eIDAS and GDPR Compliant eSignatures in the EU
With BoldSign, you send eIDAS simple signatures and turn on qualified signatures (QES) when needed. Your EU account stores and processes documents and signer data in the Netherlands. Signatures are legally binding under eIDAS, with a full audit trail.
- Signers need no BoldSign account
- GDPR compliant
Trusted by 100,000+ organizations worldwide
What EU teams need from an eSignature tool
BoldSign answers the three questions EU reviewers ask. Is the signature valid, where is the data, and can signers read it?
Works in: the BoldSign web app and API.
A signature that holds under eIDAS
Your counterparty wants to know the signature holds under EU rules.
With BoldSignEIDAS simple signatures by default, qualified ones when you need them. See signature levels
Signer data under GDPR
Privacy reviews ask where contracts and signer details are stored and processed.
With BoldSignEU accounts keep them in the Netherlands. See what stays in the EU
Signers across many languages
A contract in a language the signer cannot read slows the deal down.
With BoldSignThe request reaches each signer in the language you pick. See signer languages
How do you send eSignatures from an EU account?
With BoldSign, you choose the EU region once, at sign-up, then send and sign as usual.
-
Choose European Union at sign-up
Pick European Union in the Data residency field. The choice covers your whole account.
Data storage locationsWhere each BoldSign region stores data at rest Region Physical location United States Eastern US European Union Netherlands Canada Toronto Australia Sydney BoldSign data regions and where each stores data: the European Union region stores data in the Netherlands -
Work in the EU web app
Your team signs in at app-eu.boldsign.com. Your templates and documents stay in the EU region.
app-eu.boldsign.comMy documentsSupplier agreementCompletedSample BoldSign web app at app-eu.boldsign.com showing a document list, with a completed supplier agreement -
Send and sign as usual
Requests go out from the EU. Your signers sign in their browser, and the signed PDF stays in the region.
Are eSignatures legally valid in the EU?
Yes, signatures you collect with BoldSign are legally binding under the ESIGN Act, UETA, and eIDAS. Each request uses an eIDAS simple electronic signature unless you add a qualified one.
Simple signatures by default
Every document goes out with an eIDAS simple electronic signature unless you choose otherwise.
Qualified when a law asks
Under eIDAS, a qualified electronic signature has the effect of a handwritten one.
Identity checked first
Evrotrust, a qualified trust service provider, checks each signer before a qualified signature.
How is EU personal data handled under GDPR?
BoldSign is GDPR compliant. EU accounts keep documents, audit trails, signer details, and emails in the EU. Billing details, ID checks, and integration data are kept elsewhere.
| Data | Where it stays |
|---|---|
| Documents and templates | EU (Netherlands) |
| Audit trails | EU (Netherlands) |
| Signer details | EU (Netherlands) |
| Team and workspace data | EU (Netherlands) |
| Emails sent from your account | EU |
| AI processing | Europe |
| Subscription and billing details | US |
| ID verification data | US, where Stripe processes and stores it |
| Data in integrations you turn on | Set by each integration’s provider |
The full list is in BoldSign’s data residency policy.
Can EU signers sign in their own language?
Yes, with BoldSign you set the language for each signer. Their emails and signing pages then appear in that language.
Why choose BoldSign for eSignatures in the EU
BoldSign fits EU teams that need valid signatures and a clear answer on where data is kept.
Separate servers per region
Storage and processing servers are fully separate for the US, the EU, Canada, and Australia.
AI features stay in Europe
AI processing for EU accounts runs in a dedicated European environment, not the US one.
Signing emails sent from the EU
Requests and reminders from EU accounts are delivered from within the EU.
Simple and qualified in one account
You send simple and qualified signatures from the same EU account.
How is eSignature data in the EU region kept secure?
BoldSign encrypts every document twice with AES-256. Its security controls are independently audited for SOC 2 Type 2. Each standard is listed in your account’s Compliance page, shown below.
Compliance
BoldSign meets global security and compliance standards to protect your documents and data. Manage the settings below to align with your organization’s requirements.
Data Residency
Active (Europe)Your documents and signer data are securely stored in your selected region to meet data sovereignty and local regulatory requirements.
