How CyberSygn Data Storage Works: Where Your Contracts Live

Where does a signed contract actually go once you hit send, and how long does it stay there? The honest answer is thirty days, and knowing that changes what you do next.

You just signed a contract worth real money, and now it lives somewhere specific, but where exactly, and for how long? Most signing tools wave at "the cloud," which is not a real answer to a question this important. CyberSygn data storage runs on Cloudflare Workers and Cloudflare KV, encrypted at rest, and every record carries a thirty-day timer counted from the last time it was written. That timer is the single most important fact about where your contracts live, because it makes the download step yours to take rather than something you can put off forever. In this post you will see precisely how CyberSygn data storage works, what the thirty days cover, what outlives them, and what to do the day a contract completes.

Where Your Contract Lives While Someone Is Signing It

Let me walk you through the first stage, which covers the window after you send a contract but before your signer has finished their part of it. During this window the unsigned PDF lives in **Cloudflare KV**, a fast key-value store positioned at the edge and physically close to your signer no matter where they are. This is Cloudflare edge storage doing its core job: keeping the document near the person who needs it, rather than across an ocean. So when your signer in Berlin opens the link, the file loads from a nearby server instead of a distant one, and the signing feels quick. KV holds far more than the document itself, because it also tracks the signer's progress, including half-filled fields, the magic-link token, and the active session. That means if they step away and come back later, nothing is lost. Here is a smart touch worth knowing. **Each unsigned file in KV carries a thirty-day timer**, called a TTL, or time to live, which means the system cleans up after itself once that window expires. If a signer never finishes, the leftover data clears on its own after thirty days, so there is no clutter and no stale files piling up in your account. This is CyberSygn data storage handling the housekeeping so you never have to, and it answers the first question about where contracts stored mid-signature actually reside.

Where Signed Contracts Go When the Signing Finishes

Once the signing is done you reach the moment that truly counts, and this is the part where CyberSygn probably differs from what you assumed. The signed PDF and its audit certificate are written back into **Cloudflare KV**, the same encrypted store that held the document during signing, in a namespace reserved for PDF bytes. There is no second, permanent archive underneath it. **Both files carry the same thirty-day timer** as the rest of the record, counted from the last write, so a contract that completes today stays retrievable for roughly thirty days and then it is gone. CyberSygn does not keep a copy after that, and there is no button that brings it back. So the practical rule is short enough to remember: **download the signed PDF and the audit certificate when the deal closes.** Your dashboard links both the moment the last signer finishes, and the completion email carries the same two links. Drop the pair into the folder where you already keep that client's paperwork and the thirty-day window stops being something you have to think about. One detail about those links, since it matters for how you share them. The download URL carries the signer's own per-document token rather than a freshly minted short-lived URL, so treat it exactly the way you treat the signing link: anyone holding it can use it for as long as the record lives.

What Outlives the Thirty Days

Something does survive the timer, and it happens to be the piece that matters in a dispute. When a document completes, CyberSygn writes a **verification record keyed by the SHA-256 fingerprint** of the document that was signed, and that record is stored with no expiry at all. It holds the fingerprint, the number of signers, and the created and completed timestamps. It holds no name, no email, no title, and none of the document's content, which is exactly why it is safe to keep forever. That fingerprint is printed on your audit certificate. Years later you can paste it into the checker at /verify/ and get back confirmation that a document with that fingerprint reached completion on CyberSygn, along with the signer count and the timestamps. Because the fingerprint is derived from the file itself, a match also tells you the copy in your hands is the one that was signed. So here is the honest division of labour: **CyberSygn keeps the proof, you keep the paper.** The fingerprint record is tiny and permanent because it is cheap to hold and carries no personal data. The PDF is yours to store, wherever you already trust your contracts to live.

What CyberSygn Does Not Do, Stated Plainly

Here is the part most storage pages leave out, so let me put it in writing. There is **no long-term object archive** behind CyberSygn today. A daily export job exists in the codebase, but no storage bucket is attached to it, so it has never run and nothing is being copied anywhere. There is **no separate CyberSygn archive of your files** beyond whatever Cloudflare does internally to keep KV itself available, and there is no recovery path that reaches back past the thirty-day expiry. If a document is deleted, or its timer runs out, neither you nor we can bring it back. An earlier version of this page said your signed PDFs moved to permanent object storage and were mirrored across data centers for as long as your account stayed active. None of that was true, and this rewrite exists to correct it rather than to soften it. Why publish the gap instead of glossing over it? Because the alternative is letting you plan around a safety net that is not there and discovering the truth at the worst possible moment. The design is deliberate for a solo-operated product: hold less, promise less, and be exact about the window. Your side of it is one small habit, downloading the signed PDF and its audit certificate when a deal closes, and in exchange you get storage claims you can actually check.