Key Management
Hardware security module support for generating and storing signing keys locally, with role-based controls for key access and rotation policies.
On premise deployment gives organizations direct control over infrastructure, key management, and data residency, which can simplify compliance with strict regulations and internal security policies while maintaining signature validity under U.S. law.
Responsible for installation, patching, and network configuration of the on premise digital signature platform. Coordinates with security and compliance teams to ensure system hardening, monitoring, and backups meet organizational standards.
Defines retention policies, ensures signature records meet ESIGN and UETA requirements, and manages audits. Reviews access controls, consent flows, and legal admissibility for signed documents across business units.
Organizations with strict data residency needs or regulatory mandates often prefer on premise digital signature deployments to retain control over sensitive records.
Teams that require integration with internal identity providers, custom key management, or isolated networks commonly choose on premise options for predictable operational control.
Hardware security module support for generating and storing signing keys locally, with role-based controls for key access and rotation policies.
Comprehensive, tamper-evident logs that record signer identity, timestamps, IP addresses, and document hashes for legal and compliance review.
Seamless authentication via SAML or LDAP to reuse existing enterprise identity providers and enforce MFA or conditional access.
Centralized templates and role-based fields to reduce errors and standardize frequently used agreements across business units.
On-premise APIs for embedded signing, automated workflows, and integration with CRMs, ERPs, and document repositories.
Clustered deployment options with failover and backup strategies to minimize downtime for mission-critical signing.
Native or API-based connectors for Salesforce, Microsoft Dynamics, and other CRMs to launch signing workflows from customer records, capture signed documents back into the CRM, and trigger post-signature actions that preserve audit metadata and maintain a consistent customer record.
Support for SharePoint, network file shares, and enterprise content management systems to import templates, export signed PDFs, and enforce retention policies while keeping data within the organization’s storage boundaries.
Integrations with Microsoft Teams and Slack for notification, signing prompts, and status tracking so business users can complete signature steps without switching systems and maintain contextual records.
Controlled sync mechanisms for hybrid environments that allow selective replication to approved cloud storage with encryption and access controls to meet business continuity needs.
| Feature | Value |
|---|---|
| Reminder Frequency | 48 hours |
| Signature Expiration | 90 days |
| Retention Policy | 7 years |
| Default Authentication | LDAP |
| Audit Log Storage | Encrypted archive |
On premise digital signature systems typically support Windows Server or Linux distributions and standard virtualization platforms for production deployments.
For mobile and remote signer support, administrators commonly expose signing interfaces through secure reverse proxies or VPN tunnels, and ensure TLS and authentication policies bridge internal systems to user devices while keeping signing keys on-site.
A regional health system deployed an on premise digital signature server to sign patient consent and clinical agreements under controlled key management.
Resulting in strengthened HIPAA control and more repeatable audit evidence across facilities.
A mid-size bank implemented an on premise signing appliance to capture KYC and account agreements within its private network.
Resulting in clearer compliance posture, lower exposure to external breaches, and more efficient internal reviews.
| Criteria | signNow (Recommended) | DocuSign | Adobe Sign |
|---|---|---|---|
| On-premise deployment | Limited | ||
| HIPAA support | |||
| HSM key support | |||
| Bulk Send |
| Vendors | signNow (Recommended) | DocuSign | Adobe Sign | Dropbox Sign | OneSpan |
|---|---|---|---|---|---|
| Starting Price | Starts at $8/user/month | Starts at $10/user/month | Starts at $9.99/user/month | Starts at $15/user/month | Enterprise pricing |
| On-premise option | Available via enterprise package | Limited enterprise appliance | Typically cloud-first | Cloud-only | Available for enterprises |
| API included | Yes, REST API included | Yes, REST API included | Yes, REST API included | Yes, REST API included | Yes, enterprise API |
| HIPAA-ready | Business associate agreement available | BAA available | BAA available | BAA available | BAA available |
| Enterprise SSO | SAML SSO supported | SAML SSO supported | SAML SSO supported | SAML SSO supported | SAML and strong auth |
airSlate SignNow is actually a robust, full-featured, and award-winning solution for eSigning and handling contracts both on desktop computer and mobile phone. Thousands of organizations, including Xerox, CBS Sports, and Colliers have already experienced the advantages of employing airSlate SignNow. Not only does it improve and increase document turnover as nearly all eSignature software does, but it also provides versatility to the entire process of eSigning.
airSlate SignNow's easy-to-use user interface makes it convenient for customers to share folders between teams, and make branded workflows. Employing the apps for iOS and Android mobile phone, handling and verifying contracts on the go is possible.
Staying compliant with leading security standards, airSlate SignNow ensures your data remains safe and secure. The embedded, court-admissible Audit Trail keeps track of every change to your file, keeping everybody responsible.
Sign up for a free trial and begin creating effective eSignature workflows with airSlate SignNow.
In our previous lesson we have learnt what needs to be done for implementation of an on-premise solution and how to start using it.
In this lesson, we will have a look at how it actually works and what is the usual flow of operations inside the on-premise solution on the example of eSigning via airSlate SignNow.
Using airSlate SignNow on premises, you will be able to enjoy the same functionalities as in web-based airSlate SignNow, namely:
There is no difference in terms of usability or interface between web-based airSlate SignNow and airSlate SignNow on-premises. Only the admin, as the person responsible for settings' configuration and backups, would notice the difference, while there is none for all other users in your office.
Of special importance in eSigning on premises is the feature of secure backup. Since all the data is stored on the corporate server inside the organization, the admin is expected to specify a repository for regular backup so that data can be easily restored after unexpected system events.
Backup settings in airSlate SignNow, on-premise version, look as follows:
Keep in mind that as we are talking about a closed system here, requesting assistance from Support means you need to 'open the gates' on your side:
To enable remote access for an airSlate SignNow Support rep, the system administrator on your side needs to initiate a SSH Support Tunnel. Opening this tunnel would involve the creation of a temporary login token which is then shared with airSlate SignNow Support for authentication purposes. Once the tunnel is closed - this token self-destroys automatically.
In system configurations this looks as follows:
Another peculiar feature of using airSlate SignNow on premises is that it does not require a separate log in from all the users inside your organization (unlike the web version in which you would need to use email and password for login):
airSlate SignNow on-premise solution can be connected to the local LDAP server - Lightweight Directory Access Protocol which stores all the existing credentials. This means users wouldn't even have to register at airSlate SignNow to start eSigning and sending for signing. They have accounts by default, and these accounts are based on the contact data stored in the local directory database.
Most of business users of airSlate SignNow on-premise solution would find this feature of automated login convenient, however, for extra security, the system administrator can actually enable both registration and verification as in the standard version of web-based airSlate SignNow: