# MOXIS — E-Signature

MOXIS by XiTrust Secure Technologies GmbH holds a panel rating of 2.5/5 from 6 AI judges (category median 2.5/5), as of 2026-10-15. Provenance: EU-Made; sovereignty: not determined.

- Vendor: XiTrust Secure Technologies GmbH (https://www.moxis.co)
- Category: [E-Signature](https://whats-best.ai/software/e-signature.md)
- Provenance (editorial classification): EU-Made
- Canonical page: https://whats-best.ai/software/e-signature/moxis
- Alternatives: https://whats-best.ai/software/e-signature/moxis/alternatives ([markdown](https://whats-best.ai/software/e-signature/moxis/alternatives.md))
- Data as of: 2026-10-20 · evaluated 2026-10-15 · oldest source captured 2026-10-13

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: XiTrust Secure Technologies GmbH
- Headquarters: Not stated on the vendor’s pages as of 13 Oct 2026
- Data hosting: Not stated on the vendor’s pages as of 13 Oct 2026
- Free plan: Not stated on the vendor’s pages as of 13 Oct 2026

## The panel's verdict

MOXIS, an e-signature platform from XiTrust Secure Technologies GmbH of Graz, Austria, is strongest on signing workflow, where scores run 7 to 8: sequential, parallel and conditional signing with approval and escalation logic, bulk sends to 10,000 contacts and 100 documents per click, and unlimited external signers without extra licences are all evidenced. Signature levels score 6 to 7, with EES, FES and QES labelled per plan — Now carries simple and advanced, Business adds qualified — and A-Trust, D-Trust and Swisscom named as certified trust centres. Pricing transparency is the weakest result, min 1 and max 1: the plan pages show tiers and contents but no price figure, so no cost is computable from public pages. Integration and API spans 4 to 6, its connector list concrete but its REST API story resting on one sentence. Sovereignty is the genuine split, 3 to 6: judges crediting the stated EU/CH high-security datacentre and the on-premises option sit high, while those weighing unknown ownership, subprocessors and certifications sit low. Evidence and retention is uniform at 4.

**Speaks for it:**
- Covers sequential, parallel and conditional signing with approval and escalation logic
- Bulk sends reach up to 10,000 contacts with up to 100 documents per click
- Unlimited external signers carry no extra licence
- Labels EES, FES and QES per plan, with A-Trust, D-Trust and Swisscom as certified trust centres under eIDAS and ZertES
- Names enterprise connectors across Microsoft 365, Teams, SAP, Salesforce, OpenText and Doxis, plus Adobe, Office and Explorer plug-ins and an MCP-based AI connector

**Held against it:**
- No plan price, per-signature fee, identification charge, API price, contract term or notice period appears on the captured plan pages
- We found no public information on long-term validation, a validation report or tool, or export of documents together with their evidence
- We found no public information on API documentation, webhooks, a sandbox, SDKs or rate limits, so the REST API story rests on one sentence
- Ownership, data residency and subprocessor exposure remain unconfirmed on the vendor's public pages, and we found no public information on certifications such as ISO 27001
- We found no public information on signer languages or signer accessibility

**Best for:**
- You send contracts at volume, where bulk sends to up to 10,000 contacts and 100 documents per click and unlimited external signers without extra licences match your scale
- You need qualified electronic signatures under eIDAS and ZertES, with identification issued on demand inside the signing flow and reusable for five years
- Your contracts live in SAP, Salesforce, OpenText or Doxis, and the named out-of-the-box connectors plus the MCP-based AI connector fit your landscape
- You want a cloud instance in an EU/CH high-security datacentre or deployment on premises in your own environment

**Avoid if:**
- Your disputes will land years later and you need documented long-term validation, a validation report and evidence export before purchase
- Your development team needs published API documentation, webhooks and a sandbox to evaluate before committing
- Your procurement must document ownership, subprocessor locations and certifications such as ISO 27001 before any contract

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price.

