Selfhosted DocuSign alternative reddit / selfhosted ---------------------------------------------------------------------- LonelyMinimum · 2023-11-14 13:16 Hi everyone, For the past few months I've been working on DocuSeal - an open-source DocuSign alternative. Here is the list of features available: - PDF form fields builder - 11 field types available (Signature/Date/File/Checkbox etc) - Multiple submitters per document - Automated emails via SMTP - File storage on AWS S3, Google Storage, or Azure - Automatic PDF eSignature - PDF signature verification - User management - API and Webhooks - Mobile-optimized It's easy to self-host it under custom domain and SSL just with a single docker compose up command. It's also available on Cloudron. Would appreciate it a lot if you could give it a try. ---------------------------------------------------------------------- Stetsed · 2023-11-14 13:56 So the only thing I will say is that the problem with a "DocuSign" alternative is that docusign is more accepted within the proffesional community and when docusign says something was signed it's trusted. In this case what is to say you don't modify the data or something similar, I know you could send out a confirmation e-mail or whatever but you get my point. But ofcourse I will always take more apps that can be selfhosted :D ---------------------------------------------------------------------- LonelyMinimum · 2023-11-14 14:03 >So the only thing I will say is that the problem with a "DocuSign" alternative is that docusign is more accepted within the proffesional community and when docusign says something was signed it's trusted. In this case what is to say you don't modify the data or something similar, I know you could send out a confirmation e-mail or whatever but you get my point. The person that signs a documents receives a copy of the signed PDF via email - this way it helps to ensure that the contract the signer holds is the original and legit version of the contract (the signer doesn't have a private key to issue a new altered version, only the party that self-hosts can issue signed documents). Also if the signer try to modify the data it will break the digital PDF signature. So the PDF signature alone covers the trust aspect of signed docs even when self-hosting it. ---------------------------------------------------------------------- Stetsed · 2023-11-14 14:13 Yes but in this aspect there is trust required for the server, as with it's private key it can fake signatures. As I said, your trusting the party who is running the server, instead of a third party company which specializes in it like DocuSign. It will highly depend on the situtation and the type of company ofcourse, but I can definetly see situtations where they would be hesatant to use this in a proffesional setting. But as I said, looks like a great tool and I am always happy when more things can be selfhosted :D ---------------------------------------------------------------------- omohockoj · 2023-11-14 15:21 Let's model a situation where you can't trust your self-hosted signing server - they can alter documents and can issue new documents with their private key. But the signer of the document always receives a copy of the signed document from the server - and that PDF contains a digital signature with x509 cert. So in this scenario the valid digitally signed document that is provided by the signer party is always the correct one - since they don't have that private key and can't alter or issue new documents. ---------------------------------------------------------------------- InstinctiveDoubt · 2023-11-14 15:21 Congrats - looks super cool! Impressive to have built on your own :) And congrats on the PH launch too :) My 1 piece of feedback is that the branding would stop my company from using it. It's too fun/cute - I would feel embarrassed sending a link to a potential customer/investor to sign a contract with a cartoon seal logo ---------------------------------------------------------------------- Worldly-Researcher01 · 2023-11-14 15:54 To have adobe acrobat verify that the document is properly signed, we have to buy a document signing certificate, is that correct? ---------------------------------------------------------------------- LonelyMinimum · 2023-11-14 16:15 https://support.google.com/a/answer/13819338?hl=en you can manually add your self-signed certificate to your trust list in Adobe To get a document signed with Adobe trusted certificate it requires not only purchasing a cert but also deploying it on HSM ---------------------------------------------------------------------- Shane75776 · 2023-11-14 16:57 But that doesn't stop the server owner, i.e you, from modifying the data before sending out that "signed pdf". Obviously that's not what you are doing, but a random company or person