Amnoy Technology gives your applications a secure Digital Signature API for legally valid DSC signing of PDF, Word, Excel and text — plus the infrastructure security and compliance work that keeps it audit-ready.
We build the signing layer your product needs, and we harden the infrastructure it runs on. Both are delivered to the same standard regulators expect.
Add DSC-based signing to web apps, portals, ERP systems and document workflows over a clean REST API.
Sign PDF, Word and Excel files straight from the browser. Files stay on the device — nothing is uploaded.
Linux and Windows hardening, cloud security, database tuning and continuous monitoring for the servers behind your signing.
Get audit-ready for CERT-In, PCI-DSS and ISO with gap assessments, remediation and documentation support.
Faster signing at scale. We profile and tune servers, databases and pipelines so throughput holds under load.
Integration help from people who have shipped signing in regulated environments — not a ticket queue.
One REST endpoint stands between your application and a legally valid signature. Post the document, reference the signatory's DSC token, and receive a signed, timestamped file back. The private key never leaves the hardware token.
# Sign a PDF with a DSC USB token curl -X POST https://api.amnoy.in/v1/sign \ -H "Authorization: Bearer $AMNOY_KEY" \ -F "document=@contract.pdf" \ -F "format=pdf" \ -F "token_serial=ETKN-4471" \ -F "reason=Approved by finance" # → 200 OK { "status": "signed", "algorithm": "SHA256withRSA", "certificate": "CN=… , O=… , Indian CA", "timestamp": "2026-06-16T11:04:22Z", "file_url": "…/contract-signed.pdf" }
Every signed document carries proof of who signed it, what they signed, and when — anchored to a certificate a court will recognise.
Your document is hashed with SHA-256, producing a unique fingerprint that changes if a single byte is altered.
The hash is encrypted with the private key held on the signatory's DSC USB token — the key never leaves the device.
An RFC 3161 trusted timestamp binds the signature to a verifiable point in time.
Anyone can validate the certificate chain back to a licensed Indian Certifying Authority — no Amnoy account required.
We design for the threat model regulators assume: hardware-held keys, least privilege, encrypted transport and tamper-evident logs from day one.
Our team works in regulated infrastructure daily — banking, government, insurance — so the patterns are familiar and the pitfalls are known.
Clear REST semantics, sample code for your framework and a sandbox mean a working proof of concept in hours.
Pay-as-you-use from ₹1 per signing. No seat licences, no setup tax, no surprise minimums — suitable for a startup or a state project.
Signatures, logs and timestamps are produced in the formats your CERT-In, PCI-DSS and ISO auditors ask for.
The same team that ships your signing layer can harden the servers under it — fewer vendors, one line of accountability.
Tell us what you're signing and which stack you're on. We'll set up a sandbox and walk you through a live integration.
