Built to be trusted with the deal.
Proposals carry prices, terms and signatures. Here's how PitchMagpie looks after them, and since it's open source, you can check every word.
A private link per person
Each recipient gets their own link, so every view and signature is tied to the address it was sent to.
Access codes
A six-digit code before the proposal opens. Five wrong tries lock the link for 15 minutes; a new code lifts it.
Fingerprinted signatures
A SHA-256 fingerprint of exactly what each signer saw, their choices and their answers.
No signing stale versions
If the proposal changes after the client opened it, signing is refused until they've seen the new version.
Passwordless sign-in
Sign in with an emailed link or code, add passkeys, and sign out everywhere at once.
Abuse limits
What anyone with a client link can do is rate-limited per hour, per link and per IP address.
Roles
Owners, editors and approvers, with approval required before sending if you want it.
Signed webhooks
Webhook deliveries are signed with a secret you can rotate, and must go to HTTPS endpoints.
Your data, your call
Export a workspace or your own data at any time, and delete your account or workspace.
Deleting data
Anyone can download what's held about them and delete their account. Workspaces only they belong to are deleted too, and their name and address are removed from what stays in shared ones. Deleting a client deletes their proposals, except signed ones, which are kept without the client, because a signed agreement is a record both sides may need.
Sending limits
To protect email deliverability for everyone, a workspace can email proposals to 200 people a day, and 20 a day in its first 14 days.
Security questions
Who can open a proposal link?
Each recipient gets a private link of their own, so every view and signature is tied to the address it was sent to. For sensitive work you can also ask for a six-digit access code that you share some other way than email.
What stops someone signing an out-of-date version?
The client's page carries a version of the proposal. If your team changes it after the page loaded, signing is refused and the client is shown the new version to look at again.
Can I export or delete our data?
Workspace owners can download everything as a zip (every record as JSON, signed PDFs, images and signatures) and delete the workspace. Anyone can download what's held about them and delete their own account.
Your next proposal, read properly.
Build it from what you already have, send a link, and see what happens next.