canusign

Notes de version

Nouveautés

Chaque changement de canusign, documenté de manière transparente : ce que nous avons construit, quand et pourquoi. Commentaires bienvenus via commentaires.

v0.26.0

Nouvel éditeur, signature enregistrée, un design plus sobre

Depuis le 12 septembre, presque chaque page a changé. L’éditeur connaît désormais les personnes et place pour chacune une signature, un paraphe et une date. Les signatures peuvent être enregistrées dans le compte, la page de suivi montre l’avancement par personne, et la suppression d’un compte ne retire plus aux autres parties leurs contrats terminés.

  • Un design sobre sur toutes les pagesDesign

    Des surfaces blanches, une seule police, des lignes fines et un accent corail. La page d’accueil, l’éditeur, la signature, le tableau de bord, les paramètres et les e-mails suivent désormais le même design. Les effets animés et les emoji ont disparu.

  • Éditeur avec personnes, signature, paraphe et dateNouveau

    Sous « Qui signe », vous ajoutez les personnes et placez pour chacune une signature, un paraphe et une date. La date se remplit avec le jour de la signature. Sous « Remplir », vous saisissez vous-même un texte, la date du jour ou un champ nommé. Le document défile en continu sur toutes les pages.

  • Clavier et annulation dans l’éditeurAmélioration

    Les flèches déplacent le champ sélectionné, par grands pas avec Maj, et Suppr l’efface. Aucune confirmation n’est demandée : « Annuler » dans la ligne d’information ou Cmd+Z (Windows : Ctrl+Z) rétablit le champ ou la personne.

  • Liens personnels par e-mail depuis l’éditeurNouveau

    Indiquez dans l’éditeur l’adresse e-mail d’une personne : elle reçoit son propre lien de signature à la finalisation. Le lien partagé reste disponible à côté.

  • Page de suivi avec l’avancement par personneAmélioration

    La page de suivi montre d’abord qui a signé et qui manque encore, personne par personne.

  • Enregistrer sa signature dans son compteNouveau

    Une signature peut être enregistrée dans les paramètres ou au moment de signer. La fenêtre la propose alors en premier. Elle n’est apposée qu’avec une connexion datant de 15 minutes au plus. C’est facultatif et supprimable à tout moment ; les contrats déjà signés restent inchangés.

  • Signer avec « De quoi s’agit-il »Amélioration

    La page de signature a été refaite. « De quoi s’agit-il » dans l’en-tête ouvre un court résumé, créé automatiquement à partir du document. Il ne remplace pas la lecture et ne constitue pas un conseil juridique.

  • Chaque document commence par un importAmélioration

    Vous importez un ou plusieurs PDF, canusign propose des champs de signature et vous les vérifiez dans l’éditeur. Les modèles et le document vierge ont été retirés de l’application.

  • Packs de 5, 15 et 50 documentsAmélioration

    L’ancien bonus fait désormais partie du contenu du pack, à prix inchangés. La facturation se fait par document. Le bouton d’achat mène directement au paiement, et la page de paiement indique le contenu à côté du prix.

  • Tampon et certificatAmélioration

    Le tampon à côté d’une signature peut porter un rôle ou un titre. Le certificat d’audit indique l’adresse e-mail saisie par la personne au moment de signer. La page de vérification a une nouvelle mise en page et reste accessible sans compte.

  • La suppression du compte conserve les contrats terminés pour les autres partiesSécurité

    Avant la suppression, canusign montre ce qui est effacé et ce qui reste. Les contrats entièrement signés impliquant d’autres personnes restent accessibles pour elles via leurs liens et la page de vérification, sans lien avec un compte, et sont supprimés dix ans après la dernière signature. Un abonnement Pro prend fin avec la suppression.

  • Confidentialité : plus d’empreinte de l’appareilSécurité

    La protection contre les comptes multiples pour le document gratuit ne vérifie plus que l’adresse IP et l’e-mail. Le cookie d’empreinte de l’appareil n’est plus déposé et est supprimé pour les comptes existants. L’adresse IP est effacée au bout de sept jours.

