# SecurySign

> SecurySign provides APIs for identity verification, digital signatures, enrolment, OpenID Connect (OIDC) sign-in and document encryption. The guides cover integration, request examples and the web app. Production API: https://securysign.com/api. Sandbox API: https://signa.dev.securysign.com/api.

Importable OpenAPI 3.1 request and response schemas: https://securysign.com/docs/openapi.json
Combined guides: https://securysign.com/llms-full.txt

## Getting started

- [Introduction](https://securysign.com/docs/overview.md): services and integration options
- [Quick start](https://securysign.com/docs/quickstart.md): register, request a signing token, embed the iframe, receive a signature
- [Demos](https://securysign.com/docs/demo.md): live LOA-4 signing demo, Android demo apps (download), web SDK identity-verification demo, and the SecurySign app walkthroughs

## Integration

- [Core concepts](https://securysign.com/docs/core-concepts.md): environments, the four credentials, RP ownership by contact email, scopes and the claims they add, levels of assurance, terms
- [Iframe](https://securysign.com/docs/iframe.md): signing iframe guide and reference: URL parameters, attributes, postMessage events, drop-in component
- [SDKs](https://securysign.com/docs/sdks.md): which SDK to use for which part of your stack
- [RP integration guide](https://securysign.com/docs/rp-integration-guide.md): register your application, credentials and the SSC secret, signing allowance, signing origins, redirect URIs, LOA-4, self-service API
- [IdP integration guide](https://securysign.com/docs/idp-integration-guide.md): connect an enterprise OIDC or SAML 2.0 identity provider

## Reference

- [KYC](https://securysign.com/docs/kyc.md): verify an ID document, liveness and face match; selfie of a verified customer (return_selfie); phone handoff; face re-confirmation
- [Enrolment](https://securysign.com/docs/enrolment.md): hosted enrolment from payment to certificate, mobile apps, certificate renewal and revocation
- [Single sign-on](https://securysign.com/docs/sso.md): OIDC sign-in against SecurySign, claims, user access tokens
- [SDK reference](https://securysign.com/docs/sdk-reference.md): server libraries (Node.js, PHP, Python, Java), web capture SDK (<securysign-liveness>, pass-through, CSP), mobile capture SDK (native, WebView, Android browser tab, hosted page)
- [API reference](https://securysign.com/docs/api-reference.md): base URLs and conventions for the OpenAPI reference (signing tokens, hash signing, PAdES, webhooks, KYC, relying parties, identity providers, certificates, encryption, visible signature, plans, OIDC)
- [Hash signing API](https://securysign.com/docs/hash-signing-api.md): create-and-approve signing requests for document hashes from your backend, passkey verification, batches, daily allowance, signed webhooks; with the endpoint reference
- [PAdES signing API](https://securysign.com/docs/pades-signing-api.md): send a PDF, have the user approve its hash with a passkey, receive the signed PDF; with the endpoint reference
- [Verification API](https://securysign.com/docs/verification-api.md): check signatures at receipt, validate against the CA, CRL and certificate status endpoint, read the signer's certificate; with the Certificates endpoint reference
- [Encryption API](https://securysign.com/docs/encryption-api.md): AES-256-GCM on the device with RSA-OAEP key wrapping to the user's HSM key; with the endpoint reference

## Workflows

- [Verification](https://securysign.com/docs/verification.md): verify a signature against the original document in the SecurySign web app
- [Encryption and decryption](https://securysign.com/docs/encryption.md): encrypt and decrypt files in the SecurySign Vault (PRF hardware key, AES secret, public key modes)
- [Hash signing](https://securysign.com/docs/hash-signing.md): sign a document's hash with your passkey in the SecurySign web app and download the signature package
- [PAdES signing](https://securysign.com/docs/pades-signing.md): sign a PDF with your passkey in the SecurySign web app and download it with the embedded signature

## Resources

- [Security and compliance](https://securysign.com/docs/security.md)
- [Errors and rate limits](https://securysign.com/docs/errors.md)
- [Pricing and limits](https://securysign.com/docs/limits.md): plans and the per-day signing allowance
- [Troubleshooting](https://securysign.com/docs/troubleshooting.md)
- [Changelog](https://securysign.com/docs/changelog.md)
## Legal

- [Terms of Service](https://securysign.com/docs/terms.md)
- [Privacy Policy](https://securysign.com/docs/privacy.md)
- [Cookie Policy](https://securysign.com/docs/cookies.md)