00

Sign documents in your browser, prove it years later.

ParaSign · document signing by Paramant

Send a contract out for signature and get it back signed, without it passing through anyone else's cloud. Anyone can check the result later, without us.

For legal, finance and healthcare practices in the EU that sign contracts and client documents.

Sign a document → See pricing →

Free on the Community plan: 2 signatures a month, no card, forever. Business plans from €49 a month excl. btw. The person you invite needs no account, only the link in their email.

What this is, before you read on. A ParaSign signature is a Simple Electronic Signature (SES): an ML-DSA-65 cryptographic attestation produced in your browser. It is not a notarised legal signature under eIDAS or any qualified-trust regime (QES). What the proof does show, and what it does not, is in section 04.

01 / What it does

Sign, co-sign, prove

ParaSign is the signing half of Paramant. The document you sign stays private: the plaintext and your signing key never leave your browser, so there is no copy of the contract sitting on our side waiting to be asked for.

PDF editor and visible seal

Place text, dates and annotations, manage pages, then drop the signature stamp on any page. The stamp is what readers see; the .psign envelope is the proof.

Co-signing with routing order

Add each person who needs to sign, in the order they should sign. Every invitation is bound to the exact email address you enter, and the encrypted document travels with the request.

Any file type, by fingerprint

Files that are not PDFs get a hash-only attestation: you sign a fingerprint of the bytes and recipients verify by re-hashing the same file.

Developer API from Pro

Plug signing into your own apps and quotes with the developer API and webhooks. See the documentation.

02 / What it costs

Community is free. Companies pay.

Two halves, and the split is the point. Individuals sign for nothing on the Community plan. Organisations that sign at volume buy a business plan, and those plans are what pay for the free one.

The Community plan is free, forever. It is not a trial and not a funnel. Businesses pay for the higher limits (longer links, more reads, more devices, a dedicated relay), not to unlock features, and that is what keeps the Community plan free.

Every plan gets the same encryption, the same post-quantum signatures and the same public proof log. Pay for volume, never for security. And pay per organisation, not per user.

Community

€0, forever

No card, no clock, no trial that quietly ends. It is called Community on the pricing page too.

  • 2 signatures a month
  • No limit on receiving
  • Full post-quantum crypto
  • Public verification log
  • No card required
Start free →

Receiving is not metered. The tier table in relay/lib/tiers.js has no inbound or receiving dimension at all, so being invited, opening an invitation and fetching the document back are not counted against anything, on any plan. Putting your own signature on one is: that counts against the 2 a month above, whoever sent it to you.

Why it is free

Paramant is built by Mick Beer, privacy and security researcher, founder of Paramantis Solutions B.V. (see the about page). The Community plan is his way of giving something back: whoever needs to sign a document without handing it to an American cloud can do that here, at no cost, with the same cryptography a paying customer gets.

It is not a limited edition of the product. Community gets the same signatures, the same encryption and the same public proof log as Business. What a paid plan buys is volume, an API, support and accountability. Never security.

Business plans

For firms that sign at volume, need the API, or have to answer to an auditor. Names and prices are the ones on the pricing page; checkout lives there.

Pro
€49/month
excl. btw · charged €59.29/mo incl. 21% btw
Annual €499 excl.
  • 100 signatures a month, then €0.40 each, up to 1,000
  • Up to 500 ParaSend retrievals an hour through the API
  • API access
Business
€299/month
excl. btw · charged €361.79/mo incl. 21% btw
Annual €2,990 excl.
  • 1,000 signatures a month
  • Named support, response within one business day
  • Exportable audit log with CT tree head
Enterprise
Let's talk
Per organisation
  • Dedicated relay instance
  • Sector relay (health, legal, finance)
  • SLA with service credits
  • Self-hosting licence

Prices shown excl. btw (VAT). Checkout charges incl. 21% btw: Pro €59.29/mo or €603.79/yr, Business €361.79/mo or €3,617.90/yr. Pricing is per organisation, not per user. Checkout and the full comparison are on the pricing page.

03 / How to begin

Three steps to a signed document

Signing a document needs a Paramant account, because the signing key is bound to it. Opening a signing request someone sent you does not: invited signers follow the personal link in their email.

  1. Create a free account. No card, no time limit. The Community plan covers 2 signatures a month.
  2. Open ParaSign and pick your document. PDFs get a visible signature stamp you place on any page; other file types are attested by fingerprint. Add co-signers if you need them, then sign. Your key is unlocked with Face ID, Touch ID or a security key the moment you sign, and it is never exported.
  3. Download and share. You get the stamped PDF and the .psign envelope. Anyone can check them on the verify page, offline, without an account.
04 / How it works, and how to check it

The technique is the evidence, not the pitch

None of the above is worth anything if you have to take our word for it. This is the machinery underneath, and next to every claim is the place you can go and check it yourself.

ML-DSA-65 (FIPS 204)

ML-DSA-65 (FIPS 204), generated in your browser. The private key never reaches the relay. The algorithm register on the crypto agility page lists it as the loaded default.

You own your keys

The private key is generated on your device and never sent. We see only the public half. How that works is on the security page.

SHA3-256 for non-PDF files

A hash-only attestation signs the SHA3-256 digest of the bytes. Re-hash the same file and the signature either matches or it does not.

Public transparency log

Every signature is entered into a public, append-only log. Inspect it on the CT Log.

Verification without us

A signed document verifies without contacting us. Check a .psign envelope on the verify page: no account, no API key, no call home.

Source-available code

The relay is source-available on GitHub. Who is behind it is on the about page.

EU soil, EU law

Hetzner Germany, Bunny DNS (Slovenia). No US provider in the data path. Email goes out via Resend, as /privacy sets out. The subprocessors are listed there, and rule 5 states the same claim in full on our rules page.

What the proof covers. A completed signature shows that the key in the envelope signed this exact document, and that the entry sits in the public log. It does not show who holds that key. To bind a signature to a named email address, send the document as a signing request rather than signing in open mode.

And what it is not. A ParaSign signature is a Simple Electronic Signature (SES), stated in full at the top of this page. We say exactly what it is and what it is not, in the same place a buyer decides.

Sign a document →