Oneflow

The Legal Counsel

The pages name "electronic signatures" and "digital signatures" as modules and state Oneflow partners with brokers to provide Electronic IDs and advanced signatures in a wide range of countries, so advanced signing is at least asserted. But we found no public information naming simple, advanced or qualified levels per plan or country, no qualified trust service provider linked to the EU Trust List, and no statement on qualified seals or the legal effect of each level — the long list of national eIDs never says which eIDAS level a resulting signature carries. 5 1 5

Report an error

The Legal Counsel

The signing-methods page is the strongest legal disclosure here: fifteen named Electronic IDs with their countries (BankID in Sweden and Norway, MitID in Denmark, D-Trust sign-me in Germany, and so on), offered either participant-chosen through the E-ID Hub or sender-specified per participant. What I cannot verify is the chain of responsibility — Oneflow says it "partners with different brokers" without naming a single one — and we found no public information on which method yields which signature level, nor on retention or deletion of identification data. 5 5

Report an error

The Legal Counsel

Customisable templates across business categories, per-participant signing methods, and a contract-status overview with automatic updates from within business systems are documented, which covers multiple signers and sender control. We found no public information on signing order (sequential or parallel), reminders, expiry, bulk sending, or whether signers can sign without creating an account, and no accessibility conformance content was captured — so I stop short of crediting a complete signer experience. 7 1 8

Report an error

The Legal Counsel

For a disputed contract eight years on, this record gives me almost nothing: no public information on an audit trail, a certificate of completion, timestamp source, long-term validation such as PAdES-LTV, or validation reports. The terms do commit the customer's data to return or secure deletion and export "in such generally accepted format", and internal deletion routines exist, but the published retention periods cover Oneflow's own business contacts and meetings — we found no statement on how long signed documents and their evidence are kept. 3 4

Report an error

The Legal Counsel

The connector set is real and named — Salesforce, HubSpot, Microsoft Office 365, Google Workspace, Teamtailor, Zapier — spanning CRM, HR, ATS, ERP and automation categories, with a Developers help centre, partner-assisted custom integration, and terms contemplating sandbox test environments at Oneflow's sole discretion. We found no public information confirming a documented REST API with webhooks, published rate limits, or API access to each signature level, which is what I would need before wiring contracting systems to it. 4 9 8

Report an error

The Legal Counsel

The independently sourced sovereignty attributes could not confirm the contracting entity's jurisdiction, ownership, data residency or subprocessor exposure from the vendor's own captured pages — every attribute is unknown. The only location commitment found is that recordings of Oneflow's own online meetings are processed within the EU/EEA, which says nothing about where signed documents, audit trails or signer identification data sit; we found no published subprocessor list with locations and no certifications. 3

Report an error

The Legal Counsel

The pricing page was captured twice and the only cost facts it yields are dollar-marked AI add-ons ("AI Review & Insights ($), AI Insights Premium ($)") and a full-platform trial — we found no public information on plan prices, envelope or document limits, or per-signature and identification fees, so the cost of any signing volume is not computable. Commercial terms are partly public: automatic renewal by default, self-serve plan changes, and a three-month termination notice. 2 4 2

Report an error