How tenancy works
SignatureAPI does not provide scoped API keys, separate projects, or tenant isolation at the API level. Your application uses a single API key and manages tenancy on your side. This means:- One SignatureAPI account serves all your tenants.
- Your application decides which tenant each envelope belongs to.
- Your application controls which tenants can see which envelopes and deliverables.
- Your end users do not need SignatureAPI accounts. They interact with your application, which calls the SignatureAPI on their behalf.
If scoped API keys or built-in tenant isolation would be valuable for your use case, let us know at support@signatureapi.com. We are evaluating this feature based on demand.
Use metadata to identify tenants
Attach your tenant identifier to each envelope using metadata. This lets you correlate envelopes with tenants in webhook handlers and when listing envelopes.envelope_metadata is included in every payload. Use it to route the event to the correct tenant in your system:
Use topics to filter webhooks per tenant
If different tenants require different webhook handling, use topics to tag envelopes and configure separate webhook endpoints for each topic.Per-tenant branding
Customize the signing experience for each tenant using the branding property on each envelope. Set a different logo, accent color, and email footer per tenant.Per-tenant senders
Each tenant can have their own sender email address. Create and verify a sender for each tenant, then specify it on the envelope.Architecture overview
A typical multi-tenant integration looks like this:- Tenant creates a document in your application.
- Your server creates an envelope in SignatureAPI with the tenant’s metadata, branding, and sender.
- SignatureAPI handles the signing ceremony with the tenant’s recipients.
- Webhook events arrive at your server with the tenant metadata, so you can route them to the correct tenant.
- Your server downloads the deliverable and stores it in the tenant’s storage.