Terms of Service

1. Agreement & Acceptance

By accessing or using VeeSign (the “Platform”), developed and operated by Veebase LLC (“Company”, “we”, “us”), you agree to be bound by these Terms of Service. If you are entering into these Terms on behalf of an enterprise, government entity, or other legal organization, you represent that you hold the requisite statutory authority to bind such entity.

2. Electronic Signatures & Legal Admissibility

VeeSign provides cryptographic electronic signature infrastructure designed to satisfy the rigorous statutory requirements of the US ESIGN Act, Uniform Electronic Transactions Act (UETA), EU eIDAS Regulation (Regulation EU No 910/2014), the Saudi Electronic Transactions Law (Royal Decree No. M/18), and the UAE Federal Decree-Law No. 46 of 2021 on Electronic Transactions and Trust Services.

The parties acknowledge that electronic signatures applied through the Platform with cryptographic byte ranges (ETSI PAdES / RFC 3161) shall be legally enforceable and admissible in judicial proceedings with evidentiary non-repudiation.

3. Signing Key Custody

On the hosted VeeSign service, every completed document is sealed with a PAdES digital signature using VeeSign's own signing certificate ("VeeSign Document Signing", issued by Veebase LLC, RSA 3072-bit). This certificate is self-signed and is not issued by a public certificate authority, and signers are not issued personal certificates or keys. The private signing key is stored on VeeSign's servers and protected by a passphrase; it is not currently held in a hardware security module (HSM). Enterprise customers may request that the signing key be kept in Google Cloud HSM. Self-hosted and private-cloud deployments may sign with the organization's own certificate and hold their own encryption keys. Data is encrypted in transit using TLS, and access to stored data is restricted to authorized personnel.

4. Data Sovereignty & Geographic Residency

VeeSign enforces strict geographic residency fences. Documents, audit logs, and cryptographic signatures created within designated sovereign boundaries (including GCC, EU, and US regions) remain anchored to authorized in-country data centers and shall not be routed or replicated across external foreign networks without affirmative enterprise authorization.

5. Acceptable Use & Identity Verification

You agree not to use the Platform for unauthorized impersonation, fraudulent document forging, or distribution of malicious files. Signer authentication events (email link, access code, account sign-in, passkey, or authenticator-app two-factor) are recorded in a timestamped audit trail.

6. Contact & Legal Notices

For legal inquiries, enterprise agreements, or compliance notifications, please contact: