# sproof sign — E-Signature

sproof sign by sproof GmbH holds a panel rating of 2.5/5 from 6 AI judges (category median 2.5/5), as of 2026-10-15. Provenance: EU-Made; sovereignty: not determined.

- Vendor: sproof GmbH (https://www.sproof.com)
- Category: [E-Signature](https://whats-best.ai/software/e-signature.md)
- Provenance (editorial classification): EU-Made
- Canonical page: https://whats-best.ai/software/e-signature/sproof-sign
- Alternatives: https://whats-best.ai/software/e-signature/sproof-sign/alternatives ([markdown](https://whats-best.ai/software/e-signature/sproof-sign/alternatives.md))
- Data as of: 2026-10-20 · evaluated 2026-10-15 · oldest source captured 2026-10-01

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: sproof GmbH
- Headquarters: Not stated on the vendor’s pages as of 13 Oct 2026
- Data hosting: Default not stated; pages mention Europe [S1]
- Free plan: Yes, per the vendor’s own page [S12]

## The panel's verdict

sproof sign, from sproof GmbH of Salzburg, Austria, is strongest at signing workflow, scored a uniform 7 — the highest mark awarded anywhere on this product — for templates with editable fields, grouped or sequential signing order, batch signing and web forms with QR codes. Integration and API follows at 6–7 on a documented REST API with a free development license and connectors, though the captured pricing page shows general API access on the Enterprise plan only and gives different signals on which plans include it. Weakest is pricing transparency, a flat 3: quotas are published ("100 / Jahr" private, "1200 / Jahr" business, "Individuell" enterprise, private use always free), but no public price for the plans, the User+ upgrade that unlocks qualified signing, identification or API fees, so a qualified signature's cost is not computable. The judges genuinely split on sovereignty, scores running 3 to 6: the vendor states development and hosting in Europe in its own ISO 27001 certified data centres, but legal-entity jurisdiction, ownership, data residency and subprocessors are unconfirmed on the captured pages, and the partner issuing qualified signatures is unnamed.

**Speaks for it:**
- Signing workflow scores sit at a uniform 7, with templates, simultaneous, grouped or ordered signing, batch signing, mail merge and web forms via link or QR code all evidenced
- Integration and API scores cluster at 6–7 on a documented REST API with a free development license, embedded signing as button, widget or iFrame, and connectors for SAP, Salesforce, Microsoft 365, Microsoft Dynamics, Power Automate, Zapier and Make
- Identity verification scores cluster at 4–5 on an agent-guided video identification of roughly five minutes with photo ID and mobile phone as second factor, plus an eID Hub advertising more than 25 national eIDs
- The audit trail is documented as a court-admissible record of who viewed, approved and signed with which verification method, checked against the certificate chain, CRL/OCSP revocation lists and the EU Trust List
- Annual advanced-signature quotas are published ("100 / Jahr" private, "1200 / Jahr" business, "Individuell" enterprise) and private use is always free

**Held against it:**
- Pricing transparency sits at a flat 3: no public price for the paid plans, the User+ upgrade that unlocks qualified signing, identification fees, overage or API pricing
- Qualified signatures are issued "via a partner of sproof" that is never named, with no EU Trust List entry linked and no public information on qualified seals or ZertES
- Sovereignty scores run 3 to 6 — the one criterion the score computation flags as a disagreement — with legal-entity jurisdiction, ownership, data residency and subprocessor exposure unconfirmed on the captured pages
- No public information on qualified timestamps, long-term validation or a retention period for documents and their evidence; the only statement is no permanent storage after completion
- The published privacy policy covers the website only and describes the signing application as technically separate, so retention and deletion of identification data are not addressed on public pages

**Best for:**
- You send employment or sales contracts in volume and need templates, batch signing, mail merge and grouped signing order — the workflow scoring is the product's strongest
- Your team builds against a REST API and wants to embed signing and identification as a button, widget or iFrame, with a free development license to start (verify plan-level API access first — the captured pages give different signals)
- You are Austria-based and want qualified signing via the mobile phone signature (ID Austria), which the vendor names as its qualified route
- You want a vendor stating development and hosting in Europe in its own ISO 27001 certified data centres and can confirm jurisdiction and subprocessors directly in procurement

**Avoid if:**
- You must know the cost of a qualified signature before committing — pricing transparency scored a flat 3 and no public price exists for the plans, the User+ upgrade or identification fees
- You send contracts whose qualified trust service provider must be named and traceable to the EU Trust List for legal review — the issuer is described only as a partner of sproof
- You need evidence that still validates years after signing — ask the vendor: the public pages we read do not show it
- Your procurement requires confirmed legal-entity jurisdiction, ownership, data residency or a subprocessor list before signature — all are unconfirmed on the captured pages

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price.

| Criterion | The Legal Counsel | The HR Operations Lead | The Revenue Operations Lead | The Integration Engineer | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| eIDAS levels & trust services | 2.5/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Signer identification | 2.5/5 | 2.5/5 | 2.5/5 | 2/5 | 2.5/5 | 2/5 |
| Signing workflow & signer experience | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| Evidence, validation & retention | 2/5 | 2.5/5 | 2.5/5 | 2/5 | 2.5/5 | 2.5/5 |
| Integrations & API | 3.5/5 | 3/5 | 3.5/5 | 3.5/5 | 3/5 | 3/5 |
| European sovereignty | 2/5 | 3/5 | 3/5 | 2.5/5 | 2/5 | 1.5/5 |
| Pricing transparency | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 |
| **Weighted verdict** | **2.5/5** | **2.5/5** | **3/5** | **2.5/5** | **2.5/5** | **2/5** |

### The judges

- **The Legal Counsel** (v1.0): Decides which contracts may be signed electronically and at which level. Wants SES, AdES and QES named per plan and country, the qualified trust service provider linked to the EU Trust List, and an audit trail with timestamps that still validates when the contract is disputed in eight years.
- **The HR Operations Lead** (v1.0): Sends two hundred employment contracts a year, many of them fixed-term and so under written form. Wants QES that a new hire can complete on a phone in ten minutes, identification that accepts the IDs applicants actually hold, bulk sending from templates, and a price per qualified signature known before the contract is signed.
- **The Revenue Operations Lead** (v1.0): Measures how long a quote takes to come back signed and where it stalls. Wants signing from inside the CRM, templates sales cannot break, reminders and signing order that run themselves, and a signer experience that needs no account, no app and no explanation.
- **The Integration Engineer** (v1.0): Embeds signing into the company's own portal and archives the result in the DMS. Wants a versioned API with webhooks and a sandbox, every signature level reachable through the API rather than only in the web app, and signed documents exported with their evidence intact.
- **The Data Protection Officer** (v1.0): Knows every signer who holds an ID card up to a camera hands biometric and identity data to a provider they never chose. Asks who performs the identification, where documents and ID data are stored, how long the audit trail keeps IP addresses, and who the subprocessors in the trust service chain are.
- **The Skeptic** (v1.0): Knows "legally binding" usually means a simple signature. Reads for the level the default plan actually signs at, the QTSP the provider does not operate itself, the per-QES and ident fees on top of the plan, the envelope limit, and "eIDAS-compliant" from a provider that names no trust service at all.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Ownership | Not determined | — | — |
| Data residency | Not determined | — | — |
| Subprocessors | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Accessibility statement: yes [S4]
- Cookie consent EU partners: yes [S8]
- Cookie consent european partners: yes [S3]
- Documents: ISO 27001 Certificate · Information Security Policy Statement · Website Accessibility Statement [S1]
- DPA: yes · yes [S5]
- Eidas: yes [S10]
- Eidas: yes [S1]
- Eidas conform: yes · yes [S1]
- Eidas qes: yes · EU No 910/2014 [S5]
- European partners: yes [S1]
- GDPR: yes [S5]
- GDPR european data: yes [S14]
- GDPR framework: DSG (Österreich) · DSGVO · TKG 2021 [S3]
- ISO 27001: yes · yes · yes [S1]
- ISO 27001: yes [S5]
- ISO 27001: yes [S9]
- ISO 27001: yes [S10]
- ISO 27001: yes [S12]
- ISO 27001: yes [S2]
- ISO 27001: yes [S4]
- ISO 27001: yes [S6]
- ISO 27001: ISO 27001 · yes [S7]
- ISO 27001: yes [S8]
- ISO 27001: yes [S13]
- ISO 27001: yes [S14]
- ISO 27001: yes [S11]
- ISO 27001: yes · yes · yes [S1]
- ISO 27001 documents: ISO 27001 Certificate · Information Security Policy Statement [S4]
- Standards: eIDAS · ZertEs · FDA · DORA · FMA [S14]
- US cloud act: yes [S1]

