Get documents signed and send files safely, from your browser.

Made for small professional firms in the EU: legal, finance, health. A contract signed, or a file that deletes itself when the reading is done.

Sign a document Business plans

Free on the Community plan, for good. Paid business plans from €29 a month.

When the file is gone, the proof stays. Anyone can check it without us.

Do not take our word for it

Five things you can check yourself, today.

Trust is not something a website can claim. These five facts are on the record, outside this page, and each one has a place where you look it up.

  • A registered Dutch company

    Paramantis Solutions B.V., Harderwijk. The KvK register lists the company behind every promise on this page.

    KvK 42115132 →
  • Servers in Germany

    Hetzner in Nuremberg. Which company holds what, and the one exception for e-mail, is written out line by line on the security page.

    Jurisdiction, line by line →
  • A public log

    Every registered key and every transfer leaves an entry in a tamper-evident log anyone can read. Not a claim about transparency: the log itself.

    Open the log →
  • What happens when something goes wrong

    A personal data breach is reported to you within 48 hours; that is in the signed Data Processing Agreement, not in a blog post. Your signature receipts verify without us, so they outlive us.

    Breach notification, clause 8 →
  • Code you can read

    The core and the relay are published. Nine rules, each with a link to the proof, are written down in one place.

    The nine rules →

Why Dutch matters

Dutch is a fact here, not a flag.

Where a supplier is owned decides which law reaches your client files and who can be ordered to hand them over. So it is a purchasing question, and here are the three answers.

  • The Dutch names were sold

    The parent of WeTransfer has been Bending Spoons in Milan since July 2024. Zivver has been part of Kiteworks in California since June 2025. Signhost went to Entrust in 2022, SignRequest to Box in 2021, and QuoVadis is on the Dutch trust list today as DigiCert Europe Netherlands. The names stayed Dutch. The owners did not.

  • This one was not

    Paramantis Solutions B.V., Harderwijk, KvK 42115132, with no parent company anywhere else. Dutch law governs the terms you agree to, and a Dutch court hears the dispute.

    Governing law →
  • And neither is the data path

    Servers at Hetzner in Nuremberg, Germany. DNS at Bunny in Slovenia. No US provider is in the data path. The one exception is transactional email, which goes out through Resend, an American company: it receives the address and the invite link, never the document.

    The sub-processors →

We are Dutch, and we would rather say so than hide behind a Delaware address.

Ownership sources: the Kiteworks announcement of the Zivver acquisition (17 June 2025); the Bending Spoons announcement of the WeTransfer acquisition (31 July 2024); Entrust on Signhost (2022); Box on SignRequest (2021); the RDI trust service status list, which carries QuoVadis as DigiCert Europe Netherlands B.V. Checked 3 September 2026.

Why there are two kinds of plan

One half is a gift. The other half pays for it.

That split is the whole idea, so it comes first. Everything further down this page is either the free half or the paid half.

Community

€0 for good

Why half of this is free.

I research how personal data leaks from the apps and clouds people trust. Paramant is what I would want a small firm to have: a way to get a document signed and to send a file that keeps client files in Europe, and that leaves proof you can check without us.

The Community plan is free, and stays free: 2 signatures a month, 50 transfers a month, and files up to 500 MB when you hand them over live, no card and no trial that runs out. That is my contribution back to the society these tools came from.

The business plans pay for the servers and for the work, and they keep the free half free.

Mick Beer, privacy and security researcherFounder of Paramantis Solutions B.V. · Harderwijk, the Netherlands · KvK 42115132
Sign a document

Business plans

from €29 a month

Organisations that need more, buy it.

The paid plans are what keeps the free half free. The tiers are exactly the ones on the pricing page: Firm and Enterprise for ParaSend, Firm, Business and Enterprise for ParaSign. Firm is one payment that covers both products.

