Security & trust
A waiver is only worth keeping if it's safe and provable. JustWaiver protects your account and your signers' data with encryption, strict isolation, and a complete audit trail on every signature — described honestly, without overstating certifications we don't yet hold.
How we protect you
Built secure from the ground up
Encrypted in transit & at rest
Every connection runs over HTTPS/TLS, and your data is encrypted at rest in our managed database.
Your data is isolated
Row-Level Security is enforced on every table, so one venue can never read another venue's waivers — even by accident.
Private document vault
Signed PDFs live in a private store and are only ever served through short-lived, signed links — never public URLs.
Tamper-evident audit trail
Each signature records the server timestamp, IP address, exact waiver version, and a SHA-256 content hash. Records are append-only.
Legally-binding e-signatures
We capture all four ESIGN/UETA elements — intent, consent, association with the record, and a retainable emailed copy.
Backed up & resilient
Your records are stored on managed, redundant infrastructure with automated backups, so they're protected against hardware failure.
Least-privilege access
Admin keys are server-side only and never reach the browser. Public signing endpoints are validated and rate-limited.
We never sell your data
Your waivers and signer data are yours. We never sell or share them for advertising — ever.
Your data
Ownership, retention & rights
You own your waiver text and the signer records you collect. Export your signed waivers to CSV at any time, and request deletion whenever you need to. Every signer is emailed their own copy of what they signed.
We handle minors' data carefully — a parent or guardian signs on their behalf — and we keep GDPR/CCPA-style rights (access, correction, deletion) in mind for venues with EU or California guests.
We share data only with the vetted infrastructure providers we rely on to run the service (hosting, database, email, and payments), strictly to deliver it — never for advertising. The current list is published in our Privacy Policy, alongside our Terms.
Found a vulnerability? Email security@justwaiver.com and we'll respond promptly.
JustWaiver is software, not legal advice.