What Quilli doesn’t do yet.

This page exists so you find the gaps here rather than in week two. It is dated and updated like release notes. Where a competitor is ahead, that is on this page too.

Last updated 2026-08-21.

• You cannot sign on your own domain.

  Sending runs on a quilli.io address. Bringing your own domain is not something you can switch on yourself today.

  2026-08-21

• The seal is ours, not yours.

  One platform key signs every document on the service. It is not a key issued to your company, and we do not describe it as one.

  2026-08-21

• The hash printed on the certificate covers the pre-certificate document.

  Use the verify page instead — it checks the file you actually received. The printed number is a historical record of what was signed at the moment of sealing.

  2026-08-21

• Verification needs us to be online.

  The verify page checks your file against our records. It is not an offline proof, and it will not work if this service is gone.

  2026-08-21

• The audit trail is append-only, not immutable.

  No logged-in user can edit it. That is a different and smaller claim than permanence, and we will not make the bigger one.

  2026-08-21

• No third-party audit or certification.

  No SOC 2, no HIPAA BAA, no GDPR certification, no eIDAS conformity assessment, no published penetration test. If you are required to hold any of those, Quilli does not meet that requirement today.

  2026-08-21

• Where DocuSign is ahead.

  Notary, advanced recipient identity verification, and a large integration catalogue. If any of those decide it for you, they are the better buy and we would rather say so here.

  2026-08-21