Initial commit — 2026-07-15

2026-07-15 17:32:00 -04:00
commit 748920470f
10 changed files with 4092 additions and 0 deletions
@@ -0,0 +1,171 @@
+# Documenso vs DocuSeal: Self-Hosted Document Signing Comparison
+
+**Context:** Debt recovery web portal needing digital signatures on service agreements, disbursement authorizations, and internal approvals. Requires REST API, webhooks, multi-party signing, and Docker-based self-hosting on Debian.
+
+---
+
+## 1. Community & Project Health
+
+| Metric | Documenso | DocuSeal |
+|---|---|---|
+| **GitHub Stars** | 13,664 | **17,469** |
+| **GitHub Forks** | 2,868 | 1,694 |
+| **Contributors** | **~181** | ~6 |
+| **Open Issues** | 211 | 121 |
+| **Total Releases** | 52 | **160** |
+| **Latest Release** | v2.14.0 (Jun 28, 2026) | v3.1.3 (Jul 6, 2026) |
+| **Docker Pulls** | ~505K | **~1.74M** |
+| **Docker Image Size** | ~690 MB | **~227 MB** |
+| **License** | AGPL-3.0 | AGPL-3.0 + Additional Terms |
+| **Language** | TypeScript (Next.js) | Ruby (Rails) |
+
+**Winner: DocuSeal** has more stars, more releases, and far more Docker pulls (3.4×). However, Documenso has many more contributors (181 vs 6), suggesting a larger community contribution base.
+
+---
+
+## 2. Self-Hosting (Docker on Debian)
+
+| Aspect | Documenso | DocuSeal |
+|---|---|---|
+| **Docker Command** | Multi-step — requires external DB | Single command: `docker run -p 3000:3000 -v.:/data docuseal/docuseal` |
+| **Database** | PostgreSQL 14+ only (mandatory) | **SQLite by default** + PostgreSQL/MySQL optional |
+| **Image Size** | ~690 MB (Node.js + dependencies) | **~227 MB** (Ruby + Rails — leaner) |
+| **Docker Compose** | Not in main repo (404) — must construct from docs | **Full docker-compose.yml** in repo with Caddy TLS, PostgreSQL |
+| **Prerequisites** | PostgreSQL, SMTP, signing certificate (required) | None beyond Docker (SQLite built-in) |
+| **Storage** | S3-compatible recommended for prod | Disk, S3, Google Storage, or Azure Cloud |
+| **Signing Certificate** | Must generate manually — signing fails without one | Handled automatically |
+| **Updates** | Manual — pull new image, run migrations | Auto DB migration on boot |
+| **Arch Support** | amd64 + arm64 | amd64 + arm64 |
+| **Setup Time Estimate** | 30-60 min | 5-15 min |
+
+**Winner: DocuSeal** — dramatically simpler to deploy. Single `docker run` with SQLite works out of the box. Smaller image (⅓ the size). No mandatory signing certificate setup. Ideal for small-to-mid scale deployments.
+
+---
+
+## 3. API Quality
+
+| Aspect | Documenso | DocuSeal |
+|---|---|---|
+| **API Base** | `/api/v2` — REST | REST API |
+| **Auth** | Bearer token in `Authorization` header | `X-Auth-Token` header |
+| **API Reference** | OpenAPI reference at openapi.documenso.com | OpenAPI spec + Postman collection |
+| **Webhooks** | ✅ Document events — documented | ✅ Document events with auto-retry (48h, exponential backoff) |
+| **SDKs** | None official (API docs only) | **React, Vue, Angular, vanilla JS** embedding SDKs |
+| **API Endpoints** | Documents, Recipients, Fields, Templates, Teams | Submissions, Templates, Documents, Authors |
+| **API Versioning** | v2 (current) | Rolling releases |
+| **API For Automation** | Fully featured REST | Fully featured REST |
+
+**Winner: DocuSeal** — has official embedding SDKs for React, Vue, Angular, and JavaScript, which directly addresses the "embed signing in a portal" requirement. Also has more mature webhook retry logic.