  • Aide réécriteAmélioration

    Les guides décrivent le fonctionnement actuel, de l’import aux personnes et champs jusqu’à la signature, dans les quatre langues.

  • Serveurs à Francfort, quatre languesInfrastructure

    Les fonctions, la base de données et le stockage des fichiers tournent à Francfort. canusign est disponible en allemand, anglais, espagnol et français. L’italien, le néerlandais et le portugais ont été désactivés ; leurs adresses redirigent vers l’anglais.

  • API : annulation, liens personnels, journal des requêtesNouveau

    Les contrats en cours peuvent être annulés via l’API. Les liens personnels par personne existent aussi pour les contrats issus de modèles et via le serveur MCP. Les paramètres listent chaque requête API avec méthode, chemin, statut et durée, sans contenu.

  • Documents longs dans le PDF signéCorrection

    Les documents de plus de 20 pages échouaient lors de la création du PDF signé. Ils sont désormais assemblés par parties, et les pages sont générées en parallèle plutôt que l’une après l’autre.

Versions précédentes, en anglais uniquement

Les entrées jusqu’à la version 0.25.0 ont été rédigées uniquement en anglais et figurent ici sans modification.

v0.25.0

Proof anyone can check: signature, seal, certificate, verify page

A user wrote that our signature looked like a pasted image, that the audit certificate could have been written in Word, and that nobody gets a decent signature out of a mouse. He was right on all three. Signing now offers typing, drawing and uploading; every signature carries a stamp with the name, the time and the document ID; the finished PDF is built once, timestamped by DigiCert and kept, so Adobe Acrobat reports it as signed and unchanged; and the new audit certificate carries a QR code to a public page where anyone can drop the PDF in and see whether it matches the copy we hold. The document ID is printed on every page, so the proof survives printing.

  • Type, draw or upload a signatureNouveau

    The signing dialog asks for the name first, then offers three tabs. Typed signatures are set in one of four handwriting fonts and rendered in the browser, so the PDF service never needs the font. Drawing runs on a smoothed pen with pressure-like line width on a retina canvas, and the export is cropped to the ink. An uploaded photo or scan of a signature is re-encoded, which strips EXIF and GPS data along the way. On a desktop, typing is the honest recommendation: a mouse produces a scrawl, and that was the complaint.

  • A stamp beside every signatureNouveau

    Each signature sits on a line with a faint guilloche seal behind it and a small table underneath: who signed, the time with its zone, the document ID in groups, and where the proof lives. No IP address, because a forwarded PDF would otherwise carry the address of every signer next to their name. The seal survives a laser printer: a print test showed the first version dissolving into toner dots, so the lines got thicker and the tint stronger.

  • Audit certificate rebuilt, with a QR codeNouveau

    The certificate now looks like a document instead of a memo, and it carries what a third party needs: per signer the signature image, the name they typed, how they signed (typed with the font name, drawn with mouse, finger or pen, or uploaded), the time in UTC and Berlin time, IP address, device, and the SHA-256 of the signature image. Below that the full history with IPs, the SHA-256 of every uploaded original, and a QR code that leads to the verify page. Available in every interface language.

  • A public verify page for any signed PDFNouveau

    canusign.com/verify takes the document ID from the certificate or from the footer of a printout and answers three questions: does the document exist, is it fully signed, and who signed it (initials only). Drop the PDF onto the page and the browser computes its fingerprint locally and compares it with the copy we hold. The file never leaves the computer, and no account is needed.

  • One signed PDF, timestamped and keptAmélioration

    The signed PDF used to be rebuilt on every download, which meant a fingerprint of it was worthless: every copy differed. It is now built once when the last signature arrives, timestamped against DigiCert per RFC 3161 with the validation data Acrobat needs for the long term, and stored. Every download returns exactly those bytes, and Adobe Acrobat and the free Reader report "signed and all signatures are valid". If the timestamp service is unreachable the download still works, just without the timestamp, and the next one tries again.

  • The API hands out the proof as wellAmélioration

    Contract responses and the contract.completed webhook now carry publicId and verifyUrl, and GET /contracts/:id also returns finalPdf.sha256, the fingerprint of the stored PDF. An integration can put the verify link into its own interface and check the file it downloaded without trusting the download.

