Legal and compliance
Current contract-signing boundary
What Holidario's drawn signature preserves and why it is not yet a complete external signing workflow.
- I own or administer an agency
- I manage operations
- Agency
On this page
Unsupported for end-to-end external signing#
Holidario can display two signature pads, store an image and timestamp for each party and generate a PDF when both are marked signed. This mechanism must not yet be used as the sole external signing workflow or as sufficient proof of identity or consent.
Why this boundary exists#
View generates one signed link valid for 60 minutes. The same link displays both parties' signature pads. Anyone holding it can interact with either pad; there are no separate signer links or identity checks before a signature is stored.
The current product flow also does not provide:
- individual send and resend for each signer;
- authentication, one-time code or identity verification;
- explicit acceptance and a complete process-evidence record;
- visible link revocation or per-recipient expiry state;
- signing order, reminders and rejection;
- a supersession history or safe action to void a stored signature.
A drawn image, timestamp and signed URL do not by themselves prove who controlled the device or their authority to represent a party. Required validity and evidence also depend on the document and legal context; validate your process with appropriate advice.
Safe interim procedure#
- Holidario Create and review Prepare the contract, validate details, and export the final PDF without using public panels as the complete flow.
- Organization Choose the procedure Define approved provider or process, signers, representation, order, and required evidence.
- External provider Verify and sign Handle identity, consent, rejection, reminders, audit evidence, and a copy for each party.
- Custody Retain the final copy Share only with authorized participants and apply the organization’s legal and retention policy.
- Create and review the contract using Create, review and export manual contracts.
- Download its PDF without using the public pads as the signing workflow.
- Send the document through your organization's approved signing provider or procedure.
- Verify identity, representation, order, evidence and the final copy there.
- Share the final copy only with authorized participants, for example through Shared Documents.
- Retain the evidence under your organization's legal and retention policy.
Never upload another person's signature, sign both pads on their behalf or share the link in a group.
If a signature was stored by mistake#
- stop distributing the link and PDF;
- record the contract ID, affected party and approximate time;
- do not try to replace the signature from another device;
- create a corrected version only after deciding how the earlier one will be invalidated;
- contact support and your organization's legal owner.
Do not include signature images, identity documents or the full link in a support ticket. This boundary remains unsupported until separate signer routes, verification and sufficient audit evidence exist and the complete flow has been validated.