DEV3 Inkpact – Proposals & E-Signature SaaS Laravel Script with Hash-Chained Audit Trail, Deposits, PDF Verify

Inkpact is a proposals, contracts and e-signature platform you host yourself, built by DEV3 Technologies on Laravel 12 and Filament 4. Each customer is a workspace (an agency, a consultancy, a studio) that builds documents from templates, sends them to clients, collects signatures in a set order and takes a deposit on acceptance. You, the operator, sell plans to workspaces from a separate panel.

What it does

• Build from templates. Proposals, contracts, quotes and NDAs from reusable templates and content blocks, a section editor, variables, workspace branding and a preview as the client sees it.
• Pricing tables that clients can adjust. Optional items, editable quantities, discounts and tax per line, tax-exclusive or tax-inclusive documents, with a live total on the signer page. Recurring items are shown as "then X per month" and are not collected by the product.
• Sign in order. Signers in groups (one after another, or in parallel), client, countersigner, witness and approver roles, optional email one-time codes, typed, drawn or uploaded signatures, decline with a reason and a mobile-first signing page.
• Existing contracts. Upload a PDF, place signature, initials, date, text and checkbox fields per signer on the page preview, and send it.
• Evidence you can check. Every action is written to an append-only audit trail chained with SHA-256. The completed document is sealed once into a PDF with a certificate of completion, and anyone can drop the PDF on the public verify page to see whether it matches a completed document.
• Versions and freezing. A sent version is frozen and hashed; editing after sending creates a new version and invalidates earlier signatures, so nobody signs text that later changed.
• Deposits and payouts. A deposit rule per document, paid on a simulated checkout page, split between a platform fee and the workspace wallet, with refunds for late or duplicate payments and weekly payout statements the operator approves.
• Reminders and expiry. Automatic reminders, a final warning, expiry on read, duplicate with one click.
• Dashboard. Pipeline board, win rate, time-to-sign and the Signature Trail chart, plus reports for decline reasons and optional-item take-up.
• API and webhooks. REST API with scoped, hashed keys and an OpenAPI document, signed webhooks with retries, and an operator panel with workspaces, plans, invoices, deposits, payouts, pending refunds, abuse reports and audited view-only support sessions.

Quality checks

The release passed seven gates on the final code: Larastan level 6 with 0 errors, 244 Pest tests, a build well inside the page budget, migrations and seeds on MySQL 8 and SQLite, a headless smoke test of 96 pages with six race groups run on MySQL (two signers finishing at once, a void during signing, duplicate and late deposit payments, a parallel OTP attack and more), the installer driven from the zip, and a secret scan. The home page scores 99 for performance and 100 for accessibility on mobile.

What you should know before buying

• Simple electronic signatures only. Inkpact records an evidence trail (email delivery, optional email code, IP and browser, hash chain, sealed PDF). It is not a qualified signature provider, embeds no X.509 or PAdES signature in the PDF and does not verify identity. Check what your jurisdiction requires.
• Existing contracts must be PDFs. Save Word files as PDF first; PDFs with compressed object streams must be re-saved.
• You are the merchant of record for client deposits. The gateway is simulated by default; Stripe, Razorpay and PayPal drivers are present and need your own keys. Workspaces cannot connect their own payment account, and payouts are weekly requests you approve and mark paid.
• Email is simulated by default. Messages are written to a table; set one environment value and configure SMTP to send real mail. Run the scheduler every minute.
• Signer links are credentials: whoever has the link can act as that signer, plus the code if one is required.
• Plans are billed by the operator through the platform gateway; real gateways leave the renewal invoice open with a pay link.
• Web only: there are no mobile apps. Node.js is not needed (assets are prebuilt).

Included

Source code, the web installer, a buyer guide, demo data with fictional brands and people (10 workspaces, 40 templates, 900 contacts and 2,400 documents in every status), a cron entry for the scheduler, and six months of support. Photos are listed with their licence in the source tree.