  • A signing link no longer exposes IP addressesSécurité

    Anyone holding the link could read the IP address and user agent of every signer, plus the internal payment data of the contract. Those fields now reach the owner only; everyone else sees the contract, the signatures and a reduced history.

v0.24.0

Checkout rebuilt on Stripe Checkout Sessions

The whole payment path now runs on a single Stripe Checkout Session, and prices live in Stripe rather than in the code. That sounds like plumbing, and mostly it is, but it fixes things customers could feel: a visitor in Britain used to read pounds on the pricing page and be charged euros, because the currency was guessed from their country while the charge came from a separate table. Stripe decides the currency now, from where the customer actually is, and offers the payment methods that go with it. Every purchase gets a confirmation mail that doubles as the way into the account, so paying as a guest no longer ends in a dead end. Buying credits, buying Pro and cancelling Pro all run through one flow instead of five separate routes with their own price lists.

  • Every purchase gets a confirmation mail with a sign-in linkNouveau

    One mail, not two: the receipt required for a distance contract and the way into your account are the same message. It states what was bought, what was charged and in which currency, links to the Stripe receipt, and carries a link that signs you in on any device for seven days. For anyone who paid without an account it is the way to the credits they just bought, so the success screen leads with the inbox and shows the address back for checking, instead of burying it under a payment confirmation.

  • The currency comes from Stripe, not from a guessAmélioration

    Prices are held in Stripe with their own amounts for the euro, dollar, pound and Singapore dollar markets; everywhere else Stripe converts. The pay button always shows what will actually be charged, including currencies without decimals, where the old code would have been off by a factor of a hundred. Before a checkout is open the pages state the integration currency, because until the payment form loads nobody knows where the customer is.

  • Pro is bought and managed in one placeAmélioration

    Buying Pro runs through the same checkout as everything else and lands in Settings, and Billing & payments now opens the account that actually holds the subscription and the invoices. Cancelling keeps Pro until the end of the paid month and then steps the plan back down on its own.

  • Payments reach the account that made themCorrection

    A signed-in buyer is now recognised as themselves even when the payment carries a different address, which wallets routinely do. Previously a paid credit could land on a second, newly created account while the buyer watched their own balance stay empty.

  • Revenue is recorded per purchase, with its currencyInfrastructure

    Each completed payment writes a row with the amount and the currency it was charged in. Reporting no longer has to ask Stripe, which answers for an account shared with another product, and revenue is never converted at a rate nobody was charged at.

v0.23.0

Pay-per-signature positioning + duplicate-for-new-signer

Sharpened the landing experience around the pay-per-signature wedge (no subscription, no account for signers, eIDAS-compliant) after a competitive audit confirmed that the real competition is free-tier-then-upsell tools like DigiSigner and BoldSign, not enterprise DocuSign. The pricing line on the landing page now anchors to the actual single-signature price (€1.49) instead of the cheapest-per-credit bulk-discount floor, which was misleading first-time visitors. Two new in-product nudges surface the 'your credit covers it' framing exactly where the data showed users abandoning: above the Continue button in the editor, and as a re-engagement banner on the dashboard for users with credits and a finished draft. The new duplicate-for-new-signer action turns a one-time signed contract into the starting point for the next one, which is how the top power users actually use the product (property managers sending the same lease to multiple tenants, B2B onboardings, repeating coaching agreements). Help and contact also got a clear home inside Settings instead of being hidden behind the generic Feedback link.

  • Duplicate a contract for a new signerNouveau

    Any contract with a document now has a "Duplicate for new signer" action in the dashboard menu. It clones the source contract, including its uploaded PDF/text pages and field placements, as a fresh draft with a new token and "(copy)" appended to the title, ready to send to the next tenant, client, or counterparty without re-uploading and re-placing signature fields. This is the path most of our recurring users were taking manually (re-upload, re-place fields each time); now it is one click.

