You never give us your certificate. Ever.

The most important security decision in RobyContracts was deciding what NOT to receive. Your .p12 and its password are the key to your electronic signature: a system that asks you for them is a system that can sign as you.

  • The .p12 never leaves your computer

    RobyContracts generates the PDF UNSIGNED. You download it, sign it in your own Adobe Acrobat or Reader with your certificate, and upload the signed PDF. We never receive, store, process or log your certificate or its password. This is not a policy promise: the code to do it does not exist.

  • Each company sees only its own data

    All data is isolated per owner at the database level (PostgreSQL Row Level Security), not just on screen. A query that forgets to filter does not return someone else’s contracts: the database refuses.

  • How AI requests are protected

    RobyContracts does not train models on your documents. Each request with contract content sent through OpenRouter requires a provider that does not collect the information sent or keep it after processing. If none qualifies, the request fails.

  • Encrypted in transit and at rest

    Everything travels over HTTPS/TLS and is stored encrypted. Documents live in private storage: there is no public link for anyone to guess.

  • The tenant’s link opens one contract

    Each tenant gets a review link and a separate access code in the email. The code opens only that contract while review is available; it does not appear in the web address or grant access to your account.

  • Review and upload records

    See when the review link was opened and when a PDF was uploaded as signed. The app checks for electronic signature markers, but does not validate the signature or identify the signer.

What it runs on

Database and storage on Supabase (managed PostgreSQL, with RLS enabled on every table). Application on Vercel. Transactional email on Resend. We run no servers of our own and do not create or maintain separate backups of customer documents. If a document is lost from primary storage, we cannot restore it from our own backup.

Found something?

If you think you have found a vulnerability, write to us before publishing it. We will respond, fix it, and credit you if you want.

Talk to us

The next renewal date you miss costs more than this does

A lease contract takes a long hour of copying, pasting and double-checking. Here it takes minutes — and the numbers are right.

Start free

Your first contract is free. No credit card.