FirmForms handles an engagement letter and a signature, so we keep the smallest amount of data we can, protect it in transit, and hand you the record to prove exactly what happened. Here is how, in plain terms, and an honest note on where we are.
Signatures are valid under the U.S. ESIGN Act and UETA. Your client signs in their browser, with consent captured at the moment of signing.
Each signed letter is sealed into a PDF with a certificate of completion: created, sent, opened, and signed, each with a timestamp and IP address.
The sealed PDF is a fixed record of what was signed and when. It is on file and yours to download at any time.
If a signature is ever questioned, the immutable audit trail shows the full history. This is what turns an e-signature into a defensible record.
All traffic runs over HTTPS/TLS, everywhere, all the time. Your data is encrypted as it moves between you, your client, and us.
We store the letter, the signature, and the audit trail. We are not built to hold your clients' financial records, and we ask you not to upload data more sensitive than the service needs.
Signed documents are stored on Cloudflare R2, which encrypts objects at rest. The service is hosted in the United States.
You sign in with a secure one-time link sent to your email. There is no password for us to store, and none for an attacker to steal.
Download your signed PDFs whenever you want. If you cancel, you keep your records. There is no lock-in.
We never sell personal data, and we never use your engagement content or client data to train advertising or unrelated models. See our Privacy Policy.
FirmForms is an early-stage product, and we would rather tell you that plainly than imply otherwise. We are deliberate about what we collect and how we protect it, and our controls are still maturing. We are not yet SOC 2 certified, and we will say so until we are. For now, please keep to what the service is for: an engagement letter and a signature, not your clients' most sensitive financial data. If security is a hard requirement for your firm right now, we would rather you wait for us than be oversold.
Any letters in FirmForms are customizable starting points, not legal advice. Engagement-letter requirements vary by jurisdiction and professional standards. Review your letter with your attorney and malpractice insurer before use. Questions about security or your data? Email [email protected].
Set up your engagement letter and send your first signing link. Free to start, no card.