Legal Notices

1. Site operator

The website at https://e-sig.org (the "Site") is operated by VMVTech, Ltd., a company organized in the United States and a subsidiary of VMVCorporation (US). The products esig-suite and DSalvus are products of VMVTech, Ltd.

The UUAID Foundation and IAASO are independent public-interest institutions. They are not assets of VMVTech, Ltd. or VMVCorporation, and references to them on this Site do not imply that VMVTech owns, controls, or speaks for them.

The Site is a static informational website hosted on Amazon Web Services (S3 and CloudFront) in the United States (us-east-1 region). It has no user accounts, no login, and no forms, and it sets no cookies of its own. Details of the limited data involved in serving the Site are in the Privacy Notice.

2. Software licensing

esig-suite is open-source software released under the MIT License. The full license text is available in the repository at github.com/vmvtech/esig-suite/blob/main/LICENSE. The MIT License is the only license VMVTech grants to the code, including the npm packages @e-sig/core, @e-sig/react, and @e-sig/supabase; your use remains subject to applicable law (see Section 6). The license includes its own disclaimer of warranty and limitation of liability, which apply to the software as published.

Paid offerings described on /pricing (e-sig Cloud, Business self-hosted support, and Enterprise) are governed by their own separate agreements, such as order forms, a master services agreement, and, where applicable, a data processing addendum or business associate agreement. They are not governed by this page or by the website Terms of Use. Nothing on this Site is a binding offer, and pricing may change.

3. Trademarks

e-sig, esig-suite, DSalvus, VMVTech, and the associated logos are marks of VMVTech, Ltd. No right or license to use these marks is granted by making this Site or the open-source software available; the MIT License covers the code, not the marks.

All third-party names and marks that appear on this Site, including DocuSign, Dropbox Sign, Adobe, PandaDoc, BoldSign, DocuSeal, Documenso, Anvil, Stripe, AWS, GitHub, and npm, are the property of their respective owners. They are used solely to identify those companies and their products for comparison and integration purposes. Their appearance does not imply any affiliation with, sponsorship by, or endorsement from those companies, and none should be inferred.

The names UUAID Foundation and IAASO belong to those independent institutions and are not marks of VMVTech, Ltd.

Links to third-party websites are provided for convenience only; VMVTech, Ltd. does not control and is not responsible for their content, terms, or privacy practices.

4. Comparative information disclaimer

The Site contains comparative pricing and feature tables naming third-party products, including DocuSign, Dropbox Sign, Adobe, PandaDoc, BoldSign, DocuSeal, Documenso, and Anvil. These tables reflect indicative public rates and published information as of 2026 and are provided for general informational purposes only; they are not procurement, purchasing, financial, or legal advice, and you should not rely on them as the basis for any purchasing decision.

• Vendors change their plans, prices, features, and terms at any time and without notice. Always verify current terms directly with the vendor before making a purchasing decision.
• The tables are not an endorsement of, or by, any vendor listed.
• If you believe any figure or statement is inaccurate or out of date, we welcome corrections at legal@e-sig.org. We review reported inaccuracies and correct them where warranted.

5. Electronic signatures and no legal advice

The esig-suite software implements PKCS#7/PAdES digital signatures, RFC 3161 trusted timestamps, and hash-chained audit logs. We describe these as technical controls that support requirements commonly associated with the U.S. ESIGN Act and UETA, in particular evidence of intent, attribution, and document integrity. Technical controls alone do not make a signature legally valid or enforceable.

• The legal validity and enforceability of any electronic signature depend on the jurisdiction, the type of document, and the facts of the specific transaction.
• Self-issued (self-signed) certificates produce cryptographically valid signatures, but they are not trusted by default in stock PDF readers, which may display a trust warning until the certificate is manually trusted.
• eIDAS qualified electronic signatures (QES) are available only through qualified trust service provider (QTSP) partners, not from the software alone.

Nothing on this Site, in the documentation, or in the software is legal advice, and no attorney-client relationship is created by using either. For questions about whether an electronic signature meets your requirements, consult qualified legal counsel in the relevant jurisdiction.

6. Cryptography and export notice

The esig-suite software contains cryptographic functionality and may be subject to the U.S. Export Administration Regulations (EAR) and to import, export, or use restrictions in other jurisdictions. By downloading or using the software, you represent that you are not prohibited from receiving it under applicable law. You are solely responsible for compliance with the export, import, and cryptography laws and regulations that apply to you in your jurisdiction.

7. Copyright and DMCA procedure

Except for the open-source code licensed under the MIT License and third-party materials identified as such, the content of this Site is the copyright of VMVTech, Ltd.

We respond to notices of alleged copyright infringement consistent with the Digital Millennium Copyright Act (17 U.S.C. § 512). If you believe material on this Site infringes your copyright, send a written notice to legal@e-sig.org that includes all of the following:

1. Identification of the copyrighted work you claim has been infringed.
2. Identification of the material you claim is infringing, with enough information for us to locate it (for example, the URL).
3. Your name, mailing address, telephone number, and email address.
4. A statement that you have a good-faith belief that the use of the material is not authorized by the copyright owner, its agent, or the law.
5. A statement that the information in the notice is accurate and, under penalty of perjury, that you are the copyright owner or authorized to act on the owner's behalf.
6. Your physical or electronic signature.

Counter-notices. This Site contains only VMVTech's own content and identified third-party material; it hosts no user-submitted content. For content in the GitHub repository (for example, third-party contributions), GitHub's own DMCA process applies. Any counter-notice we receive will be handled consistent with 17 U.S.C. § 512. Please be aware that knowingly submitting a materially false notice or counter-notice can expose you to liability.

8. Security vulnerability disclosure

If you believe you have found a security vulnerability in esig-suite or in any VMVTech service, please report it to security@e-sig.org. Our disclosure policy and reporting guidance are published in SECURITY.md in the GitHub repository.

• We ask that you give us a reasonable opportunity to investigate and remediate before public disclosure, following the process and timelines in SECURITY.md.
• Include enough detail for us to reproduce the issue where possible.
• We ask that reports be sent privately by email rather than filed as public GitHub issues.

9. Forward-looking statements

Statements on this Site about future plans are forward-looking. This includes roadmap items, planned features and integrations, planned partnerships, and future pricing. Forward-looking items may change, be delayed, or be cancelled without notice, and they do not create any commitment by VMVTech, Ltd. Please make purchasing decisions based on features and terms that are currently available, not on roadmap statements.

10. Relationship of our legal documents

Three documents describe the legal framework for this Site, and each has a distinct role:

• Terms of Use: governs your use of the Site itself, including the governing-law and dispute provisions (State of Delaware, USA).
• Privacy Notice: describes the limited data involved in operating the Site and how data is handled in the products.
• Legal Notices (this page): identifies the operator and collects licensing, trademark, disclaimer, copyright, and contact notices.

Paid services are governed by their own separate agreements, which control over the website Terms of Use for those services. The MIT License governs the open-source code. We may update this page from time to time; the effective date above reflects the current version.

11. Contact

VMVTech, Ltd. (United States) can be reached by email:

• Legal, privacy, and copyright/DMCA: legal@e-sig.org
• Sales: sales@e-sig.org
• Security vulnerability reports: security@e-sig.org