+
+---
+
+## 4. Features
+
+| Feature | Documenso | DocuSeal |
+|---|---|---|
+| **Multi-Party Signing** | ✅ (Recipients with roles) | ✅ (Multiple submitters per document) |
+| **Templates** | ✅ | ✅ (PDF/DOCX with field tags + HTML API) |
+| **Audit Trail** | ✅ (X.509 signed audit logs) | ✅ |
+| **White-Label / Branding** | ✅ (Paid tier) | ✅ (Pro tier) |
+| **WYSIWYG Form Builder** | ✅ | ✅ (12 field types incl. Signature, Date, File, Checkbox) |
+| **Bulk Send** | ❌ (not mentioned) | ✅ (CSV/XLSX spreadsheet import) |
+| **Conditional Fields** | ❌ (not mentioned) | ✅ (Pro feature) |
+| **Formulas** | ❌ (not mentioned) | ✅ (Pro feature) |
+| **SMS Verification** | ❌ | ✅ (Pro) |
+| **SSO/SAML** | ✅ (Enterprise) | ✅ (Pro) |
+| **Signed PDF Download via API** | ✅ (v2.14.0) | ✅ |
+| **Embedded Signing** | ✅ (white-label paid) | ✅ (React, Vue, Angular, JS SDKs) |
+| **API Document Count** | Unlimited (self-hosted) | $0.20/doc via API (Pro plan) |
+| **Multi-Language** | ✅ (i18n with Lingui) | ✅ (7 UI languages, 14 signing languages) |
+
+**Winner: DocuSeal** — more features overall (conditional fields, formulas, bulk send, SMS verification, more embedding SDKs). Documenso is catching up but lags on the automation/document processing features.
+
+---
+
+## 5. Pricing (Self-Hosted)
+
+| Aspect | Documenso | DocuSeal |
+|---|---|---|
+| **Self-Hosted Core** | Free (AGPL-3.0) | Free (AGPL-3.0) |
+| **Self-Hosted Pro** | ~$300-480/yr (billed yearly) — Includes 5 users, $8/mo additional | $20/user/month — API key included |
+| **Self-Hosted Enterprise** | ~$3,000/yr — White-label, SSO, premium support | Enterprise — custom pricing |
+| **API Documents** | Unlimited (self-hosted) | $0.20/document via API (usage-based) |
+| **No-Cost Path** | Full-featured self-hosted (AGPL) but signing cert required, harder setup | Full-featured self-hosted (AGPL) with easy setup, SQLite |
+| **Cloud SaaS** | Free (5 docs/mo), Pro $25/mo, Team $40/mo, Enterprise $250/mo | Free tier, Pro $20/user/mo, API $0.20/doc |
+
+**Winner: DocuSeal** for most cases — simpler self-hosting means lower operational cost. The $0.20/doc API pricing is only if you use the Pro plan's API features; the base AGPL self-host is completely free.
+
+**Documenso** self-hosted Pro is ~$300/yr for 5 users ($8/mo extra per user) — good for larger teams.
+
+---
+
+## 6. Legal Compliance
+
+| Regulation | Documenso | DocuSeal |
+|---|---|---|
+| **ESIGN Act (US)** | ✅ Documented compliance page | ✅ Mentioned |
+| **UETA (US)** | ✅ Documented | ✅ Mentioned |
+| **eIDAS (EU)** | ✅ Simple, Advanced, Qualified signatures | ✅ EU Qualified Signature mentioned |
+| **SOC 2** | ✅ Documented | ❌ Not prominently documented |
+| **21 CFR Part 11** | ✅ Documented | ❌ Not prominently documented |
+| **GDPR** | ✅ Dedicated page | ✅ Mentioned |
+| **Signature Certificates** | X.509 certificates for cryptographic proof | ✅ PDF eSignature with digital certificates |
+
+**Winner: Documenso** — has more comprehensive compliance documentation with dedicated pages for ESIGN, UETA, eIDAS, SOC 2, 21 CFR Part 11, and GDPR. DocuSeal mentions compliance but has less detailed documentation.
