Every signed document ready for inspection.

Pergamin closes the document loop so every file lands in your archive with a signature certificate, an electronic seal and a full audit trail. No manual evidence-gathering ahead of a labour inspection, a social-security check or an audit.

ISO/IEC 27001:2022· DQS Poland
eIDAS Art. 25· QES
AWS Frankfurt & Paris· EEA
150 companies· since 2017

Every signed document comes back with four layers of evidence.

A scanned signature sitting in an e-folder — and the first inspection is a problem. A file downloaded from Pergamin closes the case with four things embedded inside the PDF.

01

Signature certificate

Full name, verified e-mail, phone number, device data, IP, date and time to the second. Every signature tied to a specific person.

02

Electronic PDF seal

Confirms the document originated in Pergamin and rules out any change after signing. It holds even if you've downloaded the PDF and logged out — integrity stays intact.

03

Audit trail

The full path: who received it, when they opened it, which version they accepted. Reconstruct the sequence in 5 minutes, not 5 days.

04

Written-form compliance

Employment contracts and notices signed with QES — equivalent to a handwritten signature under art. 78¹ § 2 of the Polish Civil Code and art. 25 eIDAS.

Three signing paths, one compliant outcome.

Some employees have a qualified signature. Some only have a phone. Some are foreign nationals without a Polish Trusted Profile. We handle them all in one process — with no compliance compromise.

SMS signature Qualified signature (QES) Scanned handwritten signature
Equivalent to a handwritten signature no · documentary form yes · art. 25 eIDAS no
Employment contract No written form Fully valid No written form
Contract of mandate / B2B yes yes risk
Audit trail yes yes no
Identity verification SIM number + e-mail Formal, before the certificate is issued None
Accepted by the labour inspectorate Yes (where the Labour Code allows) indisputable risky

Only QES meets the written-form requirement of the Polish Labour Code. Pergamin supports qualified signatures with no IT project on the client side — including for employees without a Trusted Profile and without a PESEL number.

ISO 27001: not a sticker — a system audited every year.

An Information Security Management System audited by DQS Poland. It covers every operational process — from customer data to communication with suppliers.

DQS — Integrated Management System · ISO 9001 and ISO/IEC 27001
Certified information security management system
Last audit28 Nov 2025
Resultre-certification
Certification bodyDQS Poland

Data in the EU. Every layer encrypted. Production account isolated.

The stack your IT team reviews during a security review. Four areas that come up most often in requirements.

Data location
  • AWS Frankfurt & Paris (EEA)
  • Data never leaves the EEA
  • Production account isolated
Architecture
  • EKS cluster in private subnets
  • No node-to-internet communication
  • No SSH access
Encryption
  • Database — dedicated AES key
  • S3 — object encryption
  • Access only from the private subnet
Backups
  • Rolling snapshots every 4 hours
  • 7-day retention
  • Recovery procedure under ISO 27001

Three questions that come up at every security review.

Every signature is tied to a specific person through a combination of a verified e-mail, a phone number linked to a SIM card (whose buyer confirmed their identity at activation), and — for QES — formal identity verification before the certificate is issued. The certificate includes the device and IP the signature was made from. Impersonation would require control over all of these elements at once.
Every PDF downloaded from Pergamin carries an electronic seal that guarantees its origin and integrity regardless of whether it stays in the Pergamin system. Downloaded documents keep their full evidential value — they can be verified without logging into the platform.
No. Employment contracts and notices require written form, which in the electronic layer is satisfied only by a qualified signature (QES). Pergamin supports QES with no IT project on the client side — including for employees without a Trusted Profile and without a PESEL number. An SMS signature (documentary form) is appropriate for contracts of mandate, B2B agreements and most HR declarations.

See how your documents look with a signature certificate and an electronic seal.