded separately.

Ordered signing workflows

Sequential, parallel or conditional routing, with reminders and escalation when a signer stalls.

Bulk signing

Send the same agreement to hundreds of counterparties from one job, each personalised from its own record.

Audit trail

Every view, action, address and timestamp recorded against the exact revision — written to your database, not a vendor's.

Sealed artifacts

The executed document is hashed and immutable, so later alteration is detectable without trusting the storage layer.

Self-hosted throughout

Signing happens inside your infrastructure. The agreement, signer details and evidence never transit a third party.

The legal frameworks

What makes an electronic signature hold up

These frameworks do not certify software. They set out what a process must demonstrate: that the signer intended to sign, that the signature is attributable to them, and that the document has not changed since. Wraft records all three and keeps them with the document.

ESIGN Act

US Electronic Signatures in Global and National Commerce Act

UETA

Uniform Electronic Transactions Act

eIDAS

EU Electronic Identification and Trust Services Regulation

Enforceability depends on your process and jurisdiction. Nothing on this page is legal advice, and any vendor claiming their software is by itself compliant with these frameworks is overstating what software can do.

An honest comparison

Against a dedicated signing vendor

Hosted signing products are mature and widely accepted, and for plenty of teams they are the right answer. The differences below are structural rather than a judgement about quality.

Dimension Wraft, when shipped Hosted signing vendor
Dimension Where the document sits while signing Wraft, when shipped Your infrastructure, throughout. Hosted signing vendor Uploaded to the signing vendor.
Dimension Who sees counterparty details Wraft, when shipped You. Signer identity data stays in your database. Hosted signing vendor You and the vendor.
Dimension Where the audit trail lives Wraft, when shipped Your database, exportable as your own record. Hosted signing vendor The vendor's system, retrievable through their API.
Dimension Cost model Wraft, when shipped No per-envelope charge — it is your infrastructure. Hosted signing vendor Typically per envelope or per seat, per year.
Dimension Relationship to the document Wraft, when shipped The same system that authored and stored it. Hosted signing vendor A separate product, integrated.
Dimension If the vendor lapses Wraft, when shipped Artifacts and evidence are already yours. Hosted signing vendor Evidence retrieval depends on account access.

Describes the common architecture of hosted e-signature products. Some offer on-premise or private deployment at enterprise tiers — check the specific terms of whatever you are comparing against.

Evidence, not just a signature image

What gets recorded, and where it stays

A signature is only as good as the record behind it. Every item below is written to your own database and retained with the document.

  1. 01 Intent The signer's explicit action to sign, timestamped.
  2. 02 Attribution Identity, address and session, bound to the signer.
  3. 03 Integrity A hash of the exact revision that was signed.
  4. 04 Custody The full trail retained with the artifact, exportable as your own record.

If you already have a vendor

Hand the signing step to a provider you already run

Some agreements have to go through a named provider — a counterparty insists, an agreement has a year left on it, or the decision was made above you. Wraft routes the final step out to one of these and takes the executed document back. Authoring, routing and storage stay here; only the signature ceremony leaves.

Connected

DocuSign

Connected over OAuth. Envelopes are sent from the Wraft document, status is read back as the signer moves, and the executed file returns to the record when the envelope completes.

docusign.com
Planned

Zoho Sign

Not built yet. It is on the list because it keeps coming up with teams already standardised on the Zoho suite. Tell us you need it and we will be straight about where it sits.

zoho.com/sign
Connected

Documenso

Open source and self-hostable, so the handoff can stay on infrastructure you control rather than leaving for someone else's. Connected with an API token; the document is created and sent from Wraft.

documenso.com

Worth being plain about the trade: when a document goes out to an external provider, that provider sees it, and the evidence it holds is retained on their terms, not yours. The guarantees on the rest of this page describe signing that stays inside Wraft. Most teams move the step in-house once they watch the trail land in their own database.

Before you commit

The questions worth asking us

Is signing a separate product, or a separate bill?
Neither. Signature and approval run on the same instance as everything else, under the same licence. There is no envelope to meter, because there is no vendor in the middle counting them — which is the structural difference from bolting a hosted signing service onto a document tool.
Will signatures be legally binding?
Electronic signatures are recognised under ESIGN, UETA and eIDAS when the process demonstrates intent, attribution and integrity, and retains evidence of all three. Wraft produces exactly that evidence and retains it with the document. Whether a specific signature is enforceable depends on your process and jurisdiction, and nothing here is legal advice — a claim of blanket compliance from any vendor deserves suspicion.
Can we keep using our current signing vendor?
Yes. Approval flows can hand the final step to DocuSign or Documenso today, and to others through the API, if you have an agreement to run out or a counterparty who expects a particular one. The cost is that the document leaves your boundary for that step and the provider holds its own copy of the evidence. Most teams move the step in-house once they see the trail land in their own database.
Will there be a per-signature charge?
No. Signing runs on your own infrastructure, so there is no envelope to meter. That is the main structural difference from hosted signing products, and it is not something we can change later — there is no meter to install.
What about qualified signatures under eIDAS?
Qualified electronic signatures require a trust service provider, which is a certification question rather than a software one. Tell us if you need QES and we will be straight about where it sits on our roadmap.

Not ready yet, and we will say so

Sign where the document already lives, and keep the evidence