21 CFR Part 11 · EU eIDAS
Add compliant electronic signatures and a tamper-evident audit trail to your Confluence approvals — built on Atlassian Forge, so your signature data never leaves Atlassian.
Incumbent workflow apps mark their own e‑signatures “Limited.” We make the signature the whole point.
What you get
Atlassian account identity plus your own signing credential, verified on every signing. Each signature records its meaning — Reviewed, Approved, or any you define — the signer, and the exact page version.
§11.100 · §11.200 · §11.50Every signature is linked into a SHA‑256 hash chain. Alter one entry and the chain breaks, visibly. Export a standalone certificate anyone can verify — without our app.
§11.10(e) · §11.70Runs on Atlassian: no remote backend, no third‑party API, no egress. Signature data stays inside Atlassian‑hosted storage — data residency you can prove, not promise.
Forge · hosted storageRequire Reviewed before Approved. Restrict who may apply each meaning to the right groups. Notify the right people — inside Atlassian, no email. Keep your workflow app, or use ours.
§11.10(f) · §11.10(g)The evidence
Reordering, editing, inserting or deleting a signature breaks the chain at a detectable point. Verification recomputes it from the published method at gxpseal.com/verify.
How it works
One Forge app, no servers to run and nothing to connect. It inherits your site’s data‑residency controls.
From a page’s menu, choose a meaning and enter your signing credential. The signature binds to that exact version.
A permanent, tamper‑evident record on the page, and a self‑verifying certificate for your validation pack.
“The two‑component signing model and audit controls were reviewed against 21 CFR Part 11 and confirmed sound.”
Independent review by qualified regulatory counsel. The signed position paper and continuing‑obligations record are retained in the validation pack for your auditors.
Security & privacy
GxP Seal runs entirely on Atlassian Forge. There is no remote backend to breach and no third party in the path — so “data residency” is something you can demonstrate to an auditor, not just assert.
Pricing
On your existing Atlassian invoice, with a 30-day free trial. Free for up to 10 users, always.
Indicative pricing — final tiers are set at Marketplace listing. Runs on Atlassian: you keep 100% of revenue up to $1M in lifetime Forge earnings.
Support
No outsourced tier-one. You reach the team that wrote the hash chain — with the documentation and validation evidence your auditors will ask for.
Stop bolting e‑signatures onto a workflow tool that treats them as an afterthought. Make the signature the record — and keep it inside Atlassian.