SignCloud covers electronic signature, identity verification and e-mail evidence services. This notice explains what data is processed when you use the services, and for what purposes.
For your customer-account data, the controller is MILONO HOLDING, operating the services under the SignCloud brand, 254 Rue Vendôme, 69003 Lyon, France. Contact: contact@signcloud.fr. For the documents you send for signature, the persons you have verified and the e-mails you have sealed, you (or the issuing organisation) are the controller, SignCloud acting as processor (see the DPA).
This data is processed to perform the requested signature service (contractual basis) and to maintain the technical record associated with the transaction (legitimate interest, where applicable).
For each finalised document, the customer selects a 10, 20 or 50-year retention policy according to its purpose and legal basis. A separate integrity-controlled package is deposited in external storage. This service is not represented as a certified electronic archiving system, and expiry handling remains subject to contractual, statutory and legal-hold requirements. No data is sold to third parties for commercial purposes.
Primary hosting in France (o2switch) with encrypted off-site backups: Hetzner, Germany (European Union). We rely on subprocessors for specific functions, which only access the data needed for their task:
The service records technical evidence designed for electronic-signature workflows and implements personal-data protection measures. The legal qualification of each signature level and the privacy documentation must be reviewed against the production configuration and the customer's use case.
You have the right to access, rectify and erase your data. To exercise it, contact the organization that sent you the document via SignCloud.
For a SignCloud customer account, the deletion process is available on the dedicated account deletion page.