Security and Compliance

Circularo keeps your documents and data safe by following top global security standards like ISO 9001/ISO27001/ISO 27017, GDPR, and the US ESIGN Act. Everything is stored securely in Microsoft Azure with automated backups. We also meet US, EU, and local data laws, including UAE's PDPL.

Secure Web Session Management

Circularo relies on proven session management frameworks, steering clear of custom-built implementations. Sessions are temporary and governed by idle and active timeouts to reduce risk.

Session IDs are securely transmitted via encrypted cookies (HTTPS) and never exposed in plaintext. Tokens are client-specific and automatically regenerated upon login.

Sessions are terminated at logout, with a logout option available on every page. Cookies are configured with HttpOnly, Secure, and SameSite attributes to prevent unauthorized access.

Secure and Resilient Data Management

All data at rest is encrypted with AES-256, while TLS protects data in transit. SSL certificates further secure communications between clients and servers.

Circularo implements hourly backups stored in geo-redundant locations, supported by strong backup and disaster recovery processes.

Hosted on Microsoft Azure, Circularo benefits from enterprise-grade security and compliance with standards such as ISO/IEC 27001, ISO/IEC 27017 and GDPR.

Secure Access Control Management

Access is role-based, ensuring users can only perform actions aligned with their permissions. Circularo does not access client documents by default.

Documents are private to their owners unless explicitly shared. Users can define granular access rights - view, edit, or sign - on a per-document basis.

Administrators can manage permissions at the team level, including documents, folders, templates, and contact lists.

Secure Digital Sealing and Signing

Circularo uses a Composite Signature Method to embed electronic signatures directly into PDF content. Documents can be sealed with a common AATL certificate or a unique organization-issued certificate.

Each signer uses their own certificate, ensuring authenticity and traceability. All signatures support Long-Term Validation (LTV), remaining verifiable even if a certificate expires or is revoked.

Integration with UAE Pass adds an extra layer of verified identity and regulatory compliance to the signing process.

Secure Audit Trail

Every document processed through Circularo includes a detailed, tamper-proof audit trail that tracks actions chronologically - who did what, and when.

The audit trail is generated on demand, branded to user settings, and fully aligned with legal requirements such as the ESIGN Act. It provides full visibility and verification throughout the document lifecycle.

Secure Application Management

Circularo enforces strict access controls to prevent unauthorized document access or actions.

Role-based permissions and audit trails ensure accountability and transparency.

Authentication via username/password or OAuth 2.0 SSO supports secure and flexible user access.

ISO 27001/ISO 27017/ISO 9001
Information Security, Cloud Security and Quality
Management

GDPR Compliance
General Data Protection
Regulation

DESC Cloud Security Provider
Security Standard

eIDAS Certified Electronic
Identification and Trust Services

Secure & trusted

Verifiable, legally binding digital signatures

National digital identity

Circularo can be easily integrated with any national digital identity provider to ensure maximum security and compliance when signing documents digitally.

Electronic certificates

Circularo supports X.509 standard and any PKCS #12 compatible PKI Certificates. Documents are signed with AATL or EUTL electronic certificates issued by Trusted Certification Authority.

Legality

Signature laws vary by country, but we at Circularo make sure that your organization meets the legal requirements for eSigning wherever you do business.