| Criterion | The Legal Counsel | The HR Operations Lead | The Revenue Operations Lead | The Integration Engineer | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| eIDAS levels & trust services | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3/5 |
| Signer identification | 3/5 | 3.5/5 | 3/5 | 3/5 | 3/5 | 3/5 |
| Signing workflow & signer experience | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 4/5 |
| Evidence, validation & retention | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Integrations & API | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 | 2/5 |
| European sovereignty | 2/5 | 2/5 | 2.5/5 | 3/5 | 1.5/5 | 1.5/5 |
| Pricing transparency | 0.5/5 | 0.5/5 | 0.5/5 | 0.5/5 | 0.5/5 | 0.5/5 |
| **Weighted verdict** | **2.5/5** | **3/5** | **2.5/5** | **3/5** | **2.5/5** | **2.5/5** |

### The judges

- **The Legal Counsel** (v1.0): Decides which contracts may be signed electronically and at which level. Wants SES, AdES and QES named per plan and country, the qualified trust service provider linked to the EU Trust List, and an audit trail with timestamps that still validates when the contract is disputed in eight years.
- **The HR Operations Lead** (v1.0): Sends two hundred employment contracts a year, many of them fixed-term and so under written form. Wants QES that a new hire can complete on a phone in ten minutes, identification that accepts the IDs applicants actually hold, bulk sending from templates, and a price per qualified signature known before the contract is signed.
- **The Revenue Operations Lead** (v1.0): Measures how long a quote takes to come back signed and where it stalls. Wants signing from inside the CRM, templates sales cannot break, reminders and signing order that run themselves, and a signer experience that needs no account, no app and no explanation.
- **The Integration Engineer** (v1.0): Embeds signing into the company's own portal and archives the result in the DMS. Wants a versioned API with webhooks and a sandbox, every signature level reachable through the API rather than only in the web app, and signed documents exported with their evidence intact.
- **The Data Protection Officer** (v1.0): Knows every signer who holds an ID card up to a camera hands biometric and identity data to a provider they never chose. Asks who performs the identification, where documents and ID data are stored, how long the audit trail keeps IP addresses, and who the subprocessors in the trust service chain are.
- **The Skeptic** (v1.0): Knows "legally binding" usually means a simple signature. Reads for the level the default plan actually signs at, the QTSP the provider does not operate itself, the per-QES and ident fees on top of the plan, the envelope limit, and "eIDAS-compliant" from a provider that names no trust service at all.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Ownership | Not determined | — | — |
| Data residency | Not determined | — | — |
| Subprocessors | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Analytics tools: Google Analytics · Pardot Marketing Automation System · LinkedIn · Google Ads [S3]
- Complaint authority: Österreichische Datenschutzbehörde [S3]
- Cra dora GDPR: yes · yes · yes · yes [S2]
- DPA contracts: yes · EU-Standardvertragsklauseln [S3]
- Eidas certified: yes [S1]
- Eidas certified: yes · yes [S8]
- Eidas certified: yes · yes [S9]
- Eidas certified: yes [S10]
- Eidas signatures: yes [S4]
- Eidas zertes: eIDAS · ZertES [S7]
- EU validity: Valid in entire EU legal area per eIDAS, implicitly recognized outside EU [S7]
- Mobile data marketing: no [S3]
- Nis2 ltv: yes · yes [S2]
- No automated decisions: no [S3]
- Trust service provider: yes · A-Trust [S6]
- Whistleblowing email: HSchG · whistleblowing@xitrust.com [S4]

**Data**
- Logfile retention: 10 [S3]
- Newsletter opt out: yes [S3]
- Retention general: business relationship duration plus statutory retention (UGB, BAO) [S3]
- Subject rights: access · rectification · erasure · restriction · objection [S3]

**Hosting**
- Datacenter: EU/CH high-security datacenter · EU/CH high-security datacenter · customer environment · EU/CH [S2]

