What happens between the upload and the seal.
Signitri prepares a document, verifies each signer against a government photo ID, takes their signatures in the order you set, and seals the result into an evidence pack. This page follows that arc from both ends of it.
- 01Two audiencesOwners send. Signers receive a link and leave.
- 02Preparing a documentUpload, fields, recipients, order, signing window.
- 03Identity verificationID capture, liveness, face match, ThisIsMe.
- 04SigningFour ways to sign, one field at a time, in order.
- 05The evidence packWhat is sealed, and what is inside it.
- 06Teams and the audit logSeats, roles, the admin console, the record.
Owners send. Signers receive a link and leave.
The same document reaches two people who have nothing in common. Owners have accounts, teams and an invoice. Most signers have none of that and will use Signitri exactly once.
Owners live in the app
An owner signs in, uploads a document, places fields, adds recipients, sets the order and the signing window, and sends it. After that they watch progress, remind whoever is holding it up, decide the identity checks that a person has to look at, and download the evidence pack when the last signature lands.
Density is the point on this side. Tables, filters, a persistent sidebar, product vocabulary. Someone who does this every week should not be walked through it.
Signers arrive on a link
A signer gets one link, by email or by WhatsApp. They verify their identity, read the document, fill the fields addressed to them, and go. There is nothing to install, no account to create, and no password to remember afterwards.
So this side is the opposite: one idea per screen, larger type, 44px controls, and no product vocabulary at all. A signer is told what is about to happen before it happens, because they have no reason to trust a company they met four minutes ago.
Each link is tied to one recipient and stops working when the signing window closes.
Upload a PDF. Signitri reads it and proposes where the fields belong.
Field placement is the part owners repeat most, so it is the part that guesses ahead of you. Every suggestion is yours to move, resize or delete before anything is sent.
The upload
PDF, up to 25 MB. Drop it on the page or choose a file. Signitri reads the document, finds the signature block, and proposes fields on the pages where they belong. The ones it proposed are marked as such, so you can check them rather than trust them.
Five kinds of field
Every field is assigned to exactly one recipient and carries that recipient’s color on the page. A field can be required, in which case that recipient cannot finish the document without filling it.
A dashed outline means something goes here. It turns solid once it is filled.
- Signature
- Where that recipient’s signature is applied. Almost always required.
- Initials
- For a page or a clause that has to be initialed separately.
- Date signed
- Filled with the date the signature was applied, not a date anyone types.
- Text
- A line the recipient fills in — a name, an address, an amount.
- Checkbox
- A term the recipient has to accept before the document will finish.
Sign in this order
- 1First recipient
- 2Second recipient
- 3Third recipient
Order, and the window
Add recipients by email address. Each one gets their own link. Signing is sequential: the second recipient’s link does not become live until the first has signed, so the order you set is the order the document travels in.
Every document carries a signing window — 7 days, 14, 30, or no limit at all. When it closes the links stop working, and you send a new one if you still need the signature. Recipients are told the date before they start, not after.
The one check you cannot switch off.
Before a signature binds, Signitri establishes that a live person, holding a government photo ID that belongs to them, is the person the document was addressed to. It runs on every document, on every plan, and there is no setting that disables it.
What the signer does
Two photographs and a number. The signer selects their document type — passport, driver’s license, national ID card — types the number exactly as printed, photographs the document, and takes a selfie. They are told what is needed and roughly how long it takes before they start, and the guidance is practical: lay the ID flat, fill the frame, face the light, no hat, no sunglasses.
Consent is an unticked box with the effect spelled out beside it. Nothing is submitted until they tick it, and the button that submits stays inactive until every part is in place.
What we check
- Reading the ID
- Optical character recognition lifts the surname, names, ID number, date of birth and citizenship off the document, so the record holds what the ID says rather than what the signer typed.
- Confirming a live person
- A liveness check confirms the camera is pointed at a person who is present, not at a photograph of one.
- Matching the face to the ID
- The selfie is compared with the photograph printed on the ID. The comparison returns a score, and the score is kept.
- Checking the ID number
- Structure first, then the checksum where the format carries one. A South African ID number carries a check digit, and it is verified.
- Cross-checking with ThisIsMe
- The name and number are checked against the issuing record held by ThisIsMe, the identity provider Signitri uses.
The ID photograph and the selfie are used for this check. They are not attached to the signed document. The outcome — verified, in review, or not verified — is what goes into the audit log.
Three outcomes, and only three
Verified
The checks agree. The signer goes straight on to reading the document. The score, the time and the provider are written to the audit log, and you see the result beside their name.
