The signing page

The recipient taps the button in the mail and lands on a page with no sign-in. They see their documents, the marked spots and a button to finish.

No account, no password

Whoever has the link is the recipient. The page therefore sits outside the account area, and the branding stands in for signing in. The token is 256 bits long; guessing the address means guessing it.

They see their documents, not the file

What is handed out is document names, page sizes and the marked elements. No field values, no record data, no account identifiers. The record itself stays invisible.

The state sits in the row, not in the token

Opening it a second time after finishing shows the result and not a second form. A withdrawn request says it was withdrawn, and an expired one names the way back. No blank page and no error, or the recipient thinks they did something wrong and picks up the phone.

Declining is a path, not a fault

Anyone not wanting to sign says so on the same page and may add a reason. The field is optional. Without this path the process waits the full deadline for someone who cancelled long ago. The trigger Signature declined fires at once.

Built for the phone

Most people open the link on the move, and that is where it is decided whether they sign. The page is built for it: one document at a time, the marked spot scrolled into view, the signing sheet filling the screen.

Step by step

1. The recipient opens the button in the mail.
2. They page through the documents and fill the marked spots.
3. They sign on the signing sheet.
4. They finish and get the completed PDFs as an attachment.

The recipient says the link does not work.

Usually the deadline has passed or the request was withdrawn. The page says either in plain words. Send again puts out a fresh request.

Can they still sign after declining?

Not through the same link. Anyone changing their mind gets a new request, carrying the documents with the record's current state.

Do they get the signed document?

Yes, attached to the confirmation mail. That is not a courtesy but the point: they should be able to keep it without access to the application.

Do they see who we are?

They see the account's name and logo. Both come from the account settings.

Can I see beforehand what they see?

Best with a test record and your own address as recipient. The page is the same, and you notice in five minutes on your own phone whether it holds up.