HIPAA Compliance
EnabledEnable HIPAA mode to protect PHI using administrative, technical, and physical safeguards aligned with HIPAA regulations.
PCI DSS
CompliantPayments are securely processed through Stripe, a PCI DSS Level 1-certified provider, ensuring the safe handling and encryption of all payment data.
CCPA & CPRA
CompliantEnsures compliance with California privacy laws, giving residents transparency and control over their personal data, including rights to access, delete, and opt out.
SOC 2 Type II
CompliantBoldSign has successfully completed a SOC 2 Type II audit, validating our controls for security, availability, confidentiality, and data integrity.
UETA & ESIGN
CompliantBoldSign ensures that all e-signatures are legally binding and compliant with the U.S. ESIGN Act and the Uniform Electronic Transactions Act (UETA).
eIDAS (SES)
CompliantBoldSign complies with the EU eIDAS Regulation (910/2014) and supports Simple Electronic Signatures (SES) by default.
eIDAS (QES)
EnabledEnable Qualified Electronic Signatures (QES) for contracts requiring the highest legal assurance under eIDAS.
Security and procurement documents for eSignature
IT and procurement teams can read BoldSign’s security policy, data processing agreement, and subprocessor list online. They can also request the SOC 2 Type 2 report.
- Sign-in
Single sign-on and user provisioning
Works with Microsoft Entra ID.
See features by plan - Audit report
SOC 2 Type 2 report
Available on request from BoldSign.
Request the SOC 2 report - Data protection
Data processing agreement
Includes the EU Standard Contractual Clauses and the UK Addendum by reference.
Read the data processing agreement - Data protection
Subprocessor list
Every third party BoldSign uses to process data.
See the subprocessor list - Service
Service level agreement
Uptime, support response times, and service commitments.
Find it in the Legal Center
Limits and costs to know before you sign EU contracts with BoldSign
BoldSign keeps each account in one region. Prices are in USD.
- $3 per qualified signature, per signer Business plan add-on, $15 per user a month, billed yearly.
Before you invite partners on other regions
- 1 region per account Chosen at sign-up; it cannot be changed later.
- Documents sent between accounts in different regions do not appear on the recipient’s dashboard.
Can developers use the EU region through the eSignature API?
Yes, BoldSign’s EU region has its own API base URL, https://api-eu.boldsign.com. Set it in the SDK configuration, and your calls reach the EU region.
var apiClient = new ApiClient("https://api-eu.boldsign.com", "Your_API_Key");configuration = boldsign.Configuration(api_key = "Your-API-Key-Here", host = "https://api-eu.boldsign.com")const planApi = new PlanApi("https://api-eu.boldsign.com");apiClient.setBasePath("https://api-eu.boldsign.com");$config = new BoldSign\Configuration();
$config->setHost("https://api-eu.boldsign.com");More on eSignatures and EU rules
- Policy
Data residency policy
Every kind of data, and the region that keeps it.
Read the policy - Guide
eSignature law in the EU
How eIDAS treats simple, advanced, and qualified signatures.
Read the guide - AI
BoldSign MCP in the EU
Connect Claude and other AI assistants through the EU server, mcp-eu.boldsign.com.
See BoldSign MCP
Questions about eSignatures in the EU
What is EU data residency for eSignatures?
EU data residency means your signed documents and signer data are stored inside the European Union. In BoldSign, you get it by choosing the European Union region when you start your trial.
Where in the EU does BoldSign store data?
In the Netherlands. BoldSign stores and processes EU account data there, as the data storage article sets out.
Does EU data residency cost extra?
No. Storing your documents in the EU region costs nothing extra. See the pricing page.
Which signature levels does eIDAS define?
eIDAS defines simple, advanced, and qualified electronic signatures. BoldSign sends simple signatures by default and qualified ones through Evrotrust, as the QES overview describes.
Do my signers need to be in the EU?
No. Your signers can sign from any country. BoldSign keeps each document in the sender’s region, as the help article on regions explains.
Send your next EU contract for signature
Pick European Union as your data residency on day one of your BoldSign trial.
- 30-day free trial
- No credit card required
Last updated: October 19, 2026