**Integrations**
- Adobe plugin: yes [S2]
- AI connector: MOXIS AI Connector (MCP) · yes [S11]
- AI connector capabilities: upload PDFs · specify signatories · define due dates · define signature categories [S11]
- AI connector standard: yes · MCP [S11]
- AI connector status query: yes · yes [S11]
- Enterprise systems: SAP · OpenText · Doxis · Salesforce [S10]
- Enterprise systems: SAP · OpenText · Doxis · Salesforce [S11]
- Explorer plugin: yes [S2]
- Explorer plugin: Explorer to MOXIS · send completed contracts as PDFs from file system for signing [S11]
- Filesystem plugin: Explorer to MOXIS: send PDF contracts from file system [S10]
- Mcp AI connector: yes [S2]
- Named systems: Microsoft 365 · Microsoft Teams · SAP · Salesforce · Doxis [S8]
- Named systems: Microsoft 365 · Microsoft Teams · SAP · Salesforce · Doxis [S9]
- Office plugin: yes [S2]
- Office plugin: Office to MOXIS plugin for sending documents to signature [S10]
- Office plugin: Office to MOXIS · add placeholders during document creation and sign [S11]
- Ready made: yes [S11]
- Rest API: REST API · yes · yes [S10]
- Rest API: REST API · yes [S11]
- Rest API scope: core functionalities including all modules · yes [S11]
- System integration: E-signatures can be integrated into systems [S7]

**Legal**
- At VAT id: ATU53880402 [S4]
- Ch register: CH-300-3020266-6 · CHE-159.106.021 [S4]
- Company register: Landesgericht für Zivilrechtssachen Graz · FN-219152h [S4]
- Controller: XiTrust Secure Technologies GmbH · Reininghausstraße 3, 8020 Graz, Österreich [S3]
- Copyright: 2025 · XiTrust Secure Technologies GmbH [S4]
- De register: Amtsgericht Düsseldorf · HRB-72554 [S4]
- Entity: XiTrust Secure Technologies GmbH [S5]
- Entity germany: XiTrust Secure Technologies GmbH Deutschland [S5]
- Entity name: XiTrust Secure Technologies GmbH · Reininghausstraße 3, 8020 Graz, Österreich [S4]
- Entity switzerland: XiTrust Secure Technologies AG Schweiz [S5]
- German entity: XiTrust Secure Technologies GmbH Deutschland · Am Nordpark 1, 41069 Mönchengladbach, Deutschland [S4]
- Terms cloud current: 30. Juli 2026 · yes [S5]
- Terms older versions: 9 [S5]
- Terms onprem perpetual: 30. August 2021 · no · yes [S5]
- Terms onprem subscription: 01. April 2024 · yes [S5]
- Website operator: XiTrust Secure Technologies GmbH [S4]

**Pricing**
- Billing models: per_user · per_signature_package [S2]
- Business price: Business · 46 [S2]
- Enterprise price: Individuelles Angebot [S2]
- Included users document based: 50 · 100 · 1000 [S2]
- Minimum contract term: 12 · 12 · 36 [S2]
- Minimum volume document based: 500 · documents per year · 500 · 5000 [S2]
- Minimum volume user based: 5 · 5 · 30 [S2]
- Now price: Now · 22 [S2]
- Setup costs: 0 · 0 · on_request [S2]
- Setup time: immediate · immediate · after_project_lead_consultation [S2]
- Team license: yes [S2]
- Timestamp: yes [S2]
- Updates included: yes [S2]

