# Oneflow — E-Signature

Oneflow by Oneflow AB holds a panel rating of 1.5/5 from 6 AI judges (category median 2.5/5), as of 2026-10-15. Provenance: EU-Made; sovereignty: not determined.

- Vendor: Oneflow AB (https://oneflow.com)
- Category: [E-Signature](https://whats-best.ai/software/e-signature.md)
- Provenance (editorial classification): EU-Made
- Canonical page: https://whats-best.ai/software/e-signature/oneflow
- Alternatives: https://whats-best.ai/software/e-signature/oneflow/alternatives ([markdown](https://whats-best.ai/software/e-signature/oneflow/alternatives.md))
- Data as of: 2026-10-20 · evaluated 2026-10-15 · oldest source captured 2026-10-01

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Oneflow AB
- Headquarters: Not stated on the vendor’s pages as of 13 Oct 2026
- Data hosting: Not stated on the vendor’s pages as of 13 Oct 2026
- Free plan: Not stated on the vendor’s pages as of 13 Oct 2026

## The panel's verdict

Oneflow is an AI contract lifecycle management platform from Oneflow AB of Stockholm, listed on Nasdaq First North, covering digital contracts, electronic and digital signatures, proposals and quotes. Strongest is integration and API, where scores hold at 4: connectors are named — Salesforce, HubSpot, Microsoft Office 365, Google Workspace, Teamtailor, Zapier — and the API is in the contracted service. Identity verification scores 4-5 on fifteen electronic IDs listed with their countries, set per participant or via the E-ID Hub, though the brokers behind them are not named. Weakest are sovereignty at 0-2, where the only location commitment is EU/EEA processing of meeting recordings and we found no public information on document storage, subprocessors or certifications; pricing transparency at 1-2, with no public information on plan prices and only dollar-marked AI add-ons as cost facts; and evidence and retention at 1-2, with no public information on an audit trail or completion certificate. Signature levels sit at 3: advanced signing is asserted via partner brokers, and we found no public information on levels by plan or country. flagged splits flag no split.

**Speaks for it:**
- Named connectors for Salesforce, HubSpot, Microsoft Office 365, Google Workspace, Teamtailor and Zapier, with the API included in the contracted service and a developers help centre.
- Fifteen electronic IDs published with their countries — BankID, MitID, Smart-ID, D-Trust sign-me among them — assignable per participant or chosen by the signer through the E-ID Hub.
- Ready-made contract templates that can be used as-is or customized, across categories including employment agreements and leases.
- Contract status updates automatically from within connected business systems, with data pulled from your systems into the contract.
- The terms commit to returning your data or securely deleting it, with retrieval in a generally accepted format.

**Held against it:**
- Sovereignty scored 0-2: meeting recordings are the only data stated to be processed within the EU/EEA, and we found no public information on where documents and identification data are stored, on subprocessors, or on certifications.
- We found no public information on plan prices, envelope or document limits, or per-signature fees; the only cost facts shown are AI add-ons marked with a dollar sign, alongside named-user seats, automatic renewal and a three-month notice period in the terms.
- Evidence and retention scored 1-2: we found no public information on an audit trail, certificate of completion, timestamp source or long-term validation for signed documents.
- We found no public information naming the brokers behind advanced signatures and electronic IDs, or mapping signature levels to plan or country.
- We found no public information on webhooks, rate limits, SDKs or embedded signing, leaving the developer story half-documented.

**Best for:**
- You run Salesforce or HubSpot and want contract status to update automatically inside your CRM.
- Your signers use national electronic IDs such as BankID, MitID, Smart-ID or D-Trust sign-me across the Nordics, Germany, the Netherlands and the other listed countries.
- You send multi-party documents from customizable templates and want to set the signing method per participant.
- You want to evaluate on a trial that includes full Oneflow platform functionality.

