UnifiSign – Secure, Tokenized E-Signatures for Everyone
🔥 Inspiration
The growing demand for paperless documentation—especially in healthcare, legal, and organizational workflows—revealed that most e-signature platforms are either expensive, complex, or inflexible when it comes to custom consent workflows. We built UnifiSign to change that: a simple, secure, and customizable e-signature platform with tokenized public access, perfect for real-world use cases.
✅ What it does
UnifiSign enables users to create and send consent checklists, web forms, and PDF documents for signing—all securely accessible through tokenized links. Here's what it can do:
- 🔗 Tokenized Signing Links – Signers don’t need to log in. Each form or document is accessible via a secure, expiring link.
- ✅ Consent Checklists – Create custom forms with field types like text, checkbox, radio, signature, dropdown, and conditional visibility.
- 📄 PDF Document Signing – Upload PDF documents and place signature fields for completion.
- 📋 Web Forms for Signing – Custom-built HTML forms that support dynamic field logic.
- 📂 Dashboard – Users can track all signed items, preview them, and export or download results.
- 👥 User Roles – Supports SuperAdmin, Admin, User, and Guest access.
- 🔐 Authentication – Secure login using HttpOnly cookies and CSRF protection.
- 💳 Subscription Plans – Free, Pro, and Enterprise tiers (Payment integration pending).
- 🛠️ Custom Form Logic – Support for grouped fields and conditional visibility.
🧱 How we built it
- Frontend: React + TailwindCSS (mobile-first responsive UI)
- Backend: Custom PHP REST API using a lightweight routing framework
- Database: MySQL – structured for user roles, documents, checklists, sign logs, and audit tracking
- Authentication: Cookie-based login with SameSite=None and CSRF token validation
- Signature Handling: SignaturePad-based drawing canvas, saved in vector or image format
- Document Storage: Organized structure with access control and tokenized access
- Deployment: Hosted on a Linux cloud server with Nginx + PHP-FPM
- To be integrated: Stripe for plan upgrades and billing management
🚧 Challenges we ran into
- Designing a modular checklist system with recursive nesting, conditional visibility, and dynamic field rendering.
- Managing security for public signing links while ensuring traceability.
- Implementing a cross-browser signature pad with accurate vector rendering.
- Building a scalable permission system supporting four different user roles.
- Ensuring the signing process is frictionless, especially for non-technical users accessing via mobile.
🏆 Accomplishments that we're proud of
- Completed a fully working prototype with real-time checklist creation and public signing links.
- Achieved a clean signer experience with no login or app installation required.
- Developed a modular backend that can scale with future enterprise features.
- Created a flexible drag-and-drop checklist builder that supports grouped fields and conditional logic.
📚 What we learned
- Deep technical insights on building secure, tokenized systems for public access workflows.
- The importance of user-centric UX in reducing drop-offs during signature flows.
- How to balance flexibility with simplicity in dynamic form builders.
- Practical knowledge of RESTful API architecture with secure authentication and authorization layers.
🚀 What's next for UnifiSign
- 💳 Stripe Integration for plan upgrades and pay-per-use signing
- 🧾 Audit Trail with signer IPs, timestamps, and digital fingerprinting
- 🤖 AI-Powered Checklist Suggestions based on template history
- 📱 Mobile App Companion for secure sign notifications and offline access
- 🔌 Embeddable Widget & API Access for B2B integrations
UnifiSign is designed to make e-signatures and consent forms accessible, flexible, and scalable—without compromising on security or user experience.


Log in or sign up for Devpost to join the conversation.