Server location
All data is stored exclusively on servers in Germany. Transfers to third countries outside the EU only happen under Standard Contractual Clauses (SCCs) with carefully selected providers. Subprocessors are listed on the subprocessors list.
Retention period and anonymization
Signed documents are kept indefinitely by default. Firm owners can set a period of 6 to 100 years under "Organization > Settings"; the statutory minimum is 6 years (§ 50 BRAO). When the period expires, VollSign anonymizes personal data in the application record while retaining cryptographic evidence and the audit log. Deletion of associated file objects from storage is currently not automated.
Right of access and erasure (Art. 15/17 GDPR)
Clients can submit an access or erasure request. VollSign provides you with an export of all personal data of a person as a PDF at the click of a button. For deletion, navigate to "Contacts > [Person] > Delete data".