E-signature, OCR & Document Services
Replaceable document providers behind a canonical ERP evidence model: adapter profiles, capability matrix, health, failover order and strict sandbox/production separation (INT-07).
INT-07
Adapters active
6
2 more sandbox-only
Jobs today
412
268 OCR · 96 render · 48 e-sign
Failovers (7d)
1
OCR-118422 · both attempts recorded
Queued during outage
0
Last drill 03 Jun 2026
Contracts expiring ≤ 60d
1
DocuSecure MENA · 30 Aug
Adapter profiles
| Adapter | Capability | Legal vendor / contract | Data region | Assurance profile | Sandbox | Production |
|---|---|---|---|---|---|---|
| SignFlow Gulf Primary e-signature · accountable owner: Mariam Al Suwaidi (Legal) |
E-signature | SignFlow Gulf DMCC · CTR-2025-118 · exp 31 Mar 2027 | UAE North | AES + qualified e-seal · legal gate passed | Connected | Active |
| DocuSecure MENA Fallback e-signature · equally eligible route |
E-signature | DocuSecure FZ-LLC · CTR-2024-201 · exp 30 Aug 2026 | UAE North | AES · legal gate passed | Connected | Active — renewal in progress |
| TextHarvest OCR Primary OCR/extraction · owner: Yusuf Karim (KYC) |
OCR / extraction | TextHarvest Ltd · CTR-2025-064 · exp 31 Dec 2026 | UAE North | Due diligence 2026-02 | Connected | Degraded — timeout spike |
| LexiScan OCR Approved fallback OCR |
OCR / extraction | LexiScan Technologies · CTR-2026-012 · exp 28 Feb 2027 | UAE Central | Due diligence 2026-05 | Connected | Active (fallback) |
| DocForge Render Contract/PDF generation service (internal container) |
PDF render | In-house build · n/a | UAE North | Internal | Connected | Active |
| ShieldScan AV Upload scanning · quarantine pipeline |
AV scanning | ShieldScan GmbH · CTR-2025-090 · exp 30 Sep 2027 | UAE North | ISO 27001 verified 2026-01 | Connected | Active |
| VaultStore Objects Private managed object storage / CDN · region-pinned |
Storage / CDN | VaultStore ME · CTR-2024-155 · exp 31 Jan 2028 | UAE (pinned) | Encryption + AV profile | Connected | Active |
| InkPress e-sign Evaluation candidate — not eligible for production routes |
E-signature | InkPress Inc. · NDA only | EU West ⚠ | Residency review failed — data location outside policy | Connected | Not activated |
8 profiles · provider record declares vendor, licence status, capability, purpose, data class, region, subprocessors, retention, exit obligations, verification date, owner
Capability matrix
✓ supported · ◐ partial · — not offered| Capability | SignFlow Gulf | DocuSecure MENA | TextHarvest | LexiScan |
|---|---|---|---|---|
| Envelope create + sequential routing | ✓ Yes | ✓ Yes | — | — |
| Bulk send (campaign notices) | ✓ Yes | ◐ Partial — 50/batch | — | — |
| EN/AR signing UI | ✓ Yes | ✓ Yes | — | — |
| Qualified e-seal (company) | ✓ Yes | — | — | — |
| Evidence package export + hash chain | ✓ Yes | ✓ Yes | — | — |
| Signed webhooks + replay protection | ✓ Yes | ✓ Yes | ✓ Yes | ✓ Yes |
| OCR — printed English | — | — | ✓ Yes | ✓ Yes |
| OCR — printed Arabic | — | — | ✓ Yes | ◐ Partial — no diacritics |
| Table / layout extraction | — | — | ✓ Yes | ✓ Yes |
| Per-field confidence output | — | — | ✓ Yes | ✓ Yes |
Adapter health (24h)
Full provider health| Adapter | Last success | p95 latency | Error rate | State |
|---|---|---|---|---|
| SignFlow Gulf | 17 Jul 09:44 | 1.9 s | 0.2% | Healthy |
| DocuSecure MENA | 17 Jul 09:31 | 2.4 s | 0.4% | Healthy |
| TextHarvest OCR | 17 Jul 09:40 | 28.5 s | 6.1% | Degraded — timeouts |
| LexiScan OCR | 17 Jul 09:42 | 7.2 s | 0.8% | Healthy |
| DocForge Render | 17 Jul 09:45 | 0.9 s | 0.0% | Healthy |
| ShieldScan AV | 17 Jul 09:45 | 3.1 s | 0.1% | Healthy |
Failover order per capability
Fallback defaults to NONE| Capability | Primary | Fallback | Policy |
|---|---|---|---|
| E-signature (standard) | SignFlow Gulf | DocuSecure MENA | Equally eligible · compatible semantics · approved 02 Jun 2026 |
| Qualified e-seal | SignFlow Gulf | NONE | Fail closed on expired/suspended eligibility |
