What is GDPR?

The EU's data-protection regulation governing how personal data is collected, processed, stored, and erased.

The General Data Protection Regulation (Regulation (EU) 2016/679) is the EU law that defines the rights of data subjects (information, access, erasure, portability, objection) and the obligations of controllers and processors. It applies to any business that processes EU residents' data, regardless of where the business is based. PDF Verified is GDPR-compliant: data hosted in EU regions on request, signed DPA available, full export and erasure tooling, and a 72-hour breach-notification protocol.

Drop your document here and sign it now. PDF, Word and Excel all work: a .docx or .xlsx is laid out in your browser exactly as it was written, so there is nothing to convert first. Add a signature, a date, a company stamp or a watermark, then download it sealed. Free to start, no account, and the file is never uploaded to open it.

GDPR and eSignatures

eSignature platforms process personal data, signer names, emails, IPs, biometrics if KYC is enabled. GDPR requires lawful basis (typically contract performance), data minimization, storage limitation, and the right to erasure (with carve-outs for legal-evidence retention).

Right to erasure vs audit retention

GDPR Article 17 grants the right to erasure but allows exceptions for legal claims and statutory record-keeping. PDF Verified honours erasure requests for accounts, with documented carve-outs for contracts where the law requires retention (typically 6-7 years for commercial agreements).

DPA and SCCs

A signed Data Processing Agreement (DPA) is available on every PDF Verified paid plan. For non-EU data flows, we use Standard Contractual Clauses (SCCs) as updated in June 2021.

What PDF Verified is, and what it is not

PDF Verified is a tool for preparing, signing, stamping and checking documents. It is not a law firm, a compliance service or a forensic examiner, and nothing here is legal, financial or compliance advice. Requirements differ by country, by document type and by the party asking, so check what applies to your document before you rely on it, and take advice where the document matters. You are responsible for the documents you create, sign and send, and for having the authority to do so: signing or stamping in somebody else name, or as an organisation you do not represent, is forgery whatever tool is used. To the extent the law allows, we accept no liability for how a document made with this tool is used or relied on. The full position is in our terms of service.