**Data**
- Applicant retention months: Einwilligung, widerrufbar · 2 · 6 [S3]
- Ip anonymized: yes [S3]
- Log retention days: 30 · Bei sicherheitsrelevanten Ereignissen länger bis zur Aufklärung [S3]
- Retention: no permanent storage or further processing of documents after completion [S12]

**Hosting**
- Datacenter certification: yes [S1]
- Developed hosted europe: yes · yes [S14]
- EU datacenters: Europe · yes · yes [S1]
- EU developed and hosted: yes · yes [S13]
- EU development and hosting: yes · yes [S8]
- EU hosted: 100% developed and hosted in Europe [S6]
- EU hosted: yes [S11]
- EU only: yes [S3]
- Europe only: Europe · Europe [S7]
- Location: sproof's own data center [S5]
- Region: yes [S4]
- Region: yes [S9]
- Region: yes [S10]
- Region: Europe · yes [S1]
- Residency: yes [S2]
- Residency: yes [S5]
- Residency: yes · yes [S12]
- US independence: yes [S1]

**Integrations**
- API: yes · contracting partner [S5]
- API: yes · yes [S1]
- API doc: yes [S10]
- API docs: API documentation and integrations offered [S6]
- API docs: yes · yes [S8]
- API docs: yes · yes [S13]
- API docs available: yes [S1]
- Make: yes [S2]
- Named systems: SAP · Salesforce · Microsoft 365 · Microsoft Dynamics · custom developments [S1]
- Outlook sync: yes [S2]
- Power automate: yes [S2]
- Rest API: yes · yes [S1]
- Rest API SSO: yes · yes [S14]
- Systems: SAP · Salesforce · Microsoft 365 · Microsoft Dynamics · custom developments [S1]
- Zapier: yes [S2]

**Legal**
- Authority: Bezirkshauptmannschaft Hallein [S4]
- Chamber membership: WKÖ, WKS [S4]
- Company register number: 520262t [S4]
- Controller: sproof GmbH · Urstein Süd 19/2, A-5412 Puch bei Hallein, Österreich · privacy@sproof.com [S3]
- Entity: sproof GmbH · Urstein Süd 19/2, 5412 Puch b. Hallein, Österreich [S5]
- Entity: sproof GmbH · 1.1.3 · ZeVES [S12]
- Entity name: sproof GmbH [S4]
- Jurisdiction: court at sproof's registered seat · Austrian law [S5]
- Office salzburg: Puch bei Hallein [S4]
- Office vienna: Wien · Wohllebengasse 12-14 · 1040 [S4]
- Register court: Landesgericht Salzburg [S4]
- Registered address: Puch b. Hallein · Urstein Süd 19/2 · Österreich · 5412 [S4]
- VAT id: ATU74867389 [S4]

**Pricing**
- Billing: annual · in advance · 14 [S5]
- Cancellation notice: yes · 3 [S5]
- Enterprise price: individual user quota · yes [S2]
- Extra fes: 1.05 [S2]
- Extra qes: 2.65 [S2]
- Free: yes · none, results without guarantee [S12]
- Free trial: yes [S6]
- Free trial exists: yes [S1]
- Late payment interest: 9.2% above base rate [S5]
- Net: yes · yes [S5]
- Overage: yes [S5]
- Package structure: user licenses + signature quotas · 1 [S5]
- Package term: annually · 1 [S5]
- Payment methods: credit card · invoice [S5]
- Price indexation: CPI 2020 (Statistik Austria) + 2 percentage points [S5]
- Single includes: 1 [S2]
- Single price: excluded · annual · 15 [S2]
- Single quota: 100 · 10 [S2]
- Team includes: 10 · 2 [S2]
- Team price: excluded · annual · 170 [S2]
- Team quota: 1200 · 120 [S2]
- Userplus upgrade: 5 [S2]