**Avoid if:**
- You must verify where signed documents and identification data are stored, and see a subprocessor list, before procurement — sovereignty scored 0-2 on this record.
- You need to prove a signature's validity years later against a documented audit trail or completion certificate — evidence and retention scored 1-2.
- You need public prices to budget a signing volume before talking to sales — pricing transparency scored 1-2.
- You require qualified signatures from a named trust service provider — signature levels scored 3, and we found no public information on levels by plan or country.

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price.

| Criterion | The Legal Counsel | The HR Operations Lead | The Revenue Operations Lead | The Integration Engineer | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| eIDAS levels & trust services | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 |
| Signer identification | 2/5 | 2.5/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Signing workflow & signer experience | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 1.5/5 |
| Evidence, validation & retention | 1/5 | 0.5/5 | 1/5 | 1/5 | 1/5 | 1/5 |
| Integrations & API | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| European sovereignty | 0/5 | 1/5 | 1/5 | 1/5 | 0/5 | 0.5/5 |
| Pricing transparency | 1/5 | 0.5/5 | 0.5/5 | 0.5/5 | 0.5/5 | 0.5/5 |
| **Weighted verdict** | **1.5/5** | **1.5/5** | **1.5/5** | **1.5/5** | **1/5** | **1.5/5** |

### The judges

- **The Legal Counsel** (v1.0): Decides which contracts may be signed electronically and at which level. Wants SES, AdES and QES named per plan and country, the qualified trust service provider linked to the EU Trust List, and an audit trail with timestamps that still validates when the contract is disputed in eight years.
- **The HR Operations Lead** (v1.0): Sends two hundred employment contracts a year, many of them fixed-term and so under written form. Wants QES that a new hire can complete on a phone in ten minutes, identification that accepts the IDs applicants actually hold, bulk sending from templates, and a price per qualified signature known before the contract is signed.
- **The Revenue Operations Lead** (v1.0): Measures how long a quote takes to come back signed and where it stalls. Wants signing from inside the CRM, templates sales cannot break, reminders and signing order that run themselves, and a signer experience that needs no account, no app and no explanation.
- **The Integration Engineer** (v1.0): Embeds signing into the company's own portal and archives the result in the DMS. Wants a versioned API with webhooks and a sandbox, every signature level reachable through the API rather than only in the web app, and signed documents exported with their evidence intact.
- **The Data Protection Officer** (v1.0): Knows every signer who holds an ID card up to a camera hands biometric and identity data to a provider they never chose. Asks who performs the identification, where documents and ID data are stored, how long the audit trail keeps IP addresses, and who the subprocessors in the trust service chain are.
- **The Skeptic** (v1.0): Knows "legally binding" usually means a simple signature. Reads for the level the default plan actually signs at, the QTSP the provider does not operate itself, the per-QES and ident fees on top of the plan, the envelope limit, and "eIDAS-compliant" from a provider that names no trust service at all.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Ownership | Not determined | — | — |
| Data residency | Not determined | — | — |
| Subprocessors | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Audit rights: yes · 1 · yes [S4]
- Breach notification: without undue delay [S4]
- Certifications: yes · yes · yes [S2]
- Certifications: yes · yes · yes [S1]
- Certifications: yes · yes · yes [S2]
- Compliance topics: Compliance · GDPR · DORA [S9]
- Cookies no personal data: no [S3]
- Cooperation: yes · yes [S4]
- Data protection team: yes [S3]
- Data sold: no [S3]
- Dora page: yes [S8]
- DPA: GDPR applicable processing · yes [S4]
- Frameworks: GDPR (EU) 2016/679 · UK Data Protection Laws (DUAA, UK GDPR, UK Data Protection Act 2018, UK PECR) [S3]
- Frameworks listed: GDPR · DORA [S6]
- International transfers: EU SCCs · UK IDTA · UK Addendum · yes [S4]
- Privacy contact: support@oneflow.com · Privacy [S3]
- Processor role: yes [S3]
- Right to object recordings: yes [S3]
- Security measures: yes · yes · yes [S4]
- Topics: Security Center · Reliability · Compliance · GDPR · DORA · Signing Methods · Accessibility · E-signatures legality [S7]
- Wcag target: WCAG 2.1 Level AA [S6]
- Wcag target: AA · WCAG 2.1 [S6]

