Skip to content

Organization Setup

Configure your GxPSign organization settings.

Initial Configuration

When your organization is created, you'll need to configure several settings.

Basic Settings

Setting Description
Organization Name Your company or organization name
Slug URL-friendly identifier (e.g., "acme-corp")
Domain Optional custom domain

Accessing Settings

  1. Sign in as an Organization Owner
  2. Click Settings in the navigation
  3. Select Organization Settings

Screenshot Coming Soon

Screenshot of organization settings will be added here.

Subdomain Configuration

GxPSign uses subdomain-based multi-tenancy for secure data isolation.

How It Works

Your organization's URL follows this pattern:

https://your-slug.gxpsign.app

For example:

  • Acme Corp: https://acme-corp.gxpsign.app
  • BioPharm Inc: https://biopharm.gxpsign.app

Data Isolation

Subdomains provide complete data isolation:

  • Each organization has its own database context
  • Row Level Security (RLS) enforces access at the database level
  • Users can only access their organization's data
  • Even administrators cannot cross organization boundaries

Security Feature

RLS policies are enforced at the PostgreSQL database level, providing security that cannot be bypassed by application code.

Editing Organization Details

Changing Organization Name

  1. Go to Settings > Organization
  2. Click Edit next to Organization Details
  3. Update the Name field
  4. Click Save

Updating Slug

Slug Changes

Changing your slug will change your organization's URL. All users will need to use the new URL, and old bookmarks will stop working.

  1. Go to Settings > Organization
  2. Click Edit
  3. Update the Slug field
  4. Review the new URL shown
  5. Click Save

Subscription & Billing

GxPSign uses a seat-based pricing model. There are no plan tiers.

SignatureManager Seats

Each paid SignatureManager seat ($950/seat/year) allows one user to:

  • Upload documents
  • Create and send signature requests
  • Produce clean, unbranded signed PDFs

Demo SignatureManager Seats

Demo SignatureManager seats are free and unlimited. They allow the same workflow as a paid seat (uploading documents and creating/sending signature requests), but signed PDFs include a prominent DEMO watermark. Demo seats do not count against your purchased seat quota, so you can assign as many as you like.

Use demo seats to evaluate the platform or train new users before purchasing paid seats. A user cannot hold both a paid and a demo seat at the same time.

Viewing Your Seats

  1. Go to Settings > Billing
  2. See paid seats purchased and in use, plus the number of Demo SignatureManager seats currently in use
  3. View which users hold paid and demo seats

Purchasing More Seats

  1. Go to Settings > Billing
  2. Click Purchase / Adjust Seats
  3. Enter the number of seats needed
  4. Save

No Auto-Assignment

Purchasing seats does not automatically assign them to users. After purchasing, go to Users and assign seats individually from each user's detail page.

Managing Billing

  1. Go to Settings > Billing
  2. Click Purchase / Adjust Seats to change seat count
  3. Update subscription status as needed

Security Settings

Session Timeout

Configure how long users can stay signed in:

  1. Go to Settings > Security
  2. Set Session Timeout (in minutes)
  3. Click Save

Password Policy

Set password requirements for your organization:

Setting Default
Minimum length 8 characters
Require uppercase Yes
Require number Yes
Require special character No

Require Passkey to Sign (WebAuthn-only policy)

GxPSign requires a fresh re-authentication for every signature event for all GxP-enabled organizations (EU Annex 11 § 13.3) — there is no time-window during which subsequent signatures skip the prompt. By default, signers may re-authenticate with a WebAuthn passkey, their account password, or an SSO step-up — whichever they have available.

You can tighten that policy so that only a passkey is accepted:

  1. Go to Settings > Organization
  2. Find Require passkey to sign under the security settings
  3. Check the box
  4. Click Save
Setting Effect
Off (default) Signers may use passkey (preferred), password, or SSO step-up. Risk-based — appropriate for most teams.
On Passkey is the only accepted re-authentication method. Signers without an enrolled passkey are sent to set one up before they can sign. Password and SSO step-up fallbacks are disabled for your organization.

Why passkeys

A WebAuthn passkey intrinsically satisfies MFA on remote critical systems (Annex 11 § 11.6) — it combines possession (the device that holds the private key) with inherence (Touch ID, Face ID, Windows Hello, or Android biometric) or knowledge (device PIN). It is also the fastest re-authentication method available: a sub-second biometric tap per signature instead of typing a password.

External signers

The sending organization's policy governs the signing event. If your organization has Require passkey to sign enabled, every signer on requests you send — including external signers from other organizations — must use a passkey, regardless of their own organization's policy. Make sure your external signers know they will be prompted to enroll a passkey if they have not already.

For the full per-clause regulatory mapping, see GxP Compliance → EU GMP Annex 11 Compliance. For the end-user experience, see Passkeys.

Danger Zone

Transfer Ownership

To transfer organization ownership:

  1. Go to Settings > Organization
  2. Scroll to Danger Zone
  3. Click Transfer Ownership
  4. Select the new owner (must be an existing user)
  5. Confirm the transfer

Cannot Undo

Once transferred, you will lose owner permissions unless the new owner grants them back.

Delete Organization

Permanent Deletion

Organization deletion is permanent and cannot be undone. All documents, users, and settings will be deleted.

To delete an organization:

  1. Contact support@gxpsign.app
  2. Verify ownership
  3. Confirm deletion request
  4. Data will be deleted within 30 days

Best Practices

  1. Complete setup early - Configure all settings before inviting users
  2. Descriptive slug - Use a clear, memorable slug
  3. Document settings - Keep a record of your configuration
  4. Review regularly - Periodically audit your organization settings