  • Help & contact section in SettingsNouveau

    Logged-in users had no obvious path to get in touch from inside the app: the Feedback menu item buried the contact form behind a tab. Settings now has a dedicated Help & contact section with three entries: "Send us a message" (deep-links to /feedback?tab=contact, the contact form opens immediately), a direct mailto:contact@canusign.com fallback for users who prefer their own mail client, and "Request a feature" pointing at the public feature-voting list.

  • Cost preview above the Continue button in the editorNouveau

    Once a user has placed at least one signature field, the editor now shows a one-line cost preview directly above the Continue button so the price impact is visible before the user clicks through to /payment. Logged-in users with credits see "Free, your credit covers it" (with available balance); logged-in users at zero balance see "€1.49, one credit required"; guests see "First signature free, no subscription". Many users left at this step without realising their credit already covered the cost.

  • Re-engagement banner for stuck drafts on the dashboardNouveau

    Users with at least one draft contract that already has a document attached and credits in their balance now see a prominent mint/coral banner above the contract list: "You have N drafts ready to send, your credit covers it." Clicking jumps straight into the editor for the first stuck draft. Targets users who got their free signup credit and uploaded a PDF but never finalised.

  • Landing hero rewritten around the no-subscription wedgeAmélioration

    New hero copy:"Sign PDFs. No subscription." with subtitle "Need a signature today? Pay €1.49 once, no trial, no account for your signers. eIDAS-compliant, built for the EU." Replaces the previous neutral "Sign PDFs Online / Upload any PDF, add signatures..." framing. The new copy explicitly targets the real competitive set, free-tier tools that pressure users into subscriptions after the trial, rather than enterprise e-signature players that share none of our pay-per-use audience.

  • Landing page price anchor: €1.49 per signature, not a bulk price per creditCorrection

    The landing page advertised the price per credit of the largest pack, which was the cheapest-per-credit price floor when buying the largest bulk pack, and in the wrong currency. First-time visitors then hit the Single pack at €1.49 at checkout and felt baited. The label now anchors to the actual single-signature price they will see at checkout (€1.49 in EUR; geo-currency adapted), and the wording shifted from "per credit" to "per signature" in every locale so the same noun is used end-to-end from landing, editor and checkout.

v0.22.0

Passkey login and Google OAuth: sign-in rebuilt

Swapped the entire auth stack from NextAuth v5 to Better Auth and put the new capabilities in front of users. /login now offers three sign-in methods: magic link (email), passkey (Touch ID / Face ID / Windows Hello via WebAuthn conditional UI), and Google OAuth. /settings/security is the new home for managing passkeys and listing active sessions, with one-click revoke per device or sign-out-everywhere-else. The post-payment success card no longer bleeds packs and promo banners through; once the credit is purchased, only the magic-link confirmation remains visible.

  • Passkey login with conditional UINouveau

    Email field on /login carries autocomplete="username webauthn" so browsers surface saved passkeys directly in the autofill dropdown. An explicit "Sign in with Passkey" button handles the fallback. Per-user passkey management at /settings/security (add, rename, delete) lists every credential with the device type and registration date.

  • Google OAuth sign-inNouveau

    Continue-with-Google button on /login wired to Google Cloud OAuth. Gated by NEXT_PUBLIC_GOOGLE_LOGIN_ENABLED so previews without credentials still build cleanly.

  • Active session list + revokeNouveau

    /settings/security lists every active session with the browser/OS guess, IP, and sign-in date. "Current" badge on the active session, per-row revoke, plus "Sign out other devices" when more than one session exists.

  • Cleaner post-payment success screenAmélioration

    Pack selector, promo banner, trust badges, comparison hint, and Sign-up-free CTA all collapse once payment succeeds. Only the magic-link confirmation card stays visible, so guests see one obvious next step instead of a scroll of unrelated UI.

v0.20.0

Locale-aware blog content

Blog articles outside English now start from the legal framework of their market instead of US law.