**Data**
- Collected b2b categories: e-mail address · name · telephone number · workplace · title [S3]
- Collected sole trader: personal identity number · account number · residential address/invoicing address [S3]
- Deletion routines: yes [S3]
- Export after termination: generally accepted format · yes [S4]
- Notification email: yes [S4]
- Retention b2b relations: B2B relations · duration of relationship plus max 1 year [S3]
- Retention customer service: customer service enquiries · up to 1 year [S3]
- Retention demo requests: demo requests · up to 1 year [S3]
- Retention external platforms: external platform messages/comments · until user deletes them [S3]
- Retention meeting recordings: meeting audio recordings and transcripts · up to 1 year after meeting [S3]
- Return or deletion: yes [S4]

**Hosting**
- Meeting recordings region: EU/EEA only [S3]

**Integrations**
- API: API and web forms for automating contract workflows [S2]
- API: yes [S4]
- API: API available [S2]
- Categories: HRM · Other · CRM · ATS · ERP · Recruitment · Productivity · Automation [S8]
- Developers docs: yes [S9]
- Footer list: Salesforce, Hubspot, Microsoft Office 365, Teamtailor, Google Workspace, Zapier [S8]
- Named: Salesforce · Hubspot · Microsoft Office 365 · Teamtailor · Google Workspace · Zapier [S5]
- Named: Salesforce · Hubspot · Microsoft Office 365 · Teamtailor · Google Workspace · Zapier [S6]
- Named integrations: Salesforce · Hubspot · Microsoft Office 365 · Teamtailor · Google Workspace · Zapier [S7]
- Named list: Salesforce · Hubspot · Microsoft Office 365 · Teamtailor · Google Workspace · Zapier [S9]
- Office365: Microsoft Office 365 [S8]
- Partner network: Integration partners available for implementing and integrating custom projects [S8]
- Partners available: Solution partners available for custom implementation and integration projects [S8]
- Reverse engineering: no · no · no [S4]
- Salesforce: Salesforce · Hubspot · Microsoft Office 365 · Teamtailor · Google Workspace · Zapier [S7]
- Third party export: yes [S4]

**Legal**
- Board seat: Stockholm [S2]
- Board seat: Stockholm [S5]
- Board seat: Stockholm [S6]
- Board seat: Stockholm [S8]
- Board seat: Stockholm [S9]
- Board seat: Stockholm [S2]
- Board seat: Stockholm [S6]
- Board seat: Stockholm [S9]
- Board seat: Stockholm [S7]
- Board seat: Stockholm [S8]
- Controller entity: Oneflow AB reg. no. 556903-2889 · Oneflow North America Inc. · Oneflow AB filial i Finland · Oneflow England Ltd. · Oneflow Norge AS · Oneflow B.V. · Oneflow SAS [S3]
- Customer liability cap: min(100000 SEK, 12 months fees) [S4]
- Entity: Gävlegatan 12a, 113 30 Stockholm, Sweden · Oneflow AB (publ) [S2]
- Entity: Stockholm · Oneflow AB · public limited company (publ.) · Sweden · 556903-2989 [S4]
- Entity: Oneflow AB (publ) [S5]
- Entity: Oneflow AB (publ) [S8]
- Entity: Oneflow AB (publ) [S2]
- Entity: Oneflow AB (publ) · Gävlegatan 12a, 113 30 Stockholm, Sweden [S5]
- Entity name: Oneflow AB (publ) [S6]
- Entity name: Oneflow AB (publ) [S6]
- Governing law: Swedish law [S4]
- Headquarters: Gävlegatan 12a, 113 30 Stockholm, Sweden [S5]
- Headquarters: 113 30 · Stockholm · Gävlegatan 12a · Sweden [S6]
- Headquarters: Gävlegatan 12a, 113 30 Stockholm, Sweden [S8]
- Headquarters: Gävlegatan 12a, 113 30 Stockholm, Sweden [S9]
- Headquarters: Gävlegatan 12a, 113 30 Stockholm, Sweden [S2]
- Headquarters: Gävlegatan 12a, 113 30 Stockholm, Sweden [S6]
- Headquarters: 113 30 · Stockholm · Gävlegatan 12a · Sweden [S9]
- Headquarters: Gävlegatan 12a, 113 30 Stockholm, Sweden [S7]
- Headquarters: 113 30 · Stockholm · Gävlegatan 12a · Sweden [S8]
- Hq: Gävlegatan 12a, 113 30 Stockholm, Sweden · Stockholm [S1]
- Liability cap: 12 months fees paid [S4]
- Org number: 556903-2989 [S2]
- Org number: 556903-2989 [S2]
- Organisation number: 556903-2989 [S5]
- Organisation number: 556903-2989 [S6]
- Organisation number: 556903-2989 [S8]
- Organisation number: 556903-2989 [S9]
- Organisation number: 556903-2989 [S6]
- Organisation number: 556903-2989 · Stockholm [S5]
- Organisation number: 556903-2989 [S9]
- Organisation number: 556903-2989 [S7]

