What it does
A document sent for signature gets a unique, long, random token per recipient, generated as a 48-character URL-safe string. That token is the credential, whoever holds the link can open the signing page, no account or password required on the recipient's side.
Fields on the document, signature blocks, initials, names, dates, are placed by the AI before it goes out, though they can be adjusted by hand. Sensitive filled-in values like names and ID numbers are encrypted before they're stored. If something changes after a document is sent, it can be revised or voided outright, and every action along the way, from sent to signed to voided, is written to an append-only event log.
How it works
- 1
Fields get placed automatically
The AI proposes where signature blocks, initials, and fillable fields belong on the document, based on its content, so a document doesn't need to be marked up by hand from a blank page.
- 2
A document is sent per recipient
Each recipient gets their own signing token, minted when the document is sent, and tied to their specific role on that document.
- 3
The recipient signs at a public link
The link resolves directly to the signing page. No login, no account creation, just the token in the URL granting access to that recipient's copy of the document.
- 4
Every step is logged
Sending, opening, filling a field, signing, and voiding are all recorded as events, and that log is append-only, meaning nothing already recorded can be edited or removed.
- 5
Changes are handled explicitly
A document that needs a correction can be revised rather than requiring a whole new document from scratch, and a document that should no longer be signable can be voided, which locks it against further action.
The token is the access model
There's no password or account creation step for a signer. A 48-character random token generated per recipient is long enough that guessing one is not a realistic path in, and it can also be set to expire, after which the signing page reports the document as expired rather than opening it.
Sensitive field values are encrypted
Names, ID numbers, and signature data filled into a document's fields are encrypted at the application level before they're written to storage, not just protected by database access controls alone.
Void is a real, final state
A voided document stops being signable. That status is checked before any signing action is allowed to proceed, so a document that has been withdrawn can't accidentally still be completed by someone who had an old link open.
The event log never silently fails
Recording an event is designed to never block or break the action that triggered it, an event-log write failure doesn't stop a document from sending or a signature from being captured. That log becomes the record of exactly what happened and when, useful if a signed document is ever questioned later.
Who it's for
Who this is for
This is for sending offer letters, employment contracts, or any other document that needs a real signature as part of the hiring process, without exporting to a separate e-signature vendor and losing the connection between that document and the candidate's record in Intervieux.
Frequently asked questions
Does a candidate need to create an account to sign a document?
No. Each recipient gets a unique signing link with a token that grants access directly. There is no login or account creation required to open and sign the document.
How are the signature fields placed on a document?
The AI proposes field placement, signature blocks, initials, dates, and other fillable fields, based on the document's content before it is sent. Fields can be adjusted from that starting point.
What happens if I need to correct a document after sending it?
A sent document can be revised rather than requiring a brand new document, or voided outright if it should no longer be signable at all.
Is there a record of everything that happened to a document?
Yes. Every action, sending, opening, filling a field, signing, and voiding, is written to an append-only event log that cannot be edited or removed after the fact.
Related pages
Send a document for signature without leaving the pipeline
Get a signature-ready document out the door with fields already placed and a full record of every action taken on it.