Compliance & recordsv4.1.0

Waiverly

Digital waivers with a guardian gate for minors, tamper-evident records and one kiosk for every waiver.

For businesses that need a signed waiver before an activity. Often replaces Smartwaiver or WaiverForever.

Single license $79 · Extended license $179 · paid once, yours for good

Try the live demoNo sign-up. The demo resets itself, so click anything.

What it does

Minor and guardian gate

Age is worked out from the date of birth. Anyone under your minor age needs a parent or guardian's name and second signature.

Tamper-evident records

Each record carries a SHA-256 fingerprint, re-checked on every view. An edit made outside the app shows as TAMPERED.

Wording fixed per version

Editing a template publishes a new version. Every past record stays bound to the exact wording the person signed.

Ask your own questions

Emergency contact, medical conditions, experience level: text, yes/no, date or a choice. Follow-up questions appear only when they matter.

Answers sealed in the record

Every answer and the consent are sealed into the record's fingerprint, so an edited answer shows TAMPERED.

Check in against the waiver

The desk sees at a glance whether a waiver stands. Only a valid one checks in.

One kiosk for every waiver

Guests pick the waiver they need on the tablet and sign. The screen then comes back for the next guest.

Kiosk or public link

People sign at the front-desk kiosk, or by a public link on their phone before they arrive.

Sign for a child next

Straight after your own waiver, sign for a child. The parent's details fill in as guardian and the records link.

Expiry and re-sign

Set an expiry and each waiver's status follows it: valid, expired or needs re-sign.

Marketing consent, kept apart

A separate consent box, unticked by default. Export only the signers who ticked it, ready for Mailchimp.

The signer's own copy

Signers can be emailed their waiver title, date, expiry, reference code and verify link. Never the signature image. Off by default, through your own SMTP.

Also: short verify codes, an optional photo at signing, and signings sent to Zapier, Make or n8n.

Is it right for you?

What Waiverly deliberately doesn’t do.

  • No government-ID identity verification, notarization, or eIDAS advanced/qualified signatures — Waiverly proves what text was signed and that it has not changed, not who the signer legally is.
  • No online payment collection: signatures, not money.
  • Email goes through your own SMTP server — Waiverly ships no mail service and opens no account for you.
  • A record-keeping tool, not legal advice — whether your wording protects you is a question for your lawyer.

What renting costs instead

SmartwaiverBasic $19/mo or $194/yr (100 waivers a month); Starter $55/mo or $561/yr (300); Business $155/mo or $1,581/yr (1,000); Premium $199/mo or $2,030/yr (2,500). Storage is a $7/month add-on

5 months of Smartwaiver costs what Waiverly costs once.

Read Sep 7, 2026 · source
WaiverForeverEssential $19/mo, Standard $39/mo, Scale $129/mo; free starter plan

5 months of WaiverForever costs what Waiverly costs once.

Read Jul 21, 2026 · source

The full comparison: every rival, what each does better, and who should stay with them →

Replacing one of these? Smartwaiver alternative · WaiverForever alternative

Release history

Own It 4.1The signing link by textOct 4, 2026

For Waiverly, 4.1 adds the signing link by text through your own SMS gateway, with one reminder before the visit if the person agreed. What’s new in 4.1 →

Own It 4.0It updates and backs itself upSep 29, 2026

For Waiverly, 4.0 means updates from inside the app: the Updates page checks for a new release with your license key, verifies Ownware's signature, takes a backup and… What’s new in 4.0 →

Own It 3.2The waiver asks what you need to knowSep 26, 2026

For Waiverly, 3.2 meant your own questions on the waiver, shown only when they matter and sealed into the signed record, a separate marketing-consent box, an optional… What’s new in 3.2 →

Own It 3.1It writes to the people you serveAug 20, 2026

The 3.1 wave gave the catalog a way to reach the other side of the transaction: counterparty email through your own SMTP server, calendar feeds your own calendar…

Own It 3.0Works for your AI, not just for youAug 9, 2026

Every MCP tool is read-only by design: an agent can search the register, pull a waiver with the text exactly as signed and hand out a signing link, but it cannot…

Own It 2.0API, 2FA, backups, dark modeAug 6, 2026

Waiverly 2.0 adds the 2.0 owner layer.

What’s in the zip

The tree as the zip ships it — the working leftovers the packager deletes are not listed

  • .htaccess
  • API.md
  • Dockerfile
  • QUICKSTART.txt
  • assets/
  • bin/
  • config.sample.php
  • controllers/
  • deploy/
  • index.php
  • install/
  • manifest.json
  • offline.html
  • router.php
  • src/
  • sw.js
  • tests/
  • views/
src/Waiver.php: a real module, the first 24 of 532 lines

Chosen as the largest module in src/ that is not one of the shared cores — this product's own logic, not a file every product carries.

<?php
/**
 * Waiver.php — THE core: signed records you can stand behind (fully covered by tests/run.php).
 *
 *   1. IMMUTABLE VERSION SNAPSHOTS. Waiver text is stored as append-only versions with a
 *      SHA-256 content hash. Editing a template's text publishes a NEW version; every signed
 *      record stays bound to the exact version (exact words) that was on screen when the
 *      person signed. Nothing a later edit does can change what someone already agreed to.
 *
 *   2. TAMPER-EVIDENT RECORDS. Each signed waiver gets a SHA-256 fingerprint over the
 *      canonical record (version hash + signer identity + acknowledgments + signature image
 *      hashes + timestamp + validity window). Integrity is re-derived from the stored fields on every view —
 *      if a row is edited in the database afterward, the record shows TAMPERED.
 *
 *   3. DATE MATH DONE RIGHT. Ages (minor/guardian gate) and expiry dates are computed in the
 *      business's timezone with correct calendar rules: Feb-29 birthdays roll to Mar 1 on
 *      non-leap years; "N months" expiry clamps to month-end (Jan 31 + 1 month = Feb 28/29).
 *
 *   4. DERIVED STATUS. valid / expired / needs re-sign (superseded) are never stored —
 *      they are derived from the record + template at read time, so they cannot go stale.
 *      Precedence: superseded > expired > valid.
 */
declare(strict_types=1);

Runs on: 2-minute web installer, plain PHP 8.1+ with MySQL (or SQLite for a trial), no Composer or build step — Docker image included, with an offline test suite you can run yourself. Tested on PHP 8.3. Or run it in Docker: the Dockerfile is in the zip.