who receives a document from your server *does not know that*. The reason DocuSign works is because it is industry trusted and likely is under very strict compliance and regulations that they have to follow. All of which, your self hosted option do not have. It's a nice idea in theory, but it fails at the most important aspect of what DocuSign accomplishes. ---------------------------------------------------------------------- nixblu · 2023-11-14 17:37 This is great! ---------------------------------------------------------------------- LonelyMinimum · 2023-11-14 17:40 Thanks ---------------------------------------------------------------------- PovilasID · 2023-11-14 17:43 It is cool that it exists but in EU we use qualified electronic signatures [eIDAS](https://en.wikipedia.org/wiki/Qualified_electronic_signature) that has cryptographic identification verification and national governments provides ability to sign documents using that protocol. Signing pieces of paper is still a thing but emulating it digitally looks a little strange to me. ---------------------------------------------------------------------- LonelyMinimum · 2023-11-14 17:49 eIDAS defined 3 types of digital signatures: simple, advanced and qualified. For the majority of transactions simple signature is sufficient and DocuSeal self-hosted complies with eIDAS simple signature standard. Advanced or Qualified signatures are only required in some specific cases like banking/lending. ---------------------------------------------------------------------- merced317 · 2023-11-14 18:02 https://www.docuseal.co/pricing $20/user/month just to get SSO. Time to add them to https://sso.tax/ IMHO. ---------------------------------------------------------------------- omohockoj · 2023-11-14 18:25 In the majority of cases a simple email is considered to be legal binding: [https://www.theguardian.com/world/2023/jul/06/canada-judge-thumbs-up- emoji-sign- contract](https://www.theguardian.com/world/2023/jul/06/canada-judge- thumbs-up-emoji-sign-contract) In that regards a self-hosted signing should not differ from agreeing to something via email (and that's basically what DocuSign does as well - everything else is just their marketing) ---------------------------------------------------------------------- Strict_Swordfish_974 · 2023-11-14 18:35 So what makes you better than [OpenSign](https://www.reddit.com/r/selfhosted/s/Ns1caMzvtV) ? Lots of alternatives coming about lately ---------------------------------------------------------------------- Shane75776 · 2023-11-14 18:36 Sure legally, doesn't mean a company is going to accept it. I just don't see the point at all in self hosting this. ---------------------------------------------------------------------- bm401 · 2023-11-14 18:44 Self hosted and storage via S3 or other cloud providers? Why not just local file storage? ---------------------------------------------------------------------- LonelyMinimum · 2023-11-14 18:54 - 11 field types available (signature, itials, images, attachments, checkboxes, radio etc) - API and Webhooks with documentation already available in self-hosted - Mobile optimized, including the part of creating document forms with many fields - AWS, GCP or Azure Cloud files storage with simple configurations - Audit Trail generation - Customizable email messages - Easy to install and use with our robust and optimized UI That's probably not a full list, we're aware of how competitive is this space is and we're confident that DocuSeal open-source is the most advanced among other self-hosted solutions currently available. ---------------------------------------------------------------------- omohockoj · 2023-11-14 18:55 >Self hosted and storage via S3 or other cloud providers? Why not just local file storage? Local file storage is also available (that's the default option) ---------------------------------------------------------------------- xboxhaxorz · 2023-11-14 21:07 In my case, i volunteer with an animal rescue called Sanctuary Hostel and we have board members and sometimes they need to sign things, a lot of them arent weird and will physically print, sign and then scan rather than use a pdf app with signing functionality, and if it requires multiple signatures on a single page, i have to cut and paste from each signer onto a single document Some members will forget to sign so if the app keeps reminding them that is great as well as it means i dont have to chase them So a docusign type option would be perfect for us and save all of us hassle ---------------------------------------------------------------------- mathiasnx · 2023-11-14 22:21 Better [ssotax.org](https://ssotax.org). The other page is the predecessor. ---------------------------------------------------------------------- panjadotme · 2023-11-15 04:45 I am so sick of