Security & Compliance

Waiver World is built on enterprise-grade infrastructure with security and compliance at its core. Your data and your customers' signatures are protected by industry-leading standards.

Electronic Signature Legal Validity

Thanks to the Electronic Signatures in Global and National Commerce Act (E-Sign Act), passed into law in 2000, electronic signatures are legally binding and enforceable in the United States. The Uniform Electronic Transactions Act (UETA) further establishes the legal equivalence of electronic records and signatures with paper documents across most U.S. states.

When a waiver is signed through Waiver World, we capture and preserve:

• The signer's IP address
• Timestamp of when the signature was created
• Unique document identification number
• The signer's name and email address

This audit trail provides the evidence needed to demonstrate the authenticity and integrity of electronically signed documents.

Infrastructure Security

Waiver World is built on Convex, a modern backend platform that maintains rigorous security certifications and practices:

Certifications

• SOC 2 Type II Compliant - Annual audits verify security controls and practices
• HIPAA-Ready Infrastructure - Built on infrastructure capable of supporting HIPAA workloads (Waiver World itself is not HIPAA certified)
• GDPR Compliant - Continuous monitoring for EU data protection compliance

Data Encryption

• Encryption at Rest: All data is encrypted using industry-standard 256-bit AES encryption
• Encryption in Transit: All data transmission uses TLS/SSL encryption
• Database Isolation: Each customer database uses unique, random credentials

Infrastructure

• Hosted on Amazon Web Services (AWS), certified for SOC 2 Type II, ISO 9001, GDPR, and FedRAMP
• Automated vulnerability scanning and intrusion detection
• Annual third-party penetration testing
• Multi-factor authentication required on all critical systems

Payment Security

All payment processing is handled by Stripe, a certified PCI Service Provider Level 1 - the highest level of certification in the payment industry. Waiver World never stores your full credit card numbers on our servers.

Electronic Waiver Advantages

Using electronic waivers through Waiver World provides significant advantages over paper processes:

Access

Present your waiver to participants at the earliest possible time - days, weeks, or even months before their activity. This gives signers adequate time to read and understand your document, reducing claims that they were "pressured" to sign immediately before participation.

Integrity

Unlike paper waivers where participants might cross out sections or make modifications, electronic waivers maintain document integrity. Signers cannot manipulate the wording of your carefully crafted legal document.

Transparency

Both you and your participant receive a time-stamped, IP-labeled copy of the signed document. Participants can review their signed waiver at any time, and you maintain a complete, searchable archive of all signed documents.

Data Protection Practices

• Access to production systems limited to authorized personnel only
• Audited access control systems with regular reviews
• No customer data is publicly accessible unless explicitly configured
• Third-party systems audited annually for SOC 2 Type II compliance

Reporting Security Issues

If you discover a potential security vulnerability, please contact us immediately at security@waiverworld.com. We take all reports seriously and will respond within 24 hours.

Questions?

For questions about our security practices or compliance certifications, contact us at security@waiverworld.com.