In review
Something landed below the automatic threshold, or part of the ID could not be read. A person looks at it by hand — usually within the hour, and never more than one business day. The signer is told nothing is wrong, that they can close the page, and that they will be emailed when it is decided.
Not verified
The checks disagree — most often a face that does not match the photograph on the ID. That signer cannot sign. They are told what to correct and may try again with clearer photographs, and you are told, so you can arrange another way for them to sign.
No identity check is certainty, and Signitri does not sell one. The claim is narrow, and it is written into the record rather than into an advertisement: this signature was made by someone who presented a government photo ID, whose live face was matched against the photograph on it, and whose ID number was confirmed with the issuing record.
Four ways to make a signature. One record of who made it.
The mark is only the visible half. What makes it defensible is that it arrived attached to a verified identity, at a recorded time, from a recorded device.
Drawn
With a finger on a phone or a mouse on a desk. The ink renders in fountain-pen blue-black, never flat black.
Typed
The recipient types their name and picks one of two signature faces.
Uploaded
A PNG or JPG of a signature they already hold.
Photographed
They sign a blank sheet and photograph it. Signitri lifts the strokes off the paper.
A signature and a set of initials can be kept and reused on the next document, so a repeat signer redraws nothing. The identity check still runs again, every time.
Field by field, in their own color
A signer is never asked to hunt through a document for the places they are meant to touch. Their fields are highlighted in the color assigned to them, a panel beside the document lists what is still outstanding, and each entry takes them straight to it.
The button that finishes the document stays inactive until every required field is filled and the consent line is ticked. Then it says what it does: sign and finish.
2 fields to fill
- Signaturedone
- Date signedrequired
Identity verified 09:41 UTC · 98.2% match
Sequential signing, and waiting
Because signing runs in order, waiting is a normal state and is written as one. A signer whose turn has not come is told who is ahead of them and how many follow. A signer whose turn has arrived is told exactly that.
On your side the document names the person it is waiting on and how long it has been waiting, and you can remind them without leaving the page. One recipient can hold a contract up for days. That is a property of signing in order, not a fault, so nothing in the product renders it in the color of an error.
Sealed the moment the last person signs.
Nothing is final while a signature is outstanding. When the last recipient finishes, Signitri seals the document and produces the artifact you are actually buying.
A tamper-evident record of who signed, when, from where, and how their identity was verified. It contains the signed document, the full audit log, the verification result for every signer, a certificate of completion, and a cryptographic hash you can check independently of Signitri.
It is written to be read by someone who was not there — a counterparty, a regulator, opposing counsel — which is why the audit log inside it is plain sentences rather than event codes.
What is inside the pack
Compute the same hash over the sealed file yourself. If it differs, the file has changed.
One account, three contexts, one record of everything.
The same person is a different actor as an individual, as a member of a team, and inside an enterprise. Switching context switches the documents, the members and the invoice.
Seats and roles
You are charged per sender seat. Signers are never charged, and neither is a verification, however many a document needs. Personal is $18 / month, or $9 / month billed annually. Team is $25 / user / month, or $15 / user / month billed annually. Enterprise is priced against volume.
Invite a member by email address and choose their role at the invitation. Seat usage is visible before you invite, not after you are billed for it.
Team policy, and the one setting that is not one
Two policies apply to every member: whether members may cancel their own documents, and whether an administrator may enter support mode and see what a signer sees. Support mode writes every action to the log under the administrator’s name.
Identity verification is not among them. It is required on every Signitri document, and rather than showing you a switch you are not allowed to touch, the product states the constraint.
The admin console
User management, activity logs, audit reports, role templates, saved filters and CSV exports. It exists for the people who have to answer questions about what happened, which is rarely the same person who made it happen.
The audit log
Every action lands in the audit log in the order it occurred, timed to the second, with the actor named. Entries read as plain past-tense sentences rather than event codes, because the log is evidence and someone outside your company may have to read it without a glossary.
Actions taken by a signer carry the IP address and the device alongside them. The log exports as CSV, or as a formatted audit report, and a copy of it travels inside the evidence pack.
Lease agreement — 14 Loop Street
- 12 Aug 2026, 09:12:40 UTCAyanda Sithole sent the document to 3 recipients
- 12 Aug 2026, 09:38:02 UTCNkosi Dlamini opened the document
- 12 Aug 2026, 09:41:03 UTCNkosi Dlamini verified their identity — 98.2% face match
- 12 Aug 2026, 09:42:11 UTCNkosi Dlamini signed page 6 of 6
- 13 Aug 2026, 16:20:55 UTCThandi Mokoena submitted identity documents — sent to manual review
Run the whole arc once, on something of your own.
Send a document to yourself and verify your own identity. It takes about two minutes, and it answers more than this page can.