security being paywalled ---------------------------------------------------------------------- rrrmmmrrrmmm · 2023-11-15 10:21 Nice, like [OpenSign](https://github.com/OpenSignLabs/OpenSign?tab=readme-ov- file#the-open-source-document-e-signing-solution), [signdocs](https://github.com/philgresh/signdocs?tab=readme-ov- file#overview), [contract](https://github.com/nonsalant/contract) or [LibreSign](https://libresign.github.io/)? ---------------------------------------------------------------------- PovilasID · 2023-11-15 11:59 Simple signatures are not sufficient in my experience and unqualified is used only for identification. I can use unqualified signature to login to my ehealth records and banking (identification) and qualified is required for anything that would require my signature: court documents; company registration disclosure filings; prescribing electronic medication scripts; issuing a loan or filing for repo; property sale or transfer and lots more. I even saw a law signed with a qualified signature. Unqualified eIDAS signatures are not considered binding in my jurisdiction. I think it is fine if you are signing with somebody outside of our jurisdiction. However, to do something remotely you either mail physical papers/go there or use qualified signature. There are a few exceptions for disabilities law enforcement and sometimes you can email a picture of physical scanned document but those are exceptions. ---------------------------------------------------------------------- LonelyMinimum · 2023-11-15 13:46 Find more about the project here: https://console.substack.com/p/console-170 ---------------------------------------------------------------------- eSizeDave · 2023-11-17 11:47 Being that it's open source you could of course simply change the logo and branding. ---------------------------------------------------------------------- eSizeDave · 2023-11-17 11:48 This great work. Well done. ---------------------------------------------------------------------- LonelyMinimum · 2023-11-17 11:49 Thanks ---------------------------------------------------------------------- PatienceZestyclose11 · 2023-11-19 01:12 Hi, ​ I gave it a try on the free version. It has many things that I immediately noticed would not serve our startup's purposes. Would you be interested in having a win win situation? we can provide you with feedback/requests on how to improve the service, you can give us a nice offer. ---------------------------------------------------------------------- InstinctiveDoubt · 2023-11-20 14:01 Fair point, hadn't thought of this - was just thinking of the cloud- hosted version! ---------------------------------------------------------------------- Comfortable-Salt3343 · 2023-12-29 18:12 Hi there! Loving DocuSeal, it’s exactly what I was looking for. It’s simple and straightforward! Docusign was really frustrating because all I needed was to send unlimited documents for signing and occasionally they included some text fields. I couldn’t justify their costs and ambiguity in plan features. I am only on the free version, but it allowed me to connect my email. It says that you have to buy the pro version to connect your email. What is the difference between free and pro connection of email? Also, have you ever had issues with the DocuSeal emails going to junk mail? I just wanted to know if this happens/if I should warn recipients. Thank you so much, and I look forward to using DocuSeal!! :) ---------------------------------------------------------------------- LonelyMinimum · 2023-12-29 18:21 Thanks for the feedback! Gmail connection is enabled for all new free account per 7 day trial. After trial you can continue using DocuSeal but without Gmail connection (or upgrade to Pro to keep Gmail connection). Some free @gmail users reported that their signature emails appear in spam - it's recomended to use Google Workspace Gmail with custom domain for better deliverability. (Alex, one of the DocuSeal co-founders) ---------------------------------------------------------------------- Comfortable-Salt3343 · 2023-12-29 18:22 Thank you so much for the quick response! I actually connected my Microsoft Outlook account. Do same terms apply? If so, I will gladly upgrade to Pro. Thank you :) ---------------------------------------------------------------------- LonelyMinimum · 2023-12-29 18:24 yeah, Outlook connection is a part of Pro as well ---------------------------------------------------------------------- Comfortable-Salt3343 · 2023-12-29 18:25 Appreciate it. Any issues going to spam for Outlook? ---------------------------------------------------------------------- LonelyMinimum · 2023-12-29 18:28 It depends on your email message content and if you use a custom email domain or not (sending via DocuSeal connection is the same as sending via Outlook web UI)