**Product**
- API access: no · no · yes [S2]
- API signature ident: API for electronic signatures and identification processes integrated into IT systems [S14]
- Audit trail court admissible: Audit Trail provides a complete, court-admissible history of the entire signing process [S13]
- Audit trail documents verification method: who viewed · who approved · who signed · verification method e.g. two-factor authentication or qualified eID [S13]
- Audit trail evidence role: The audit protocol serves as primary evidence in audits or legal disputes that the signature was properly made [S13]
- Batch signing: Upgrade to User+ · yes [S2]
- Branding domain support: yes [S14]
- Corporate branding: yes [S14]
- Developed and hosted in europe: yes · yes [S1]
- Development license: Development license via API token, try free [S14]
- Development widget offer: Development environment offers signature and identity verification widget embedding [S14]
- Ees limitations: EES has no evidential value, no identification, suitable only for informal documents [S6]
- Eid hub: more_than · 25 [S2]
- Eid hub: sproof eID Hub: access to all common European identity providers via one interface [S1]
- Eid hub capability: sproof eID Hub: sign with qualified digital signature using a national eID [S6]
- Eid hub module: access to all major European identity providers via one interface [S1]
- Eidas 2 versions: eIDAS 1.0 · eIDAS 2.0 [S14]
- Eidas compliance: yes [S9]
- Eidas compliant platform: yes · yes [S13]
- Eidas compliant signature: yes [S7]
- Eidas conformity: eIDAS-konforme digitale Signaturen und Identitätsüberprüfungen [S11]
- Eidas positioning: Positioniert als europäische Alternative für eIDAS-konforme digitale Signaturen und Identitätsüberprüfungen [S3]
- Eidas qes fes: advanced · qualified [S14]
- Enterprise extra features: Single-Sign-On, Rechte- & Rollenmanagement, MS Entra ID, Plan-Statistiken, Multiple Domain Support, White Label, Custom Mail Server, Vor-Ort-Signatur, One-time-QES, Premium Support, sproof Validate, sproof Fastlane, sproof Widget, Validate… [S2]
- Entra id sync: no · yes · yes [S2]
- Eudi ready: EUDI-readiness claimed [S6]
- Eudi wallet ready: yes [S1]
- Eudi wallet ready: yes [S1]
- European partners cookies: yes [S13]
- Fastlane: sproof Fastlane: sign and complete SEPA mandates and contracts in record time [S1]
- Fastlane accessibility: Barrier-free user interface [S14]
- Fastlane API: no · no · yes [S2]
- Fastlane module: sign and conclude SEPA mandates and contracts quickly [S1]
- Fastlane webforms: Fastlane offers web forms with links or QR codes for signatures [S14]
- Fastlane webtool: no · no · yes [S2]
- Fda compliance fastlane: eIDAS · FDA [S14]
- Fes eidas: 100 / Jahr · 1200 / Jahr · Individuell · yes [S2]
- Fes identification: All sproof sign signatures meet advanced signature level; signatory identified e.g. via e-mail address [S6]
- Fes use cases: FES used for contracts without formal requirements [S6]
- Form fields: 17 [S2]
- Form fields: yes · yes · yes [S10]
- Free personal use: yes [S1]
- Free private plan: yes [S2]
- Free private use: yes [S1]
- Free trial: yes [S8]
- Free trial: yes [S10]
- Free trial: yes [S12]
- Free trial: yes [S13]
- Free trial: yes [S1]
- Ident API: no · no · yes [S2]
- Ident module: legally secure identity verification [S1]
- Ident module: sproof Ident: EUDI-ready solution for legally secure identity verification (eIDAS 2.0) [S1]
- Ident white label: yes [S14]
- In house raa: no · yes · yes [S2]
- Legal basis: eIDAS Regulation sets requirements for signature forms in EU [S6]
- License tiers: business use · Single · Team · Enterprise [S5]
- Mail merge: yes [S2]
- Marketing reference: yes · yes [S5]
- Modules: sproof Sign · sproof Ident · sproof Widget · sproof Fastlane · sproof eID Hub · sproof Validate [S4]
- Modules: sproof Sign · sproof Ident · sproof Widget · sproof Fastlane · sproof eID Hub · sproof Validate [S10]
- Modules: sproof Sign · sproof Ident · sproof Widget · sproof Fastlane · sproof eID Hub · sproof Validate [S13]
- Modules: sproof Sign: upload contracts for signature, create signature folders, customize forms & signature positions [S1]
- Multi signer: yes [S5]
- Newsletter double opt in: Art. 28 DSGVO · yes · innerhalb der EU [S3]