  • Blog content now respects local jurisdictionsAmélioration

    Articles for non-English locales now reference the actual local legal framework (eIDAS, RGPD, BGB, Codice Civile, KEP, 電子署名法) instead of US-only terms. Geo-locked topics (HIPAA, IRS Form 8879, ABA Model Rules) are blocked from generating in non-US locales.

v0.19.0

Link previews and payment fixes

A tightened Open Graph and manifest setup, so links shared on social platforms render with the proper preview, theme color and Apple web-app metadata, plus small fixes on the payment page.

  • Manifest, theme color & Apple web-app metadataDesign

    Proper PWA manifest, theme color tokens for browser chrome, and Apple-specific metadata so the site behaves like a native install on iOS Safari "Add to Home Screen".

  • Browser-back from payment now lands in editorCorrection

    Hitting the browser back button after a Stripe redirect used to throw users into a broken state. Now it properly returns to the editor with the document still loaded.

  • Pricing copy reflects credit-pack modelCorrection

    Removed legacy "€1/document" claims from marketing pages. Pricing now matches the actual credit-pack tiers (Single €1.49, Starter €4.90, Popular €9.90, Business €24.90, Pro €15/mo).

v0.18.0

Credit system, accounts & anti-abuse

The biggest change since launch: moved from per-document Stripe checkout to a credit pack system with user accounts, magic-link login, and a personal dashboard. New users get one free credit on signup, then buy packs with bonus credits stacked on top. Plus a referral program, anti-abuse system, and exit-intent conversion optimization.

  • Credit packs with bonus tiersNouveau

    Buy credits in bundles: Single (€1.49), Starter (€4.90 with +1 bonus), Popular (€9.90 with +5 bonus), Business (€24.90 with +15 bonus), or Pro at €15/month for unlimited use. Bonus credits highlighted in green throughout the UI.

  • User accounts & dashboardNouveau

    Magic-link login via email (no passwords). Personal dashboard shows your documents, credit balance, and credit history. Guest documents created before signup get migrated to your account on first login.

  • Inline Stripe paymentNouveau

    No more redirect to Stripe Checkout. Card form is embedded directly on the payment page so you stay in context. Single pack pre-selected for one-click purchases. Replaced in 0.24.0 by Stripe Checkout Sessions.

  • Referral programNouveau

    Each account has a 6-character referral code. Invite a friend and you both get a free credit when they sign up. Email notification when someone redeems your link.

  • Anti-abuse systemSécurité

    Disposable email domains blocked at signup (~100 domains covered). IP rate limit: max 3 bonus-credit signups per IP per 24h. Browser fingerprint plus signup-fingerprint persistence prevent bonus farming via account deletion + re-registration. The browser fingerprint was dropped on 23 September 2026; the check now runs on IP address and email only.

  • Avatar dropdown & credit badgeAmélioration

    New header with avatar dropdown (Settings / Feedback / Logout) and a credit badge that turns mint when you have credits, gray when at zero. Click the badge to jump straight to your settings.

  • Conversion optimizationAmélioration

    Trust badges (SSL, eIDAS, GDPR), social proof on the homepage, exit-intent popup with discount, and a sticky blog CTA bar that follows you while reading articles.

v0.17.0

Better signing flow & mobile polish

The signing experience got a major redesign with an integrated document header, page tabs with status icons, and proper mobile gestures. Loading states feel responsive, navigation is unified across all step types, and pinch-to-zoom works the way users expect.

  • Integrated document header during signingAmélioration

    Status, page counter, page tabs and the action button are now combined into one header on top of the document. Page tabs are numbered and show a pen icon for unsigned pages, a check for signed ones, colored to match each signer.

  • Pinch-to-zoom on mobileAmélioration

    Native pinch gesture support plus dedicated zoom controls underneath the document. Touch targets for navigation arrows enlarged for fingers.

  • Unified navigation for every step typeAmélioration

    Same navigation pattern whether the document is a contract, uploaded PDF, text, or image. Reduces cognitive load and code surface.

  • Signing loader overlayNouveau

    Visible loading state during the signing API call, so there is no more wondering if the click was registered.

  • "Partially signed" statusNouveau

    Documents with at least one signature but not all show as "Partially signed" in the dashboard, with a clear count of remaining signers.

Une fonctionnalité vous manque ou vous avez des commentaires ?

Envoyer un commentaire