**Pricing**
- Annual only: annual only [S2]
- Billing period: annual in advance [S4]
- Business minimum users: Business · 5 [S2]
- Business price: Business · EUR · annual · 50 [S2]
- Business price: annually · EUR · 250 [S2]
- Business users: 5 [S2]
- Enterprise custom quote: Enterprise · custom quote [S2]
- Enterprise custom quote: yes [S2]
- Enterprise minimum users: Enterprise · 10 [S2]
- Enterprise users: 10 [S2]
- Invoice terms: 30 [S4]
- Price increase cap: Swedish CPI · 5 [S4]
- VAT: yes · customer [S4]

**Product**
- Actionable terms: automatically turns contract terms like pricing, renewals, obligations and approvals into actions [S1]
- AI: Oneflow AI [S7]
- AI assistant: Oneflow AI [S9]
- AI module: yes [S6]
- Anonymized insights: yes [S4]
- Automated workflows: Contract status control and automatic updates from within business systems [S8]
- Automatic data sync: yes · yes [S8]
- Automatic status updates: yes [S8]
- Business AI features: Write with AI, AI Extract, AI Summary, AI Review & Insights ($), AI Insights Premium ($) [S2]
- Business oneflow AI: AI features: Write with AI, AI Extract, AI Summary; AI Review & Insights and AI Insights Premium at extra cost [S2]
- Capabilities footer: Digital contract · Contract management · Electronic signatures · Digital signatures · Proposals · Quotes [S7]
- Capabilities overview: Digital contract · Contract management · Electronic signatures · Digital signatures · Proposals · Quotes [S9]
- Clm AI: AI-powered contract lifecycle management with AI, automation and connected workflows [S1]
- Competitor comparisons: Docusign · PandaDoc · GetAccept · Contractbook · Juro · Scrive [S7]
- Competitor comparisons: Docusign · PandaDoc · GetAccept · Contractbook · Juro · Scrive [S6]
- Contract templates: ready-made contract templates that can be used as-is or customized [S7]
- Data rights: yes [S4]
- Data sync: Data pulled from connected systems into contracts to keep systems in sync, no copy-paste data entry [S8]
- E sign: electronic signatures · digital signatures · proposals · quotes · digital contract · contract management · Oneflow AI [S1]
- Eid brokers: Oneflow partners with different brokers to provide Electronic IDs and advanced signatures [S5]
- Eid hub: participant chooses preferred Electronic ID from a list [S5]
- Eid hub participant choice: sender restricts accessible methods; participant selects preferred eID from list [S5]
- Eid partner brokers: eIDs provided via partner brokers in a wide range of countries [S5]
- Eid standalone: participants must sign with the method specified · 4 [S5]
- Eid standalone specify method: sender specifies per participant · 4 [S5]
- Eid two methods: Standalone · E-ID Hub [S5]
- Eid two methods: Standalone · E-ID Hub [S5]
- Features: Digital contract · Contract management · Electronic signatures · Digital signatures · Proposals · Quotes [S7]
- Feedback license: perpetual, irrevocable, sublicensable [S4]
- Integrations named: Salesforce · Hubspot · Microsoft Office 365 · Teamtailor · Google Workspace · Zapier [S6]
- Meeting recording data: participant information · audio recordings · AI transcripts · AI-generated summaries and action items [S3]
- Meeting recording purpose: legitimate interest · yes [S3]
- No code integration: No coding, minimal setup time [S8]
- No coding setup: yes · yes [S8]
- Oneflow AI: yes [S7]
- Plan changes: yes [S4]
- Positioning: AI contract lifecycle management platform for creating, managing and activating contracts [S1]
- Repository: centralized searchable contract repository [S1]
- Seat licensing: yes · no [S4]
- Seat reassignment: yes [S4]
- Signing capabilities: digital contract · contract management · electronic signatures · digital signatures · proposals · quotes [S6]

