KemDoc Get early access
In development · Kemit Security

Get it signed.
Keep it private.

KemDoc is electronic signing with a zero-knowledge vault behind it. Send a document, collect a signature, store the result — without handing a third party readable copies of everything your clients sign.

engagement-letter.pdf Encrypted
Signature · 28 Jul 2026
SEALED KemDoc
The problem

Your signing tool can read everything

Every contract, settlement, medical form and offer letter you've sent for signature sits in plaintext on somebody else's server. That's the default, and almost nobody chose it deliberately.

01

Readable by the vendor

Mainstream e-sign platforms hold your documents in a form their own systems can open. You're trusting a policy rather than a design — and policies get revised in a release note.

02

A breach takes the archive

When a signing provider is compromised, the loss isn't one file. It's every document every customer ever signed, sitting in one searchable pile.

03

Metered by the signature

The incumbents charge per envelope, so the tool gets rationed inside your own business. We'd rather sell capacity than tax the thing the product exists to do.

How it works

Encrypted before it leaves you

The document is encrypted on your side. What we store is ciphertext plus the audit trail needed to prove what happened and when.

01

Upload and address it

Drop in the PDF, mark where the signatures and dates go, and say who needs to sign. Encryption happens before the upload, not after it lands. encrypt → upload → send

02

They open a link and sign

Your signer gets a link, opens it in a browser, and signs. No account to create, no app to install, nothing for them to configure. one link · no signup

03

It lands in your vault

The executed copy and its audit trail go into your vault, encrypted on object storage. Export or delete it whenever you want. signed · sealed · yours

Security

The keys stay on your side

Zero-knowledge isn't decoration here — it's the reason the architecture looks the way it does, and the reason some things are impossible for us.

01

Encrypted at rest, with keys we don't hold

Once a document is in your vault it's ciphertext to us — we can't open it, and neither can anyone who breaches or subpoenas the storage. We'd rather state that precisely than round it up into a slogan; the FAQ spells out exactly where the boundary sits.

02

An audit trail that stands apart

Who opened it, from where, and when — recorded and sealed alongside the document, so the record of the signing survives independently of the file.

03

Storage you can walk away from

Encrypted objects on Cloudflare R2, exportable in bulk. Leaving should cost you an afternoon, not a migration project.

What we won't claim

We won't tell you KemDoc makes a signature legally bulletproof in your jurisdiction. Electronic signature law differs by country and by document type, and some instruments — wills, certain property transfers — frequently can't be executed electronically at all.

What we will do is capture and seal a thorough record of the signing, and name the specific standards we've been assessed against once that assessment exists. Until then, treat anyone in this category promising blanket legal validity with suspicion — including us, if we ever start.

Who it's for

People whose documents are the sensitive part

If what your clients sign would be a problem in someone else's hands, the storage model matters more than the signature widget.

Accountants & bookkeepers Law firms & legal ops Therapists & clinics HR & recruiting Inspectors & surveyors Agencies & consultants
Pricing

Free forever, and it isn't the crippled kind

Every tier gets the same encryption, the same PAdES seal, the same timestamp and the same Certificate of Completion. Volume is what changes.

Free — 5 envelopes a month

The full zero-knowledge vault from your first document, not a trial of it. One user, 1 GB of storage, and no card. If five signature requests a month covers you, that's a plan and not a countdown.

$0 forever

Pro $9 · Business $29 a month

100 or 500 envelopes, 25 GB or 250 GB of vault, billed per account rather than per seat. A ten-person team on Business pays $29 in total — the same team on DocuSign typically pays $150 to $400.

And the row that matters most: cancel and you keep your documents — read, download and audit-trail export stay open on a lapsed account, on every tier. See the full comparison →

Want it before everyone else?

The beta opens to the waitlist first. Leave an email and you'll hear from us when there's something real to try — not before.