Your private key never leaves the token
ETA Signer asks the token to create a signature. It never reads, copies or exports the key.
Your PIN is never stored
You type it into the macOS system dialog or, for PKCS#11 tokens, it goes straight to the token. Once per batch of up to 10 documents. ETA Signer doesn’t store or send it.
Only the official portal
ETA Signer accepts signing requests only from https://invoicing.eta.gov.eg, and only on your own Mac. Every other website is refused.
You see what you sign
A native Mac window summarises every document before you sign. Cancel is the default, and the Sign button waits a moment so it can’t be clicked by accident.
Signing happens on your Mac
Invoices, PINs and keys are never sent to us. The app has no analytics and no telemetry.
Signed and notarized
Signed by the developer and notarized by Apple, so macOS checks it hasn’t been tampered with.
What the app sends to our server
| What | When | Why |
|---|---|---|
| Free signatures: your certificate (with the name and tax number in it) and a fingerprint of the document, not the document | Each free signature | To count your free signatures |
| Your licence and one extra signature from your token | About every few weeks while you sign | To confirm the licence is still valid |
| A version check (reveals your internet address, like any request) | Once a day | To tell you about updates |
Never sent: invoices, PINs or private keys.
Where it runs
Our server runs on Cloudflare infrastructure, which may store data outside Egypt.
Report a security issue
Found a vulnerability? Please email us first and give us time to fix it before telling anyone else: etasigner@youssefmaged.com