**Product**
- Addressbooks: yes [S2]
- AI connector capabilities: upload PDFs · define signers · define due dates · define signature categories · query status across instances [S10]
- AI connector mcp: MCP · yes [S10]
- Application options faq: Application via self-service app (NECT Wallet + A-Trust signature app) or on-site registration officer [S7]
- Attachment cosigning: yes [S2]
- Authentication nect wallet: Authentication via Nect Wallet App [S7]
- Auto identification: Auto-identification · yes · ID document scan · selfie video · 10 [S7]
- Automation: automated real-time updates on signature progress [S9]
- Batch signing: 100 [S2]
- Batch signing: 10000 · 100 [S9]
- Branding: yes [S2]
- Bulk signing limit: 10000 · 100 [S8]
- Business qualified eid: yes [S2]
- Business signature types: Business · EES · FES · QES [S2]
- Company suitability: suitable for companies of all sizes, from small teams to group-wide multi-stage processes [S9]
- Compliance features: regulatory compliance support including roles, audit trails and documentation [S9]
- Compliance support: Rollen · Prüfpfade · Dokumentation [S8]
- Customer count: 2000 [S9]
- Customer count claim: 2000 [S7]
- Dashboard status: yes [S2]
- Data sovereignty: Integrierte Datensouveränität [S5]
- Departments: HR · Einkauf · Vertrieb [S4]
- Deputy function: yes [S2]
- Description: Software solutions featuring electronic signature and encryption, mapping paper processes electronically without changing existing IT infrastructure [S4]
- Digital identity: Digitale Identität [S5]
- Digital identity: Digital Identity [S11]
- Drag drop signature fields: drag & drop · yes [S8]
- Eid validity faq: 5 [S7]
- Eid validity period: max. statutory term · 5 [S7]
- Eidas certified: yes · yes [S11]
- Eidas signatures: yes · yes [S3]
- Eidas signatures: eIDAS-zertifizierte Signaturen [S5]
- Eidas zertes conform: yes [S2]
- Enterprise dedicated manager: yes [S2]
- Enterprise deployment: cloud · on_premises [S2]
- Enterprise process configs: yes [S2]
- Estamp: eStamp [S5]
- Estamp: eStamp [S11]
- EU private cloud: yes [S2]
- Eudi wallet readiness: Basis for future EUDI Wallet use cases [S7]
- External signatories: yes [S7]
- External signers: yes [S2]
- Facial recognition signature approval: Signature approval via Face ID / fingerprint [S7]
- Form fields: yes · yes [S8]
- Form fields: form fields assignable as optional or mandatory [S9]
- Form toolbox: yes [S2]
- Identification in workflow: Identity issuance integrated directly into signature workflow, no prior preparation or appointments [S7]
- Identification method autoident: ID document capture · selfie video · Auto-Ident · yes · 10 [S6]
- Identification method nfc id card: nPA-Authentifizierung · NFC-capable smartphone · German ID card with online ID function · PIN [S6]
- Identification method registration officer: Registration Officer · yes [S6]
- Industries: Tax & Legal · Versicherung & Finanzen · Energieversorgung [S4]
- Industries: Tax & Legal · Energieversorgung · Versicherung & Finanzen [S8]
- Industries: Tax & Legal · Energy supply · Insurance & Finance [S9]
- Integration surface: E-signatures integrated into existing systems [S6]
- Modules: Elektronische Signatur · Digitale Identität · Zero-Click Signing · Integrationen · Workflow-Builder · eStamp · Integrierte Datensouveränität · xIDENTITY [S3]
- Modules: Elektronische Signatur · Digitale Identität · Zero-Click Signing · Integrationen · Workflow-Builder · eStamp · Integrierte Datensouveränität · xIDENTITY [S4]
- Modules: Elektronische Signatur · Digitale Identität · Zero-Click Signing · Integrationen · Workflow-Builder · eStamp · Integrierte Datensouveränität · xIDENTITY [S10]
- No special hardware: Usually only a smartphone and another end device needed [S7]
- No technical knowledge: no [S9]
- No technical knowledge required: no [S8]
- Now signature types: Now · EES · FES [S2]
- Npa authentication: Identification via NFC chip of German ID card [S7]
- Out of box integrations: yes [S10]
- Placeholder concept: drag-and-drop signature field placement with instant visualization [S9]
- Positioning: Europäische All-in-One-Plattform für elektronische Signaturen [S1]
- Qes legally equivalent: Enables QES legally equivalent to handwritten signatures [S7]
- Qr onsite signing: yes [S2]
- Realtime progress updates: yes [S8]
- Registration officer: Company-trained employees can issue xIDENTITY in-house [S7]
- Roles groups: yes [S8]
- Roles groups: roles with tailored permissions and individual signatory groups [S9]
- Self service no appointment: yes · no [S7]
- Sequential parallel conditional: yes · yes · yes · yes [S8]
- Serial function: yes [S2]
- Signature qualities: einfach · fortgeschritten · qualifiziert · eIDAS · ZertES [S8]
- Signature qualities: simple · advanced · qualified · eIDAS · ZertES [S9]
- Signature templates: reusable signature templates, shareable with team [S9]
- Signature visualization: yes [S2]
- Signing flow modes: sequential · parallel [S2]
- Signing logic: sequential signatures · parallel signatures · conditional signatures · approval and escalation logics [S9]
- Signing modes: Einzel- und Gruppensignatur · Einfach- und Mehrfachsignatur · konfigurierbare Anzahl an Signaturebenen [S8]
- Signing modes: individual signatures · group signatures · single and multi-signature · configurable number of signing sequences [S9]
- Signing protocol: yes [S2]
- Stamps estamp: yes · yes [S2]
- Templates: yes · yes [S8]
- Trust centers: A-Trust · D-Trust · Swisscom [S2]
- Trust service provider: A-Trust [S7]
- Validity worldwide: Internationally recognized and legally binding [S7]
- Workflow builder: Workflow-Builder [S5]
- Workflow builder: Workflow Builder [S11]