**Support**
- Availability: maintenance and infrastructure influences · 24/7 [S5]
- Basic SLA: email · standard package · 72 [S5]
- Business hours: Mon-Fri · business hours equal support hours · 09:00-17:00 [S5]
- Data subject rights email: privacy@sproof.com · Auskunft Art. 15 · Berichtigung Art. 16 · Löschung Art. 17 · Einschränkung Art. 18 · Datenübertragbarkeit Art. 20 · Widerspruch Art. 21 · Widerruf Art. 7 Abs. 3 [S3]
- Enterprise: yes [S1]
- Enterprise support: direct expert guidance for rollout and system integration for enterprises [S1]
- Help center: yes [S6]
- Help center: yes [S8]
- Help center: yes [S13]
- Integration contact: Comprehensive integration support and personal contact [S14]
- Premium: phone support · prioritized handling · faster response times · dedicated support staff · yes · yes [S5]

57 more facts on the canonical page: https://whats-best.ai/software/e-signature/sproof-sign

## Questions

### Is sproof sign European?

Yes. whats-best.ai classifies sproof sign as EU-Made.

### Where does sproof sign store data?

The default storage location for customer data is not stated on the vendor’s pages as of 13 Oct 2026. The vendor’s pages mention Europe as hosting location, per [the vendor’s page captured 13 Oct 2026](https://whats-best.ai/evidence/7677).

### Does sproof sign have a free plan?

Yes. sproof sign has a free plan, per [the vendor’s page captured 13 Oct 2026](https://whats-best.ai/evidence/6743).

### What are the best alternatives to sproof sign?

As of 15 Oct 2026, the panel rates [Penneo (2.5/5)](https://whats-best.ai/software/e-signature/penneo), [Youtrust (Yousign) (2.5/5)](https://whats-best.ai/software/e-signature/youtrust) and [MOXIS (2.5/5)](https://whats-best.ai/software/e-signature/moxis) highest among the other 14 E-Signature products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Penneo](https://whats-best.ai/software/e-signature/penneo) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [sproof sign alternatives](https://whats-best.ai/software/e-signature/sproof-sign/alternatives).

## What this page leaves out

- 9 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 9 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 data facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 legal fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 pricing fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://www.sproof.com/ (checked 2026-10-13)
- [S2] Pricing page: https://www.sproof.com/preise-sign/ (checked 2026-10-13)
- [S3] Privacy policy: https://www.sproof.com/datenschutzerklaerung/ (checked 2026-10-13)
- [S4] Legal notice: https://www.sproof.com/impressum/ (checked 2026-10-13)
- [S5] Terms of service: https://www.sproof.com/agb/ (checked 2026-10-13)
- [S6] EIDAS levels & trust services — found from sitemap: https://www.sproof.com/en/qes-fes-ees-all-e-signature-standards-at-a-glance/ (checked 2026-10-13)
- [S7] EIDAS levels & trust services — found from sitemap: https://www.sproof.com/faq/komme-ich-auch-ueber-sproof-sign-zu-einer-qualifizierten-unterschrift/ (checked 2026-10-13)
- [S8] Signer identification — found from sitemap: https://www.sproof.com/faq/wie-laeuft-die-einmalige-identifikation-fuer-eine-qualifizierte-digitale-signatur-in-sproof-sign-ab/ (checked 2026-10-13)
- [S9] Signer identification — found from sitemap: https://www.sproof.com/en/faq/how-does-the-one-time-identification-for-a-qualified-digital-signature-in-sproof-sign-work/ (checked 2026-10-13)
- [S10] Signing workflow & signer experience — found from sitemap: https://www.sproof.com/faq/kann-ich-formularfelder-verwenden-oder-anlegen/ (checked 2026-10-13)
- [S11] Signing workflow & signer experience — found from sitemap: https://www.sproof.com/faq/kann-ich-eine-reihenfolge-festlegen-nach-der-die-unterschriften-eingeholt-werden/ (checked 2026-10-13)
- [S12] Evidence, validation & retention — found from sitemap: https://www.sproof.com/validierung/ (checked 2026-10-13)
- [S13] Evidence, validation & retention — found from sitemap: https://www.sproof.com/faq/warum-ist-der-pruefbericht-audit-trail-fuer-compliance-managerinnen-so-wichtig/ (checked 2026-10-13)
- [S14] Integrations & API — found from sitemap: https://www.sproof.com/en/api/ (checked 2026-10-13)

---

Cite as: whats-best.ai, "sproof sign — E-Signature", AI panel analysis, as of 2026-10-20. https://whats-best.ai/software/e-signature/sproof-sign

Corrections: https://whats-best.ai/correct/638?target=page