Fork of Documenso · AGPL-3.0
Documenso fork
Signing with a key that never leaves the vault.
We run Documenso at sign.tdpdf.com. Our fork adds a signing transport for Azure Key Vault, so the private key stays inside a hardware security module. Sealed PDFs carry RFC 3161 timestamps and validate in Adobe Acrobat. It also fixes sealed field values that landed in the wrong place on pages with an offset box.
For the community: The patches, the build script, the Docker Compose stack and the backup runbook are all published. Read them, reuse them, or run your own copy.