Security
How WQ3 protects documents through the signing workflow.
Trust Center
How WQ3 approaches security, privacy, digital signatures and the audit trail.
WQ3 works in line with Egyptian Electronic Signature Law No. 15 of 2004 and its executive regulations, which give electronic signatures and electronic documents the same legal validity as handwritten signatures and paper documents when their conditions are met.
WQ3 supports these conditions with signer identity checks, a private signing link for each signer, tamper-evident final documents, and a full audit trail with a completion certificate.
How WQ3 protects documents through the signing workflow.
How WQ3 handles personal data on this website and in signing workflows.
Every completed document comes with a record of each action and a completion certificate.
ISO/IEC 27001 certified, with encryption, document fingerprints and access control.
Data processed under Law 151 of 2020.
A full audit trail, completion certificate and public check page.
Start a trust review with three separate questions: who signed, whether the file changed, and which steps led to completion. Each question calls for different evidence; answering one does not settle the others. A matching document fingerprint, for example, supports file integrity but does not by itself establish authority to bind an organisation.
WQ3 offers electronic signature, remote signing and token signing, with different levels selectable for individual signers in one document. eKYC is a separate account-verification add-on that can be required with any level. Define identity, signing-authority and signature-level requirements separately before sending.
When a completed contract arrives outside the original signing workflow, use the public check page rather than relying on its appearance. Access it through the QR code on the final file or completion certificate, without an account. Review the signer names, signature levels and recorded timestamps against the transaction you expect.
Verification compares the file’s SHA-256 fingerprint with the stored fingerprint. For internal review, retain the exact file you checked and keep its completion certificate alongside it. If the fingerprints do not match, treat that as a reason to investigate rather than assuming a visually similar copy is equivalent.
A security assessment should connect each safeguard to the stage it protects. WQ3 uses TLS 1.2 or newer for data in transit, locks documents once sent, and controls access through roles, permissions and individual invitations. Review how these controls fit your team’s preparation, distribution and review of agreements.
Before sending, confirm the intended recipients and whether the document contains appropriate information for each recipient. After completion, review the recorded sequence of actions before filing the document. Make these checks part of your own procedure: platform controls do not replace careful recipient selection or internal decisions about access.
WQ3 describes its approach as aligned with relevant legal frameworks, including Egyptian law, ESIGN and UETA in the United States, and eIDAS in the European Union. Alignment is not a blanket assurance that every agreement will be accepted for every purpose. Requirements can depend on the governing law, document category, receiving organisation and signing circumstances.
For high-value, regulated or cross-border transactions, confirm the required signing form before selecting a level. Privacy review should also consider the personal data your organisation places in documents, who needs access and which record-keeping obligations apply. Seek legal or privacy advice where those questions require interpretation.
Explore more
How WQ3 protects documents through the signing workflow.
Learn moreHow WQ3 handles personal data on this website and in signing workflows.
Learn moreEvery completed document comes with a record of each action and a completion certificate.
Learn moreEvery contract signed with WQ3 has a public check page with a QR code and reference, so anyone can confirm it is genuine without an account.
Learn moreCreate your WQ3 account, or talk to us about your organization’s requirements.
No. It is an account-verification add-on that can be required with electronic signature, remote signing or token signing.
No. It supports file-integrity verification; authority to sign for an organisation needs a separate review.
No. The public check page is accessible without an account through the QR code on the final file and completion certificate.
Keep the verified final file and its completion certificate with the accompanying audit trail, following your organisation’s record-keeping requirements.
No. Choose according to the agreement’s requirements and confirm any specific conditions imposed by applicable law or the receiving organisation.