Edition · Enterprise

NextPDF Enterprise

For regulated document workflows. Enterprise adds high-assurance signing, archival output, e-invoicing, priority support, and agreement-specific SLA terms to the same in-process engine.

Buy Enterprise Talk to sales

Capabilities

Controls for regulated document workflows

Long-term validation

PAdES B-LT/B-LTA workflows with DSS/VRI validation material and archival document timestamps.

HSM and PKCS#11

Signing through configured HSM and PKCS#11 modules. Key residency follows the module and key attributes.

PDF/A-4 archival

Output targeting PDF/A-4 with OutputIntent, ICC data, identification metadata, and embedded fonts.

E-invoicing

ZUGFeRD and Factur-X hybrid invoices with embedded EN 16931 XML in a PDF/A-3 container.

Batch validation

Batch checks against named archival and signature profiles.

Forensics

Document forensic analysis, tamper detection, and revision history.

FIPS algorithm support

FIPS 140-3 cryptographic algorithm support. Validated-module status follows the module in your deployment.

E-filing and acceleration

Electronic court and government filing, plus an optional GPU acceleration sidecar.

A closer look

Three high-assurance additions

Signing pathApplication → PKCS#11 → HSM

Key residency · module and key attributes

Hardware keys

Route signing through your cryptographic module

Enterprise routes signing through configured HSM and PKCS#11 modules. The module performs the signing operation. Key residency follows the module and key attributes you configure.

Your application receives the resulting signature for the PAdES workflow.

Long-term validation

Carry validation material forward

Enterprise adds PAdES B-LT validation material and PAdES B-LTA archival document timestamps.

PDF/A-4 output targets long-term document preservation as a separate archival profile.

B-BBaselineCore
A CMS SignedData container covering the document bytes and carrying the signing certificate.
Proves Signed-byte integrity associated with the included signing certificate.
B-TTimestampedPro
An RFC 3161 time-stamp token over the signature.
Proves A TSA-attested time when the signature existed.
B-LTLong-termEnterprise
Embedded validation material—the DSS, with certificates and revocation data.
Proves Portable validation material for later signature checks.
B-LTALong-term archivalEnterprise
Renewable archival document timestamps over the embedded validation material.
Proves Renewable integrity evidence over the embedded validation material.

The PAdES baseline levels (ETSI EN 319 142-1); each level builds on the one before.

PDF/A-3

Human-readable PDF

Embedded EN 16931 XML

Container model · ZUGFeRD and Factur-X

E-invoicing

One container for people and systems

ZUGFeRD and Factur-X hybrid invoices place EN 16931 XML inside a PDF/A-3 container.

The PDF carries the readable invoice. The structured XML carries data for recipient systems.

A recipient’s validator decides acceptance. See the e-invoicing model →

Standards

Named capabilities with explicit boundaries

Signing

PAdES B-LT/B-LTA workflows with embedded validation material and archival document timestamps.

Archival

Output targeting PDF/A-4 through OutputIntent, ICC data, identification metadata, and embedded fonts.

E-invoicing

ZUGFeRD and Factur-X hybrid invoices with embedded EN 16931 XML in a PDF/A-3 container.

Cryptography

FIPS 140-3 algorithm support. Validated-module status comes from the cryptographic module in your deployment.

PATEON’s ISMS is independently certified to ISO/IEC 27001:2022.

The certification applies to the defined ISMS scope.

External validators determine formal product conformance for each output.

Whether a signature is legally qualified, or a document is accepted by a specific authority, depends on your certificates, trust services, identity controls, and process. See the signing levels →

Security and assurance

Assurance status

Available now

ISO/IEC 27001:2022-certified ISMS for PATEON Network Technology
Data Processing Agreement and current sub-processor list
Apache-2.0 NextPDF Core source and test suite
Coordinated vulnerability disclosure at [email protected]

Under NDA

Penetration-test summary and remediation status
Security architecture review, threat model, and fail-closed design notes

The Trust Center links the available evidence and explains access to under-NDA material.

Support and SLA

Agreement-specific support

Enterprise includes priority support, a named technical contact, and severity-based triage. Your executed agreement and Schedule set response targets, escalation, remedies, and maintenance terms. Active maintenance keeps the conformance-related warranty current.

Procurement

A four-step path to production

Evaluate. Use the free 14-day watermarked trial with Enterprise feature access.
Scope. Define your signing, standards, volume, and delivery requirements.
Review. Give your security team the under-NDA artifacts, questionnaire support, and architecture review.
Contract. Choose auditable signed source or hardened ionCube delivery. Your Schedule records the licence, SLA, and commercial terms. Our Merchant of Record, the seller of record for the order, handles purchase orders and invoicing.

The pricing page summarizes the licence terms. The EULA and your Schedule are controlling.

Buy Enterprise

Choose annual ionCube or signed-source delivery. Contact sales for volume, signing, or workflow terms.

US$3,490/ yrUS$3,990/ yrUS$3,490 / yr

ionCubeSigned source

Buy Enterprise Talk to sales