Electronic signature software

Autenti

Electronic signatures and trust services from Poland

PolandEU Ownership reviewed, controller unresolvedHigh non-EU dependency

Scope verdict

Ownership reviewed, controller unresolved

The official current KRS extract confirms Autenti S.A., KRS 0001254852, NIP 7831693251, Święty Marcin 29/8, 61-806 Poznań. Registration on 31 July 2026 followed conversion of Autenti sp. z o.o. (KRS 0000436998); registered capital is PLN 6,811,700. The company names bank and venture investors, but a complete post-conversion voting register and investor rights were not obtained. Ultimate control remains unresolved. The existing platform terms apply Polish law with consumer-law protections. The published replacement terms are expressly effective from 16 September 2026, one day after this review, and were not treated as already operative.

How we classify services

Operational dependency warning

Relies heavily on non-European providers

Current public evidence shows 4 non-European infrastructure or email dependencies across 3 providers: Chargebee, Google, HubSpot / Cloudflare. The reviewed operational path is therefore not entirely European.

Review dependencies ↓

Autenti provides cloud document workflows, electronic signatures and integrations with qualified-signature providers. Its own platform signature is not automatically equivalent to handwriting; that effect applies to a qualified electronic signature under eIDAS, subject to the document's legal requirements.

The operator is now Autenti S.A. in Poznań, following its July 2026 conversion. The Polish trust-services register lists qualified electronic delivery and qualified signature/seal validation, still under the former entity name. These service-specific qualifications do not mean Autenti issues every qualified-signature certificate or establish its ultimate ownership.

Pricing

The current English site promotes a 14-day trial. PRO is 240 euro net per user/year, equivalent to 20 euro/month; PREMIUM is 420 euro net per user/year, equivalent to 35 euro/month. The annual offers advertise unlimited document sending; monthly plans have different prices and limits. Qualified certificates and other services can cost extra. First-period discount codes do not establish renewal prices. A continuing free plan was not confirmed in the current offer.

Data and operations

Infrastructure and email path

Verified operational dependencies, shown separately from ownership and from the service's core data hosting.

Public website

HubSpot / Cloudflare

Non-European provider
Observed
The public website uses HubSpot assets and resolves to 199.60.103.77 / 199.60.103.177. Website delivery is not evidence of the signing platform's payload host.

Why this matters

Public DNS routes website visits through HubSpot / Cloudflare. Visitor IP addresses and request metadata can reach this non-European provider; this does not identify the core service's data location.

Core service hosting

Hosting provider not publicly identified

Provider control not verified
Observed
Autenti says customer data is processed in the EEA. The reviewed public materials do not identify every underlying hosting provider, exact region or backup site.

Incoming business email

Google Workspace

Non-European provider
Observed
MX 1 aspmx.l.google.com · 5 alt1.aspmx.l.google.com · 5 alt2.aspmx.l.google.com · 10 alt3.aspmx.l.google.com · 10 alt4.aspmx.l.google.com

Why this matters

Published MX records route incoming business email through Google Workspace. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.

Authorised outbound email

EmailLabs / HubSpot / Google Workspace

Provider control not verified
Observed
SPF includes _spf.emaillabs.net.pl, 9095276.spf07.hubspotemail.net and _spf.google.com. These authorized senders have different corporate-control profiles.

Payment processing

Chargebee

Non-European provider
Observed
The public trusted-partners table names Chargebee; this is account/billing evidence, not a complete signed-document hosting schedule.

Why this matters

When this payment method is used, Chargebee processes payment and billing data. This role alone does not establish access to the service's other customer content.

Supporting services

Mailchimp / Google / Zapier / Pipedrive / Freshdesk

Non-European provider
Observed
Named in the public trusted-partners table for business, website and communication activities; do not assume all receive signed-document payloads.

Why this matters

The published disclosure lists Mailchimp / Google / Zapier / Pipedrive / Freshdesk for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.

Supporting services

Hotjar / Landingi / InlineManual / User.com / Bluerank

Provider control not verified
Observed
Also named in the broad trusted-partners table. Roles, regions and current control are not completely specified there.

Supporting services

External qualified-signature providers

Provider control not verified
Observed
Autenti integrates or sells QES certificates from other qualified providers; the issuer and identity-verification flow depend on the selected certificate.

Public DNS records identify visible providers and routes, not every backend location or private data-region setting.

Infrastructure checked:

More from Poland