**Support**
- Academy videos: yes [S2]
- Customer success: yes [S2]
- First level: documentation + FAQ · yes [S2]
- Second level: hotline · ticket_system · yes · Graz [S2]

19 more facts on the canonical page: https://whats-best.ai/software/e-signature/moxis

## Questions

### Is MOXIS European?

Yes. whats-best.ai classifies MOXIS as EU-Made.

### Where does MOXIS store data?

Not stated on the vendor’s pages as of 13 Oct 2026.

### Does MOXIS have a free plan?

Not stated on the vendor’s pages as of 13 Oct 2026.

### What are the best alternatives to MOXIS?

As of 15 Oct 2026, the panel rates [Penneo (2.5/5)](https://whats-best.ai/software/e-signature/penneo), [Youtrust (Yousign) (2.5/5)](https://whats-best.ai/software/e-signature/youtrust) and [Scrive (2.5/5)](https://whats-best.ai/software/e-signature/scrive) highest among the other 14 E-Signature products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Penneo](https://whats-best.ai/software/e-signature/penneo) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [MOXIS alternatives](https://whats-best.ai/software/e-signature/moxis/alternatives).

## What this page leaves out

- 11 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 5 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 4 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 data fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 pricing fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://www.moxis.co/ (checked 2026-10-13)
- [S2] Pricing page: https://www.moxis.co/preise/ (checked 2026-10-13)
- [S3] Privacy policy: https://www.moxis.co/datenschutzerklaerung/ (checked 2026-10-13)
- [S4] Legal notice: https://www.moxis.co/impressum/ (checked 2026-10-13)
- [S5] Terms of service: https://www.moxis.co/agb/ (checked 2026-10-13)
- [S6] Signer identification — found from sitemap: https://www.moxis.co/funktionen/digitale-identitaet/ (checked 2026-10-13)
- [S7] Signer identification — found from sitemap: https://www.moxis.co/en/capabilities/digital-identity/ (checked 2026-10-13)
- [S8] Signing workflow & signer experience — found from sitemap: https://www.moxis.co/funktionen/workflow-builder/ (checked 2026-10-13)
- [S9] Signing workflow & signer experience — found from sitemap: https://www.moxis.co/en/capabilities/workflow-builder/ (checked 2026-10-13)
- [S10] Integrations & API — found from sitemap: https://www.moxis.co/funktionen/integrationen/uebersicht-api/ (checked 2026-10-13)
- [S11] Integrations & API — found from sitemap: https://www.moxis.co/en/capabilities/integrations/overview-api/ (checked 2026-10-13)

---

Cite as: whats-best.ai, "MOXIS — E-Signature", AI panel analysis, as of 2026-10-20. https://whats-best.ai/software/e-signature/moxis

Corrections: https://whats-best.ai/correct/637?target=page