Firmato

Firmato is an electronic signature platform developed by NUCBA SRL, enabling legally valid signing of contracts, payroll receipts, and corporate documents.

Key security and integrity features:

• Multi-tenant isolation enforced via database-level Row-Level Security
• Identity verification of signers with biometric validation
• Cryptographic audit trail — tamper-evident, hash-chained event log
• RFC 3161 timestamping from an independent time-stamping authority
• Blockchain anchoring (Bitcoin / OpenTimestamps) for publicly verifiable, immutable proof of existence
• Encryption in transit (TLS 1.2+/1.3) and at rest (AES-256)
• Configurable data retention with automated purging
• Continuous security scanning (SAST, SCA, secrets) mapped to OWASP, ISO 27001, SOC 2, and GDPR

Firmato provides legally valid electronic signatures aligned with the UNCITRAL Model Law on Electronic Signatures and admissible under Argentina's Law 25.506, U.S. ESIGN/UETA, and the EU eIDAS framework.