For Teams · companies and schools
PDFs your people can sign, without a new account to manage.
Keepsign has no account and no server. Deploy it with Apple Business Manager or Apple School Manager and your MDM, lock the settings that matter, and documents stay on the devices you manage unless people send them.
Keepsign PDF for Teams
US$49.99per licence
One-time, through Apple’s volume purchasing. Coming after the main app.
- Everything in Keepsign Pro, built in
- No in-app purchase for staff or students
- Managed App Configuration
- Save-error feedback to your MDM
- Schools buying 20 or more: US$24.99 (50% off)
Volume purchasing can’t buy in-app purchases.
Apple’s Apps and Books lets organizations buy paid apps in bulk, but not in-app purchases, and Managed Apple Accounts can’t buy them either. So the regular Keepsign would reach your staff with only three Pro tries. Keepsign PDF for Teams is the same app with Pro built in.
Pilot with the free app
The regular Keepsign is free and accepts the same managed configuration, so you can test your setup before buying licences.
Per device or per user
Assign licences the usual way. Plan on one licence per device to be safe: on Mac, Apple assigns app licences to devices.
Half price for education
Schools buying 20 or more through Apple School Manager pay 50% less. Students on their own devices can use the free app.
Every key is optional. Every key you set is locked.
Send these keys in your MDM’s app configuration (com.apple.configuration.managed). On Mac you can also use a configuration profile for the app’s preference domain. Keepsign’s Settings shows a locked option dimmed, with “Managed by your organization”. A key you leave out stays the user’s choice.
| Key | Type | What it does |
|---|---|---|
AllowAppleIntelligence | Boolean | false turns off the on-device model. Tools that work with rules keep working. Apple Writing Tools go off too. |
AllowWritingTools | Boolean | false keeps Apple Writing Tools out of Keepsign’s text fields. |
DisabledAIFeatures | Array of strings | Turns off single tools: preguntar (Ask), resumir (Summary), obligaciones (Dates), facturas (Invoices), contratos (Compare contracts), privacidad (Privacy check), facil (Explain simply), estudio (Study), textoAlternativo (alt text), escritura (Writing help). |
AllowSignatureSync | Boolean | false keeps saved signatures on the device (no iCloud Keychain). Digital ID certificates are never synced. |
AllowICloudDrive | Boolean | false turns off the Keepsign folder in iCloud Drive; new PDFs stay on the device. |
AllowSpotlight | Boolean | false removes documents from Spotlight and stops indexing them. |
AllowOnlineChecks | Boolean | false hides “Check online” (certificate revocation): Keepsign then makes no network requests for signatures. |
RequireCleanReceipt | Boolean | true: a change that would make a signature not valid can’t be saved, even with “Save anyway”. |
ReceiptFormat | text or json | Format of exported receipts. JSON includes the verdict, signatures and the SHA-256 of every version. |
AllowDigitalIDFiles | Boolean | false stops importing .p12 or .pfx files (smart cards still work). |
KeepRecoveryJournal | Boolean | false turns off recovery after an unexpected quit. On by default. |
RecoveryJournalDays | Integer, 1–365 | How long unrecovered changes are kept on the device (default 30). |
OrganizationName | String | Shown in Settings as “Managed by …”. |
SupportContact | String | Where people get help, shown in Settings. |
ReportSaveErrors | Boolean | false stops the feedback below. On by default on managed devices. |
Values of the wrong type, and keys Keepsign doesn’t know, are ignored and listed in the feedback so you can spot a typo.
A law firm’s setup.
<dict>
<key>OrganizationName</key><string>Acme Legal</string>
<key>AllowAppleIntelligence</key><true/>
<key>AllowWritingTools</key><false/>
<key>AllowSignatureSync</key><false/>
<key>AllowICloudDrive</key><false/>
<key>RequireCleanReceipt</key><true/>
<key>ReceiptFormat</key><string>json</string>
</dict>Counts, never content.
On managed devices Keepsign writes com.apple.feedback.managed: SaveFailures, SaveFailuresByReason, LastSaveFailureReason, LastSaveFailureDate, RecoveriesOffered, RecoveriesCompleted, InvalidConfigurationKeys, UnknownConfigurationKeys and AppVersion.
Reasons are codes such as receipt-losses, signature-would-become-invalid, file-changed-on-disk or write-failed. The feedback never includes file names or anything from a document.
Nothing is lost
Every change is kept in an encrypted recovery journal inside the app (protected by Data Protection on iPhone and iPad, and excluded from backups). If Keepsign quits unexpectedly, it offers to recover the changes next time the PDF opens. If the file changed in the meantime, the changes go to a separate copy. Recovered changes are checked like any save.
Questions from IT
Does Keepsign send documents or usage data anywhere?
No. There’s no account, no analytics and no server. The only network requests are ones a person starts, like Check online for certificate revocation, which you can disable. Details on the privacy page.
When is Keepsign PDF for Teams available?
After the main app is out. Write to [email protected] and we’ll tell you when it’s in Apple Business Manager and Apple School Manager.
Can we get a custom version?
If your organization needs something specific, write to us. Apple also allows apps distributed privately to one organization.
Get one email when Keepsign is out
One message on launch day, then we delete your address. No newsletter. How we handle it.