Features · Signa

a few things, done well.

Five habits. One ledger. Kept for you.

Each feature is a small chore done on time, every time, until the chore is simply gone.

An archive room with squared boxes on shelves and a ledger open under a desk lamp
Automated compliance tracking

the ledger keeps itself

Every requirement becomes a line. Signa reads your cloud, your code and your identity provider on a schedule you choose, collects the evidence, and marks the control when it passes.

What lands in the ledger

  • Evidence stamped with the hour it was gathered
  • Each control tied to the requirement it answers
  • A change log that records who moved what, and when
  • Checks hourly, daily or weekly, per control

Connections are read-only. Signa learns the shape of your systems and leaves them as it found them.

Begin

One line is enough. Open the first one tonight.

Start free trial
One-click audit reports

press once. hand it across.

The auditor writes on a Tuesday. You press a single button. Findings, evidence and sign-offs gather into one report, paginated and dated, ready for the table.

Inside the report

  • PDF, or a read-only link that expires when you say
  • Every page marked with the window it covers
  • Sign-offs from each control owner, in order
  • A cover note you can edit before it leaves
Real-time risk alerts

small things, said early

A permission widens. A vendor lapses. A policy goes unsigned. Signa says so in Slack or your inbox, while the trouble is still small enough to hold in one hand.

How the quiet is kept

  • Severity you can read at a glance: high, medium, low
  • Routed to the one person who owns the control
  • Quiet hours, so only the loud things wake anyone
The rhythm of it

a year of habits, kept in time

Compliance is less an event than a pulse. This is the beat Signa keeps while you work.

every hourSystems checked

Access, encryption and configuration read against the rule they answer.

every morningDrift summarised

One short note to each control owner: what changed, what waits.

every weekReminders sent

Policy signatures and vendor reviews nudged on the day each owner chose.

every quarterAccess reviews opened

Who holds which key, laid out for a reviewer to confirm or revoke.

when askedThe report

Assembled in a click, dated, sealed, and ready to hand over.

Team permissions

one key, one door

Give each person the part of the ledger that is theirs. Owners edit, reviewers confirm, auditors read. Nobody carries a key to a room they never enter.

Who holds what

  • Roles for owners, reviewers and read-only auditors
  • Single sign-on through your identity provider
  • Every view and every edit written to the record
SOC 2 templates

begin from the written page

Policies, controls and evidence requests for SOC 2 arrive already drafted. You adjust them to your house; you do not invent them from air.

In the first folder

  • Trust Services Criteria mapped to plain-language controls
  • Policy drafts to edit, not compose
  • Room to write your own rules beside them
How we keep it

what we will not do

We will not touch your systems.Every connection is read-only.

We will not shout when a whisper will do.Severity ranks every alert, and quiet hours are yours.

We will not hide the record.Each check, view and edit stays on the page.

Anatomy of a control

one line, read closely

Every control in Signa carries the same four marks. Learn one and you have learned them all.

  1. The rule. The requirement it answers, in plain words.
  2. The owner. One named person, one reminder day.
  3. The evidence. Gathered, dated, never retyped.
  4. The state. Passing, due, or in need of a hand.
Plans from $99 a year

Pick a size. Every plan keeps the same watch.

Read the plans
Questions

asked, answered plainly

Does Signa change anything in our systems?

No. Every connection is read-only. Signa observes, gathers evidence and reports; it never writes back to your cloud, code or identity provider.

Which frameworks are covered?

SOC 2 templates are ready today. Higher plans allow more than one framework, and you can write your own controls beside the templates.

Where do alerts arrive?

In Slack or in email, routed to the person who owns the control. Quiet hours keep the lower-severity ones until morning.

Can our auditor see the evidence directly?

Yes. Share a read-only link or an exported PDF. Auditor access expires on the date you set.

How do we begin?

Connect the tools you use, pick a template, give each control an owner. Questions before that? Write to hello@signa.com.

let the ledger begin.

Five habits, kept.
The rest is quiet.

Start with the plan that fits today. Move up when the room gets bigger.