**Support**
- Auto renewal: yes [S4]
- Customer success: Tailored onboarding, dedicated customer success support, training and best-practice resources [S2]
- Customer success: Dedicated customer success support [S2]
- Demo booking: yes [S7]
- Developers docs: yes · yes [S1]
- Developers docs: Developers · Help Center [S9]
- Developers resources: Developers · Help Center [S6]
- Free tier after termination: yes [S4]
- Help center: yes [S7]
- Onboarding: Guided onboarding during trial; tailored onboarding for Enterprise customers [S2]
- Onboarding: yes · yes · yes [S1]
- Onboarding: Guided onboarding during trial; tailored onboarding for Enterprise customers [S2]
- Termination notice: support@oneflow.com · 3 [S4]

19 more facts on the canonical page: https://whats-best.ai/software/e-signature/oneflow

## Questions

### Is Oneflow European?

Yes. whats-best.ai classifies Oneflow as EU-Made.

### Where does Oneflow store data?

Not stated on the vendor’s pages as of 13 Oct 2026.

### Does Oneflow have a free plan?

Not stated on the vendor’s pages as of 13 Oct 2026.

### What are the best alternatives to Oneflow?

As of 15 Oct 2026, the panel rates [Penneo (2.5/5)](https://whats-best.ai/software/e-signature/penneo), [Youtrust (Yousign) (2.5/5)](https://whats-best.ai/software/e-signature/youtrust) and [MOXIS (2.5/5)](https://whats-best.ai/software/e-signature/moxis) highest among the other 14 E-Signature products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Penneo](https://whats-best.ai/software/e-signature/penneo) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Oneflow alternatives](https://whats-best.ai/software/e-signature/oneflow/alternatives).

## What this page leaves out

- 50 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 43 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 17 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 11 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 9 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 4 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 data fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 subprocessors fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 2 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://oneflow.com/ (checked 2026-10-13)
- [S2] Pricing page: https://oneflow.com/pricing/ (checked 2026-10-13)
- [S3] Privacy policy: https://oneflow.com/legal/privacy-notice/ (checked 2026-10-13)
- [S4] Terms of service: https://oneflow.com/legal/terms-of-use/ (checked 2026-10-13)
- [S5] Signer identification — found from sitemap: https://oneflow.com/security/eid-signing-solutions/ (checked 2026-10-13)
- [S6] Signing workflow & signer experience — found from sitemap: https://oneflow.com/oneflow-accessibility-statement/ (checked 2026-10-13)
- [S7] Signing workflow & signer experience — found from sitemap: https://oneflow.com/free-contract-templates/ (checked 2026-10-13)
- [S8] Integrations & API — found from sitemap: https://oneflow.com/integrations/ (checked 2026-10-13)
- [S9] Integrations & API — found from sitemap: https://oneflow.com/integrations/custom-integration/ (checked 2026-10-13)

---

Cite as: whats-best.ai, "Oneflow — E-Signature", AI panel analysis, as of 2026-10-20. https://whats-best.ai/software/e-signature/oneflow

Corrections: https://whats-best.ai/correct/635?target=page