+
+---
+
+## 7. Integration into a Web Portal
+
+| Requirement | Documenso | DocuSeal |
+|---|---|---|
+| **REST API** | ✅ | ✅ |
+| **Webhook Notifications** | ✅ | ✅ with auto-retry |
+| **Embedded Signing** | ✅ (white-label, paid) | ✅ (React, Vue, Angular, JS — all open-source SDK repos) |
+| **Embedded Form Builder** | ❌ | ✅ (React, Vue, Angular) |
+| **API-first Templates** | ✅ (via API) | ✅ (PDF/DOCX field tags + HTML API) |
+| **Portal-Friendly URLs** | ✅ (generate signing links) | ✅ (generate signing links) |
+
+**Winner: DocuSeal** — open-source embedding SDKs for multiple frameworks makes portal integration significantly easier.
+
+---
+
+## Overall Recommendation
+
+### Recommended: **DocuSeal** for a debt recovery portal
+
+**Why DocuSeal wins for your use case:**
+
+| Factor | Verdict |
+|---|---|
+| **Deployment simplicity** | Single `docker run` on Debian with SQLite — 5 minutes to deploy. Documenso requires PostgreSQL setup, signing certificate, S3 storage — significantly more ops overhead. |
+| **Portal integration** | Official React/Vue/Angular/JS embedding SDKs — directly embed signing into your portal without reinventing UI. Documenso has embedding but only in paid tier. |
+| **Operational cost** | Self-hosted core is free (AGPL). Base deployment with SQLite has near-zero ops cost. |
+| **Feature set** | More features for document automation: conditional fields, formulas, bulk CSV send — useful for debt recovery workflows. |
+| **API maturity** | Proven REST API with webhook auto-retry + embedded signing SDKs. |
+| **Resource footprint** | 227MB Docker image vs Documenso's 690MB — lighter on your Debian server. |
+
+**When you might pick Documenso instead:**
+- You need SOC 2 or 21 CFR Part 11 compliance documentation (DocuSeal doesn't prominently document these)
+- You have a TypeScript/Node.js team and want to contribute or customize the source code (181 contributors)
+- You need large-scale team management with more granular user roles
+- You want unlimited API documents without per-document fees
+
+**Hybrid approach:** Start with DocuSeal's self-hosted (easy setup, fast deployment). If you later need SOC 2 compliance documentation or hit the Pro plan's $0.20/document API pricing at scale, migrate to Documenso — both use the same AGPL-3.0 license so there's no lock-in concern.
+
+### Summary Table
+
+| Category | Documenso | DocuSeal | Winner |
+|---|---|---|---|
+| Community | 13.6K stars, 181 contributors | 17.5K stars, 6 contributors | Draw |
+| Self-Hosting | Complex (PG + cert + S3) | **Trivial** (SQLite, one command) | **DocuSeal** |
+| Docker Image | 690 MB | **227 MB** | **DocuSeal** |
+| API Quality | Good REST + OpenAPI | **Excellent** REST + SDKs + retry | **DocuSeal** |
+| Features | Good core | **More features** (bulk, conditional, formulas) | **DocuSeal** |
+| Compliance Docs | **Comprehensive** (SOC2, CFR21) | Basic | **Documenso** |
+| Pricing | Free AGPL, Pro $300/yr | Free AGPL, Pro $20/user/mo | Draw |
+| Portal Integration | Embedding in paid tier | **Free embedding SDKs** | **DocuSeal** |
+
+---
+
+*Data gathered July 7, 2026 from GitHub API, Docker Hub, and project documentation sites.*