ToFF Sign: Overview

Powered by Documenso

Managed by CultureOS

ToFF Sign (https://sign.tomoffinland.org) is the Foundation's official electronic document execution platform.

All board resolutions, donor agreements, non-disclosure covenants, independent contractor agreements, and intellectual property licensing instruments must be executed through ToFF Sign to ensure legal enforceability and digital chain-of-custody compliance.

System Operations & Engineering

This operational system is configured, deployed, and managed by CultureOS. CultureOS is an AI-native practice helping cultural institutions modernize digital infrastructure, archives, and research workflows responsibly.

Key Capabilities at a Glance

• Legally Binding Execution: Full compliance with the United States Electronic Signatures in Global and National Commerce Act (ESIGN), the Uniform Electronic Transactions Act (UETA), and EU eIDAS regulations.
• Cryptographic Tamper Evidence: Immutably seals executed agreements with SHA-256 document hashing and RFC 3161 timestamps.
• Self-Hosted Data Sovereignty: All confidential legal instruments and signatory identity records are housed exclusively on Foundation-controlled encrypted volumes, free from third-party vendor access.
• Multi-Role Recipient Routing: Precise configuration of signers, countersigning trustees, and read-only CC observers with flexible signing order constraints.
• Zero-Install Signer Experience: Trustees and external signatories can review and sign contracts smoothly from any modern desktop or smartphone browser without software installation.

Documentation Navigation Guide

Section	Target Audience	Primary Focus
Getting Started	Document Creators & Trustees	Portal access, signature seal creation, and dashboard basics
User Guides	Staff & Signatories	Dispatching contracts, anchoring fields, and recipient signing workflow
Administration & Access Control	Legal Counsel & IT Officers	Audit certificates, chain of custody, user roles, retention governance
System Architecture	Engineers & DevOps	Docker container topology, PostgreSQL database, cryptographic security
API Reference	Developers & Automations	REST API endpoints, webhook triggers, and automated document generation
Troubleshooting	All Users	Solutions for email delivery, expired links, and signature errors