  • Volume. 100 or 1,000 signatures a month instead of 2, and links that live 24 hours or 7 days instead of 1.
  • Control. Send history and link management, a notice to your own systems on upload and download, up to 50 registered devices, and up to 500 retrievals an hour through the API instead of 50.
  • Accountability. Named support with a reply within one business day, an audit log you can export, and help answering your customers' security questionnaires.
  • Your own server. Enterprise runs on a server of its own, with an SLA, and for ParaSign a sector server for health, legal or finance. The Data Processing Agreement applies to every plan.
See the business plans

Two products

One for signing. One for sending.

Both run on the same core, and both work in a plain browser. Nothing to install for you, nothing to install for the other side.

  • ParaSign

    Get a document signed.

    • Upload the PDF, place the fields, and mail it to whoever has to sign.
    • They sign with the link from that email, after signing in to the account it was addressed to.
    • You keep a receipt anyone can check offline, plus an entry in the public log.
    • A simple electronic signature under eIDAS. Not a qualified one, and we say so.
    What ParaSign isSign a document
  • ParaSend

    Send a file that disappears.

    • The file is encrypted in your browser before it leaves your device.
    • Our server only ever holds the sealed file in memory, never on a disk.
    • It is wiped after its last read, so there is nothing left to leak later.
    • That holds for the web app and the SDKs. The browser extensions still encrypt on our server, until that is changed.
    • In the web app you and the receiver are both online and compare a short code, and the file is handed over live. Sending to someone who is not online right now needs the API, the SDK, or the Send a link mode in the web app.
    What ParaSend isSend a file

How it works

Three steps, and you are done.

No plugin, no client software, no onboarding call. The whole thing happens in the tab you already have open.

  1. 01

    Pick the file

    Drop a PDF in your browser. It is encrypted on your own device, before anything is uploaded.

  2. 02

    Send the link

    The other side opens the link from the email and signs or reads it there. They do not have to sign up for anything.

  3. 03

    Keep the proof

    You get a receipt that can be checked without us, and a line in a public log that shows when it happened.

What it costs

Free to start. Then a flat price a month.

Prices are a month excluding btw. You can stay on the Community plan as long as you like; there is no card and no time limit.

  • ParaSign

    Getting documents signed.

    • €0Community · 2 signatures a month, no limit on receiving
    • €29Firm · 100 signatures a month, and ParaSend in the same payment
    • €299Business · 1,000 signatures a month, named support, exportable audit log
    • TalkEnterprise · your own server, SLA with service credits, licence to run it yourself

    €35.09 and €361.79 a month incl. 21% btw · yearly is cheaper

  • ParaSend

    Sending files that burn on read, one read on Community and up to ten on Firm.

    • €0Community · 50 transfers a month, 500 MB per file handed over live, 5 MB per file over a one-time link, 1 hour link expiry, burn on first read
    • €29Firm · 24 hour expiry, up to 10 reads per link through the API, send history, notices to your own systems, and ParaSign in the same payment
    • CustomEnterprise · your own server, SLA 99.95%, limits set for your organisation

    €35.09 a month incl. 21% btw · yearly is cheaper

See the full pricing page

Why you can trust it

Rules you can check. Every one has a proof.

Everyone has a privacy policy. Our rules come with a verify link each: a log, a header, a repo. Not a promise. Four of the nine are below.

  1. We never had it

    Encrypted in your browser before it leaves you, never written to a disk, gone after its last read.

    verify: architecture

  2. You own your keys

    Generated on your device, never sent. We see only the public half.

    verify: SDK source

  3. EU soil, EU law

    Hetzner Germany, Bunny DNS (Slovenia). No US provider in the data path. Email goes out via Resend, as /privacy sets out.

    verify: jurisdiction

  4. Verifiable, not trust-me

    The code is source-available (BUSL 1.1), every receipt can be checked without us, and a public log shows when it happened.

    verify: CT log
Read all nine rules

For the technically minded: the core uses ML-KEM-768 for encryption and ML-DSA-65 for signatures, the two standards NIST published in 2024. How we keep that current

Building on it instead of clicking? There is an SDK, a signing API and a self-host installer: read the developer docs →