| OCR / extraction | TextHarvest | LexiScan | Approved · both attempts recorded per job |
| AV scanning | ShieldScan | NONE | Fail closed — uploads quarantine & queue |
| PDF render | DocForge (internal) | NONE | Queued retry, no external fallback |
A route may fail over only to an equally eligible provider with compatible semantics (§10.2)
Job log — OCR-118422 · KYC extraction (Amina Noor · doc ref KYC-DOC-88●●●)
Open in maker-checker| Attempt | Provider | Started | Duration | Result | Error code | Evidence hash |
|---|---|---|---|---|---|---|
| 1 | TextHarvest OCR | 17 Jul 08:14:02 | 30.0 s (limit) | TIMEOUT_UPSTREAM | OCR_504_TIMEOUT | sha256:a91f…c22e |
| 2 | LexiScan OCR (fallback) | 17 Jul 08:14:35 | 6.2 s | Success — 14 fields, min confidence 0.91 | — | sha256:7b4d…09aa |
Normalized result stored once; raw payloads of both attempts preserved under retention policy
Sandbox / production separation
Separate endpoints, credentials & webhooks per environment| Adapter | Endpoint allowlist | Auth | Vault reference | Webhook signing | Activation |
|---|---|---|---|---|---|
| SignFlow Gulf | api.signflow.ae | OAuth2 client credentials | vault://esign/signflow/prod#v7 | HMAC · rotated 01 Jul | Active since 12 Feb 2026 |
| DocuSecure MENA | prod.docusecure.me | OAuth2 + mTLS | vault://esign/docusec/prod#v4 | HMAC · rotated 20 Jun | Active since 03 Nov 2025 |
| TextHarvest OCR | ocr.textharvest.com | Signed API key (approved) | vault://ocr/textharvest/prod#v11 | HMAC · rotated 05 Jul | Active since 09 Mar 2026 |
| LexiScan OCR | api.lexiscan.ai | OAuth2 client credentials | vault://ocr/lexiscan/prod#v2 | HMAC · rotated 30 Jun | Active (fallback) since 22 May 2026 |
| InkPress e-sign | — | — | — | — | Not activated — residency gate failed |
| Adapter | Endpoint allowlist | Auth | Vault reference | Last contract test | Result |
|---|---|---|---|---|---|
| SignFlow Gulf | sandbox.signflow.ae | OAuth2 client credentials | vault://esign/signflow/sbx#v3 | 14 Jul 2026 | Pass — schema v3.2 compatible |
| DocuSecure MENA | sbx.docusecure.me | OAuth2 + mTLS | vault://esign/docusec/sbx#v2 | 14 Jul 2026 | Pass |
| TextHarvest OCR | sbx.textharvest.com | Signed API key | vault://ocr/textharvest/sbx#v5 | 14 Jul 2026 | Pass with warning — deprecation notice for v2 endpoint (sunset 01 Oct 2026) |
| LexiScan OCR | sbx.lexiscan.ai | OAuth2 client credentials | vault://ocr/lexiscan/sbx#v1 | 14 Jul 2026 | Pass |
| InkPress e-sign | demo.inkpress.io | API key (evaluation) | vault://esign/inkpress/sbx#v1 | 08 Jul 2026 | Fail — evidence export lacks hash chain |
Data location, retention & exit terms
Privacy & residency| Provider | Data location | Retention at provider | Deletion terms | Subprocessors | Exit obligation | Verified |
|---|---|---|---|---|---|---|
| SignFlow Gulf | UAE North | 90 days post-completion | Certified purge ≤ 30 days | 2 (listed, approved) | Full evidence export in 5 days | 12 Jan 2026 |
| DocuSecure MENA | UAE North | 60 days | Certified purge ≤ 30 days | 1 (listed) | Evidence export in 10 days | 05 Feb 2026 |
| TextHarvest OCR | UAE North | Transient — 24h cache | Auto-purge on completion | 0 | n/a (no persistent data) | 20 Feb 2026 |
| LexiScan OCR | UAE Central | Transient — 72h cache | Auto-purge; attestation quarterly | 1 (listed) | n/a | Re-verification due 01 Aug 2026 |
| InkPress e-sign | EU West | 1 year | On request only | 4 (2 unlisted) | Not contractual | Failed residency & exit review |
Outage queue (manual / queued fallback)
No requests queued — all providers reachable. During the 03 Jun 2026 SignFlow outage, 17 envelopes queued and released automatically after 41 minutes; zero requests lost.
Related: E-signature & evidence package · Contract generation preview · Document classification & extraction · Extraction maker-checker · Provider health
Static render mockup — no live data. Source: ERP Modern Development Specification v2.0 (§7.11 INT-07, §10.2 provider-profile contract) · Covers: INT-07.