Contracts & e-signature

Documenso

The open-source DocuSign alternative — self-hostable document signing built so you can audit exactly how the signature was produced

documenso/documensoTypeScript14,268 as of 2026-08-05
By Jake Luo · Published Aug 5, 2026

Documenso is an AGPL-licensed, self-hostable e-signature platform: upload a PDF, place signature and text fields, send it to signers, and get a signed document with an audit trail. Its stated argument is about trust rather than price — every digital signature adds a third party to your most sensitive documents, and self-hosting lets you inspect and control that party. The repository is TypeScript, sits at 14,268 stars as of 5 August 2026, shipped v2.15.0 in July 2026, and is actively maintained by a company that also sells a hosted plan. For a founder the practical question is narrower than which tool: it is whether signing is a step in your funnel at all.

What Documenso is

Documenso does the DocuSign job: you upload a document, drop fields on it, invite signers by email, and each signer completes their part in the browser. The output is a signed PDF plus the record of who signed what and when. Under the hood it is a modern TypeScript stack — React Router, Hono, tRPC, Prisma on PostgreSQL, with PDF signing handled by dedicated libraries rather than a black box — and it runs on Node 22 or newer with a Postgres database. Docker images are published officially, and one-click deploys exist for Railway, Render, Koyeb and Elestio alongside Docker Compose, Kubernetes and manual installs.

The README frames the project as trust infrastructure rather than a cheaper seat: signing tools insert a provider into every signature, and the counter-proposal is that you should be able to read the code and host it yourself. Two governance details are worth knowing before you adopt it. The licence is AGPL-3.0, which carries network-copyleft obligations if you offer a modified version as a service — fine for internal use, worth a lawyer's five minutes if you plan to build a product on top. And the project has paused external pull requests except from a small set of invited contributors, with a public post explaining why: it remains open to read, audit, run and fork, but it is not open to arbitrary contribution. Open source and open contribution are separate things, and more projects are making that split explicit.

Where a signature sits in a founder's funnel

Signing is easy to file under admin, but for anything sold rather than self-served it is a conversion step — and usually the one with the least instrumentation on it.

  • The deal that stalls in the paperwork In founder-led sales, the gap between yes and signed is where enthusiasm evaporates. Sending the document within the hour of the call, pre-filled, is a bigger win than most pricing-page experiments.
  • Order forms and pilots Early enterprise deals rarely close on a checkout page. A simple order form that a buyer can sign moves a pilot forward without inventing a procurement process.
  • Everything that is not a customer Contractor agreements, NDAs before a partner conversation, advisor letters. Not growth, but the same tool, and the reason a signing account exists at all in most small companies.
  • What it does not fix If deals die before the document, the problem is upstream — how to do sales as a founder is the more useful reading. And if your product is self-serve, adding a signature step is a cost, not a feature.

Before you self-host a signing service

Signing has a property most self-hosted tools do not: the evidence it produces has to survive longer than the server that produced it. That changes the checklist.

Four things to settle first
  • Legal validity is jurisdictional, not a feature checkbox. Electronic signatures are broadly enforceable in the US and EU, but the specific tiers and requirements differ by country and by document type. Read your own jurisdiction's rules, and take advice for anything high-value.
  • The audit trail is only as durable as your backups. A hosted vendor's retention is part of what you buy. Self-hosted, a lost database is a lost record of who agreed to what.
  • AGPL-3.0 is fine to run and worth reading before you build on it. Internal use is uncomplicated; distributing a modified version as a service is where the obligations start.
  • A hosted plan exists. Choosing it is not a defeat — the maintainers sell one precisely because most teams should not operate this themselves.

A first-party note on audit trails

We build AgentCeres — the AI Growth Officer at agentceres.com — and we arrived at the same conclusion this project is built on, from a different direction. Our agents cannot publish a post, send an email, or spend an advertising budget without a human approving that specific action first, and every approval writes a row: what was proposed, who approved it, when, and what the result was. We did not build that because approvals are pleasant. We built it because the question you need answered weeks later is never what did the system do — it is who agreed to this, and can I prove it.

That is exactly what a signature is: a claim plus the evidence that makes the claim checkable. Which is why the interesting part of an e-signature tool is not the drawing pad, it is the record behind it, and why being able to read the code that produced that record is a real argument rather than a marketing one. The same honesty applies to the operating cost, though. We run a fleet of self-hosted per-customer containers, and memory alone is roughly 95% of that bill — the licence is always the cheapest part of self-hosting. If you are choosing tools around a sales conversation rather than a signature, Papermark covers the document-sharing half of the same workflow.

FAQ

Is Documenso free?
The self-hosted version is free under AGPL-3.0: no seat count, no licence key, and the full signing flow included. The company behind it also sells a hosted plan and an enterprise tier, which is where support and managed infrastructure live. Your real costs when self-hosting are a small server, a PostgreSQL database, email delivery, and the attention that document retention deserves.
Are signatures from a self-hosted instance legally valid?
Electronic signatures are broadly recognised in the United States and the European Union, and a self-hosted tool is not inherently weaker than a vendor's — what matters is the quality of the evidence: identity of the signer, integrity of the document, and a durable audit record. Requirements do vary by jurisdiction and by document type, and some categories demand a higher assurance tier than a standard e-signature. For routine commercial agreements it is generally fine; for anything high-value or regulated, take advice rather than a README's word.
Can I contribute to it?
Only in a limited sense right now. The project has paused external pull requests apart from a small group of invited contributors, and points people toward detailed issues instead. The code remains readable, auditable, runnable and forkable — but if you were counting on upstreaming a patch you need, plan for maintaining a fork instead.
How does it compare to DocuSign?
For the core loop — send a document, collect signatures, keep an audit trail — it is a genuine substitute, and self-hosting removes both the per-seat cost and the third party. DocuSign brings a large integration catalogue, established enterprise compliance programmes, and the fact that your counterparty has already heard of it, which matters more in procurement than founders expect. The honest split is that Documenso suits teams that care about control and cost, while a big vendor suits teams whose buyers will ask who runs the signing infrastructure.
Related projects
PapermarkOpen-source DocSend alternative for sharing documents and data rooms with built-in analyticsPolarOpen-source, merchant-of-record billing for developers — usage-based pricing, subscriptions, and worldwide tax handled for youTwentyAn open-source CRM — a self-hostable alternative to Salesforce and HubSpotChatwootOpen-source customer support platform — live chat, a shared inbox, and an omnichannel help desk

You built it. Now grow it.

AgentCeres is a managed AI marketing team — specialists draft the SEO, social, and outreach that fill your links, you approve what ships. 14-day free trial, from $39/month.

Start free trialMore projects