Private links
Owner and signer links use high-entropy tokens.
Security
Private by default, public only where it helps discovery.
Cosign keeps public marketing pages indexable and keeps request pages, dashboards, previews, downloads, audit records, and APIs out of search indexes.
No indexed requests
Private request, dashboard, preview, download, audit, and API routes are noindex or blocked.
Optional protection
Senders can add passwords and link expiry for sensitive requests.
Audit trail
Request events capture opens, downloads, signatures, declines, reminders, and completion receipts.