# ContractSign

> Digital contract signing platform with SMS OTP verification. Create, manage, and sign contracts in minutes with full audit trails.

ContractSign is a multi-tenant SaaS platform built for Danish and European businesses. It supports SMS OTP signing by default and can enable MitID (Danish national eID via Criipto) behind a feature flag. Every signature includes a comprehensive audit trail with timestamps, IP addresses, and authentication evidence.

## Product

- [Homepage](https://contractsign.net/): Landing page with features, pricing, and security overview
- [Sign In](https://contractsign.net/auth/login): Authentication page for existing users

## Features

- **Contract Editor**: Rich text editor with template variables and interactive signer fields
- **PDF Generation**: Automatic PDF creation from markdown contracts with Playwright
- **PDF Import**: Upload existing PDFs and convert to editable contracts using AI
- **MitID Signing**: Optional Danish national eID authentication via Criipto Signatures
- **SMS OTP Signing**: Phone-based verification with 6-digit codes via Twilio
- **Templates**: Reusable contract templates with pre-defined fields
- **Folders & Tags**: Organize contracts with hierarchical folders and color-coded tags
- **Audit Trail**: Full logging of every action — timestamps, IP, user agent, auth evidence
- **Multi-tenant**: Organization-based isolation with role-based access control
- **API & CLI**: RESTful API with Bearer token auth and full-featured CLI tool

## Pricing

- **Starter (Free)**: 5 contracts/month, SMS OTP signing, basic templates, PDF generation
- **Professional (299 kr/month)**: Unlimited contracts, SMS OTP signing, unlimited templates, folders & tags, up to 10 members, API & CLI access, AI PDF import
- **Enterprise (Custom)**: Everything in Pro, unlimited members, custom integrations, SSO/SAML, dedicated manager, SLA guarantee

## Security

- Server-enforced signer authentication before completion
- MitID / eID signatures available when the workspace feature flag is enabled
- 256-bit encryption for all data in transit and at rest
- Full audit log with IP address, timestamp, and user agent for every action
- Signed PDF certificates with tamper-evident evidence
- Multi-tenant architecture with strict organization isolation
- Role-based access control per organization
- HTTPS enforced with HSTS preload

## Technical

- Built with Next.js 16, React 19, TypeScript, Prisma ORM
- Deployed on Cloudflare Workers
- PostgreSQL database via Neon
- Object storage via Cloudflare R2

## Pages

- [CLI & Installation](https://contractsign.net/install): Install the ContractSign CLI for terminal-based contract management
- [Privacy Policy](https://contractsign.net/privacy): How ContractSign handles personal data
- [Terms of Service](https://contractsign.net/terms): Core commercial and acceptable-use terms
- [Cookie Notice](https://contractsign.net/cookies): Authentication and preference cookies used
- [GDPR](https://contractsign.net/gdpr): EU privacy obligations and data handling
- [Document Verification](https://contractsign.net/verify): Verify signed document integrity via SHA-256 hash

## Contact

- Email: hello@contractsign.net
- Sales: sales@contractsign.net
- Website: https://contractsign.net