Dropbox Sign and HelloSign alternative: free, encrypted e-signature

HelloSign was one of the cleanest e-signature products ever built, and it is still worth searching for under that name: it became Dropbox Sign after the acquisition, and a lot of people never updated the bookmark. If you landed here looking for either name, the question is usually the same. The free tier stopped being enough, and you would rather not add another per-seat bill for a handful of documents a month. DocSign is a free, encrypted alternative, and it comes with your Cryptool account.

What Dropbox Sign does well

Credit where it is due. Dropbox Sign has an unusually good signing experience, a clear API that a lot of teams have built on, and tight integration with Dropbox storage. The templates are easy to reason about, and the mobile signing flow is better than most. If you already live in Dropbox and you need a signature product that gets out of the way, it is a sensible choice and nothing here argues otherwise.

Where it stops fitting

Two things tend to push crypto teams off it. The first is the pricing shape: it is per seat, per month, and a token deal pulls in founders, counsel, and an operations person who each need to send, not just sign. The second is where the documents end up. A signed SAFT sits in a vendor account, readable by that vendor, which is a different risk posture from the one you apply to everything else in a deal.

What DocSign does differently

Price. Free with a Cryptool account. There is no per-envelope charge and no per-seat charge, so adding your lawyer to the workspace does not change the bill.

Client-side encryption. A document can be encrypted in your browser before it is uploaded. The key is wrapped to your account key and the server never holds the plaintext. That is a real constraint rather than a slogan, and it has a consequence worth knowing up front: an encrypted document cannot be shared with your workspace members, because you alone hold the key.

Sovereign mode. For the documents you do not want on anyone's server at all, the PDF never leaves your device. Only a fingerprint is stored, and the signed copy is emailed rather than retained. No mainstream e-signature vendor offers this, because their product is the storage.

A tamper-evident audit trail. Every event is written into a hash chain, each entry linking to the one before it. Alter or insert a row after the fact and verification breaks for everything after it. That is tamper-evident, which is the accurate word, and it is what an audit trail is actually for.

Your own sending identity. Signature requests go out through your workspace's connected Gmail or Outlook mailbox, so they arrive from your address rather than a vendor's, which matters when the recipient is an investor deciding whether the email is real.

Choosing between them

If you need a mature signing API, deep Dropbox integration, or a vendor with audited compliance certifications to point your counterparty at, Dropbox Sign is the stronger answer and you should use it. If you are a small crypto team signing deal paperwork, you want the documents encrypted so the platform cannot read them, and you would rather not pay per seat to do it, DocSign covers that case and costs nothing.

Common questions

Is HelloSign the same thing as Dropbox Sign?

Yes. HelloSign was renamed Dropbox Sign after Dropbox acquired it. Old links and older articles still use the HelloSign name, and both refer to the same product.

Is DocSign really free?

Yes, with a Cryptool account. There is no per-envelope fee and no per-seat fee. It is one of the apps included with the account rather than a separate subscription.

What does client-side encryption actually mean here?

The document is encrypted in your browser before it is uploaded, and the key is wrapped to your account key, so the server stores ciphertext it cannot read. The trade-off is that an encrypted document cannot be shared with workspace members, because the key stays with the uploader.

Can I use DocSign for legally binding agreements?

DocSign produces a signed PDF with a timestamped, tamper-evident audit trail and an appended certificate page. Whether a given signature satisfies a specific legal regime depends on your jurisdiction and the document, so take your counsel's view on that rather than ours. We do not claim conformance with any particular e-signature standard.

How do I try it?

Open DocSign with your Cryptool account, upload a document, place the fields, and send it. Creating an account takes under a minute if you do not have one.