Documents & signing
Public + private document sharing
Toggle a document between unguessable QR-shareable URL and email-invite-only.
What it does
Every Document has a visibility field. Private means only the owner or invited emails can fetch it. Public mints a 32-byte publicToken and renders /d/[token] with a QR. Flipping back to private rotates the token, killing all old links and QR codes — no orphaned access.
How it works
- 1
Upload a document. It starts as private.
- 2
From the document page, flip the toggle to public. DocSign mints a token and shows a QR.
- 3
Invite specific people while still private: their email gets a link; access is allowed only when they're logged in as that email.
- 4
Flip back to private. The publicToken is rotated; the old QR stops working.
Why it matters
- Public links can be killed instantly without a 'revoke' UX — toggling visibility does it.
- Private invites are bound to email, so forwarded links don't grant access.
- Sharing changes are audited (doc.visibility / doc.invite / doc.invite.revoke).
Want to try it?
Most features are available the moment you sign up. No card required.