In development · Public demo coming soon
Get your own signing certificate from the PrivaSign certificate authority, plus a company one when your employer invites you. Sign PDFs with either, and anyone can check who signed and whether the file has changed since.
X.509 signing certificate
ExampleIssued to
Ayu Lestari
Personal
PrivaSign runs a private certificate authority. Its certificates don't come from a public or qualified trust service provider, so signatures made with PrivaSign may not be recognised everywhere, including by some organisations and PDF readers.
The service is provided as-is and is still being built, so issues can happen. During the public demo, identity checks may run in demo mode. Every certificate records how its holder was verified.
Everyone gets a personal certificate. When your employer invites you, you get a second one that carries the company's name. A switcher picks which one signs, and each identity keeps its own dashboard, documents and history.
Personal certificate
CN=Ayu Lestari, C=ID, O=Personal
Company certificate
CN=Ayu Lestari, C=ID, O=PT Contoh Sejahtera, UID=3f6c2a9e-8b14-4d7a-9c51-0e2b7d4a6f18
Leaving a company? Your company certificate is revoked and your access removed. Your personal certificate is untouched, and documents you already signed stay valid.
Register and verify your email. Every demo account starts with 50 signatures.
Request it from your dashboard. Your key pair is generated inside our signing service, and PRIVA CA DS G1 issues the certificate once the RA approves.
Upload a PDF of up to 25 MB, check the name the signature will carry, and sign. Each successful signature uses one from your balance.
Download the signed PDF. Anyone who receives it can check the signature on the public verification page.
Certificate status, as your dashboard shows it
If a step fails, the status shows FAILED with the reason, so you're never left watching a spinner.
Public verification page
Upload a signed PDF to the verification page, no account needed. PrivaSign checks the signature against its own CA chain, separately from the service that signed it, and shows you:
Issued by a private CA, not a public or qualified trust service provider.
It's generated inside the signing service and can't be exported. You can download your public certificate at any time.
Certificate status is checked on every signature, so the next attempt after a revocation is refused.
A company's name goes on a certificate only after the company is verified and its admin confirms you work there.
RA operators can't decide their own requests or their own company's. Every decision records who made it and when.
Requests, approvals, signatures and revocations are written to an append-only audit log.
Each certificate states how its holder was checked: email only, or a manual review by an RA operator.
For organisations
The same platform on your infrastructure, with your certificate authority and your brand.
We deploy and configure EJBCA and SignServer for you, including root and issuing CAs, certificate profiles, OCSP, timestamping and PDF signing.
Your name, logo and colours throughout. It runs fully offline, air-gapped networks included, with a signed licence file and no outside connections.
Help with upgrades, certificate renewals and incidents from the team that built the platform.
That depends on who needs to accept it and on the rules for that kind of document. PrivaSign is a private CA, not a public or qualified trust service provider. When a document requires a certified electronic signature, use a certified provider for it.
Acrobat and other PDF readers show the signature and whether the document changed. The PrivaSign CA isn't on public trust lists, so a reader may mark the signer's identity as unknown until the PrivaSign CA certificate is added to its trusted list. Our verification page checks against the right chain for you.
Registration Authority operators review each certificate request, and no operator can approve their own. During the public demo, approvals may be automatic, and those certificates are marked as email-only verification. Automated ID checks against DUKCAPIL data are on the roadmap.
Your company registers first and is verified by the RA. Then an admin invites you by email. Accept the invitation, and once your admin and the RA approve, a Company option appears next to Personal.
Your company certificate is revoked and your membership removed. Documents you signed stay valid and verifiable, the company keeps its records, and your personal certificate isn't affected.
Yes. Every demo account gets 50 signatures, and only successful signatures count.
We're building PrivaSign now and will open a public demo when it's ready. Leave your email and we'll write once, when it opens.
Leave your email and we'll write once, when the public demo opens.