Effective at product launch
The Inkset platform is in private beta. This policy describes how the platform will operate when it opens to the public, and takes effect for all users on that date. Beta participants are governed by the terms of their beta program until then. Where this document names a capability such as identity verification or on-chain records, that capability is part of the launch release.
Overview
This policy describes how Inkset binds an electronic signature to a verified real-world identity, how that signature is recorded and secured, and what legal effect that record carries. It applies to every signature executed through the Inkset platform.
Identity Verification
Before you may sign any document through Inkset, your identity is verified through Inkset’s KYC process with a government-grade identity verification provider. This verification confirms your name and identity against government-issued identification.
Cryptographic Identity Binding
Once your identity is verified, Inkset generates a cryptographic key pair associated with your verified identity. This key pair is held in custody by Inkset, encrypted using hardware-security-module-backed key management infrastructure. Inkset facilitates signing on your behalf using this key, but only you can direct when and how it is used to sign; Inkset does not use your key independently or on behalf of any other party.
Every signature you complete on Inkset is therefore tied to your verified identity through this key pair, not merely to your Inkset account or email address. This binding is recorded on a public blockchain (Arbitrum) at the time of signing.
Document Integrity
When you create a document in Inkset, Inkset computes a cryptographic hash (SHA-256) of the document and stores the document in Amazon S3. This hash is anchored on-chain at the time of creation. The hash remains the same for the life of the document, regardless of when signatures are subsequently completed. Any alteration to the document after creation will produce a different hash, making the alteration detectable.
What the Signature Record Contains
Each signature you complete generates a record containing your name, email, the time of signing, the document hash described above, your IP address and device information at the time of signing, your consent to this policy and the Electronic Records and Signatures Disclosure, a unique Signature ID, and the blockchain transaction ID anchoring the signature.
Evidentiary Effect
By signing a document through Inkset, you acknowledge that you have read and understood the document you are signing and intend to be bound by its terms. The signature record described above, including the cryptographic identity binding and on-chain document hash, may be relied upon as evidence of your identity, intent, and agreement to the signed document, to the same extent as a handwritten signature, in any dispute, proceeding, or legal matter.
Compliance
Inkset’s electronic signature process is designed to comply with the U.S. ESIGN Act and UETA, the EU eIDAS Simple Electronic Signature (SES) standard, the UK Electronic Communications Act, and equivalent electronic signature laws in Canada, Australia, Singapore, Brazil, Japan, Chile, and Argentina. Whether a particular electronic signature is enforceable depends on the document, the parties, and the jurisdiction; Inkset does not provide legal advice.
Signature Tier & Future Upgrades
Inkset’s signatures are designed to the Simple Electronic Signature (SES) tier under eIDAS and equivalent standards globally. Inkset’s architecture is designed to be compatible with future upgrades to Advanced Electronic Signature (AdES) and Qualified Electronic Signature (QES) tiers without requiring you to take any additional action; any such upgrade will be reflected in an updated version of this policy.
Retention
Your signature record, including the executed document and associated cryptographic data, is retained for a minimum of seven years in accordance with applicable record-keeping requirements. The on-chain record of your signature is permanent and cannot be altered or deleted by Inkset or any other party.
Where retention of your signature record conflicts with a data deletion or erasure request made under applicable privacy law, Inkset retains the record under the legal-obligation exemption available under such law, consistent with Inkset’s Privacy Policy.
Questions
If you have questions about this policy, contact info@inkset.io.