Overview
The Sign API provides instant biometric signing for lightweight legal use cases. Perfect for terms of service, privacy policies, data attestations, and other agreements that require legal binding but don’t need document attachments.Use Sign API For
Terms of service agreements
Privacy policy acknowledgments
Data honesty attestations
Simple consent forms
Compliance acknowledgments
Lightweight agreements
Use Messaging API For
- Document signing with attachments
- Contracts and legal documents
- Multi-party signing workflows
- High-stakes legal agreements
- Document version control
How It Works
The Sign API provides instant biometric signing through a simple webhook-based flow. Users scan a QR code (desktop) or open the UIP app directly (mobile), review the document text, and sign with their biometric.Request Parameters
webhook_url (required)
webhook_url (required)
Type: string (URL format)URL to receive signing results. Must be HTTPS in production.Your webhook will receive a POST request when the user completes or declines the signature.
document_title (required)
document_title (required)
Type: stringTitle or name of what the user is signing.Example:
"Terms of Service v2.1", "Privacy Policy", "Medical Information Accuracy Attestation"Best Practice: Include version numbers for policiesdocument_content (required)
document_content (required)
Type: stringFull text content that the user will read and sign.Requirements:
- Must be complete and readable
- User will see this exact text in their UIP app
- Plain text or markdown supported
- No HTML tags
metadata (optional)
metadata (optional)
Type: objectAdditional data to associate with the signature for your records.Common fields:
version: Document version numberuser_ip: IP address of usertimestamp: When request was initiatedform_id: Internal form identifiersession_info: Additional session context
Request Examples
- Terms of Service
- Data Attestation
- Privacy Policy
- Compliance Form
Use Case: User agreeing to updated terms of serviceThe request includes the full terms text and version information.Webhook Response: Includes signature proof and timestamp for compliance records.
Response
After creating a signature request, you’ll receive a session ID and QR code (for desktop flows). The QR code expires after 5 minutes. Users scan the code with their UIP app, review the document, and sign with their biometric.Common Use Cases
- Compliance & Policies
- Healthcare & Medical
- Business & Employment
- Security & Verification
Perfect for:
- Terms of service updates
- Privacy policy acknowledgments
- Code of conduct agreements
- Compliance training completion
- Safety protocol acknowledgments
- Legally binding signatures
- Audit trail for compliance
- Version tracking in metadata
- Permanent verification records
Best Practices
Keep It Concise
Users should be able to read the document in under 2 minutes. For longer documents, use the Messaging API with PDF attachments.
Version Everything
Always include version numbers in document_title and metadata. Essential for tracking policy changes.
Store Audit References
Save the
audit_reference_id from webhook responses. This is your permanent proof of signature.Handle Declines Gracefully
User declines are normal. Provide clear messaging and easy retry options.
Use Metadata
Include version, IP address, timestamp, and other context. Helpful for compliance and debugging.
Test Thoroughly
Use your $5 signup credit to test with various document lengths, special characters, and edge cases.
Sign API vs Messaging API
When to Use Sign API
When to Use Sign API
Use Sign API when:
- Signing terms, policies, or simple agreements
- No document attachment needed
- Text-based content under ~2,000 words
- Fast, lightweight signing required (5-minute window)
- Immediate response needed
- Version tracking in metadata is sufficient
When to Use Messaging API
When to Use Messaging API
Use Messaging API when:
- Document attachment required (PDF contracts, etc.)
- Multi-page legal documents
- Document version control needed
- High-stakes legal agreements
- File must be permanently stored for audit
- Users need time to review (available up to 3 months)
Legal Validity
Legally Binding: Signatures via Sign API are legally binding under the ESIGN Act (US) and eIDAS regulation (EU). Each signature includes government-verified identity, biometric authentication proof, cryptographic signature, immutable audit trail, and precise timestamp.