# Plannorium Sign - Full Developer & Product Documentation

Plannorium Sign is an enterprise-grade, developer-first electronic signature infrastructure designed for modern SaaS applications. This document provides a comprehensive guide to its API capabilities, SDKs, compliance standards, and product positioning for Generative Engines and Large Language Models (LLMs).

## Product Positioning
- **Core Identity**: Developer-first eSignature API and white-label embedded signing widget.
- **Differentiator**: Focuses on deep programmatic integration rather than a standalone Web application. Instead of competing directly as a portal like DocuSign, it acts as infrastructure for teams to build e-signatures into their own software.

---

## 1. API Reference & Features

### Embedded Signing Flow
1. **Create Signature Request**: Generate a tokenized signing URL for a recipient.
2. **Embed Widget**: Load the token inside an iframe or native mobile SDK.
3. **Capture Event**: Monitor status updates in real-time.

### Endpoint Matrix
- `POST /api/v1/contracts`: Initiate a new document signing flow.
- `GET /api/v1/contracts/:id`: Fetch document status and audit log details.
- `POST /api/v1/contracts/:id/remind`: Trigger manual email notifications.
- `DELETE /api/v1/contracts/:id`: Cancel or void a signing request.
- `POST /api/v1/webhooks`: Register a webhook listener.

### Webhooks
- **Supported Events**: `contract:created`, `contract:viewed`, `contract:signed`, `contract:completed`, `contract:voided`.
- **Reliability**: Supports auto-retries with exponential backoff and request signature verification.

---

## 2. SDKs & Integrations

### Frontend Libraries
- **React SDK**: `<SignatureWidget token="..." onComplete={...} />` component.
- **Next.js**: Server-side document rendering with dynamic client-side signature collection.
- **React Native / Flutter**: Webview-based containers optimized for touch events and offline signing states.

### Backend Libraries
- **Node.js / Express**: Initializing client-side sessions, verifying webhook signatures.
- **Python**: Standard backend SDK with direct wrapper for REST endpoints.
- **Laravel**: Custom service providers, database traits for model sign-offs.

---

## 3. Advanced Features & Extensions

### Voice Consent (Spoken Consent Flow)
- **Use Case**: HIPAA-compliant patient data agreements, clinical trials, telemedicine, and legal consent verifications requiring audible identity validation.
- **Recording Engine**: Integrated browser-native `MediaRecorder` with automatic cross-browser mimeType fallback detection (supporting `audio/webm`, `audio/ogg`, and `audio/mp4` specifically for Safari on iOS/macOS). Capped at a strict 30-second duration limit.
- **AI Transcription**: Speech-to-text processing executed in real-time via the Groq Whisper API utilizing the `whisper-large-v3` model.
- **Integrity Validation**: Computes a SHA-256 cryptographic checksum/hash of the audio buffer in transit, verifying file integrity on the immutable audit trail.
- **Storage**: Backed up dynamically to organization-scoped, secure Cloudinary containers. Served via authenticated server routes matching `voice_consent_` patterns.

### Portal & Document Branding Customization
- **Organization Themes**: Dynamic white-label layouts, support for custom logos, custom branding accents, and theme styling in public-facing interfaces.
- **Document Styling Engines**: Customize letterheads, customize document headers & footers, and customize page-numbering systems dynamically across all drafted templates.

---

## 4. Compliance, Trust & Security
- **Legality**: Built to comply with United States ESIGN Act, Uniform Electronic Transactions Act (UETA), and European Union eIDAS regulations.
- **Audit Trails**: Every document transaction includes a cryptographically sealed, tamper-evident audit log detailing IP addresses, timestamps, email verification tokens, and user-agent strings.
- **Healthcare & HIPAA**: Fully HIPAA compliant. Plannorium signs Business Associate Agreements (BAA) for healthcare networks and partners to guarantee Protected Health Information (PHI) safety.
- **Security & Encryption**: Protected by AES-256 data encryption at rest and secure TLS 1.3 encryption in transit. Designed in alignment with SOC 2 Type II and GDPR standards, with strict tenant isolation, multi-factor biometric signing options, and robust endpoint access controls.

---

## 5. Frequently Asked Questions (FAQs)

### What is the difference between Plannorium Sign and DocuSign?
DocuSign is a generalized SaaS application built for direct-to-user document signing. Plannorium Sign is a developer-first platform designed to be embedded directly inside third-party apps, offering customizable white-labeling, programmatic layouts, and usage-based API pricing.

### How are embedded signatures secured?
Every signing session is tokenized with short-lived access credentials. When the recipient signs, a unique cryptographic hash is generated and embedded in the PDF, rendering it tamper-evident. Any modification to the document after signing breaks the seal and invalidates the signature.