ToFF Sign Administration & Access Control

Governance, legal audit standards, and administrator procedures for ToFF Sign.

1. Cryptographic Audit Trail & Certificate of Completion

Every completed transaction automatically appends an immutable Certificate of Completion to the finalized legal PDF package:

Cryptographic Hash Verification: The unexecuted original and finalized signed PDF are digested using SHA-256 hashing to certify zero tampering.
Timestamp & Network Provenance: Signer IP addresses, user-agent signatures, and RFC 3161 timestamps are immutably logged for legal chain-of-custody compliance under US ESIGN, UETA, and EU eIDAS frameworks.
Independent Verification: Any party can independently verify the hash integrity of the document without connecting to the original server.

ToFF Sign partitions permissions across three institutional tiers:

Role	Permissions	Typical Assignment
System Administrator	Server configuration, system-wide templates, audit log export, account provisioning	IT Director / Systems Lead
Document Manager	Create documents, deploy authorized templates, initiate signature requests, manage completions	Foundation Secretary, Legal Coordinator
Signatory / Recipient	Review and execute assigned document packages; download completed certified copies	Trustees, external artists, contractors, partners

Vault Ingress: Completed documents are retained on encrypted storage volumes on the Foundation primary host.
Periodic Verification: The internal worker process performs continuous integrity verification against the primary PostgreSQL database to guarantee uncorrupted storage.
No External Storage: Documents remain strictly on Foundation-controlled infrastructure, preventing vendor surveillance or unauthorized third-party scanning.
Legal Hold Protocols: Administrators can apply institutional holds on specific document categories (such as governance resolutions and acquisition deeds) preventing accidental deletion.