Technical owners can install it with one line and their license key: curl -fsSL https://ownware.io/install.sh | sh -s -- waiverly <your license key>

Nothing is obfuscated or encoded; what you read is what runs. Manual · API · the test run

Which license do I need?

It comes down to how many installations you need. Running your own business on one site is the Single license. A second domain of your own, or sites you build or run for other people, is the Extended license.

Single license$79
One (1) domain or subdomain · One business, running it on one site.
  • Install it on one domain or subdomain you own or operate
  • Change the source however you like for that installation
  • Run your own business on it commercially, client work included
  • Re-download the current build any time from your buyer portal
  • A second site, or an installation you hand to a client as theirs, needs the Extended license
  • No reselling, redistributing or sublicensing the source
  • Not for offering it to other people as a hosted service
Buy the Single license, $79
Extended license$179
Unlimited sites you own or operate, plus up to 10 client installations (white-label included) · Agencies, and anyone running it on more than one site.
  • Everything the Single license grants
  • Install it on as many domains as you own or operate — no cap on the number
  • Up to ten client installations, one per client project, handed over or hosted for each client; for more, buy another Extended license
  • White-label: remove or replace the product name and logo in the screens of client installations
  • Still no reselling or redistributing the source itself
  • Running it as a multi-tenant service others sign up for needs a SaaS agreement
Buy the Extended license, $179

Every download carries the full terms as LICENSE.txt. The complete wording is on the terms page.

After you buy

Updates

The app’s Updates page installs a new release with your license key, with the release’s signature checked and a backup taken first. Your download link always serves the current build. Download again any time from your order page or the buyer portal; there is no renewal fee.

Help

Email support for installation and for defects in the code as delivered: a person reads and answers every message. It does not cover custom development or server administration. What support covers

If it isn’t right

Refunds are handled by Lemon Squeezy as merchant of record, case by case. EU consumers keep the statutory 14-day right until delivery starts. Refund terms

If we disappear

It keeps running: your server, the full PHP source, no license check that can fail. If no stable release is published for 365 days, the domain limit lifts; after three such years your copy becomes MIT-licensed. The terms have the exact wording: continuity.

Questions

Do signers need an account?
No — they sign via kiosk or a public link.
Can I brand it and edit the waiver text?
Yes, in Settings and the template editor.
Will a digital waiver hold up?
Waiverly gives you a version-bound record with the name the signer entered, a timestamp and each acknowledgment they ticked, carrying a fingerprint that shows if the record was changed. It does not verify legal identity — it's a record-keeping tool, not legal advice; wording sufficiency where you operate is on you.
MySQL or SQLite?
Either — MySQL for shared hosting, SQLite for a local trial.
What isn't included?
No online payment, no government-ID verification, no notarization — deliberately out of scope. Signer copies and operator notifications send through your own SMTP, both off until you enable them.
Does the signer get a copy?
Yes, when you switch it on: an automatic plain-text copy on signing (and a re-send button on the record) carrying the title, dates, their reference code and the verify link — never the signature image or anything internal. A mail failure can never affect the signature itself.
Is Waiverly a subscription?
You buy it once and own that copy. There is no subscription, no per-user fee and nothing that renews — the license tier decides how many sites you may run it on, not how many people use it. Signed waivers have to stay retrievable for years, which is a poor thing to rent by the month.
Waiver services charge per signature. What changes?
Signatures are not metered — the license governs sites, so a busy season does not cost more. It has a minor and guardian gate and keeps tamper-evident records; it is not a general e-signature product for contracts. Our terms only.
What exactly do I get for the money?
The download is the complete PHP source with the database schema. Read it, change it, keep it. If we vanished tomorrow the copy on your server keeps working, because nothing in it phones home to us.
Can I get the signed waivers out?
Yes. Waivers export as CSV with their tamper-evident record, plus a CSV audit trail, and the whole database can be backed up.
Better together
Studio Suite: Slotly, Waiverly, Gymora and Visitora
Online booking, digital waivers, and membership management — run a studio, gym, or spa on your own server.
4 tools for$199
$326 separatelySave $127

Covered in these guides

Also covered in: What a Twelve-Staff Gym Pays for Software Every Year — Line by Line · The Fee Stack Nobody Reads — Where the Second Price List Lives · Self-Hosted Waiver Software — The Custody-of-Evidence Problem Nobody Mentions · The Salon and Clinic Software Stack — Priced, and Which Two You Should Actually Own · What's new in Own It 3.0.

More about Waiverly

Self-hosted digital waivers with a minor/guardian gate and tamper-evident records.

The problem it solves

Gyms, clinics, salons, and tattoo studios hand out the same liability waiver every day, but generic e-signature tools skip three record-keeping details: a guardian signature for minors, the exact wording each person saw, and a check that shows if a record was changed. Whether a waiver holds up is a question for your lawyer: checking that a minor has a parent's signature, proving exactly which wording someone agreed to, and showing whether a record was altered afterward. Renting a signing service also means a recurring fee and trusting someone else with participant data.

  • No age/guardian check on generic e-sign tools
  • No proof a record wasn't edited after signing
  • Recurring fees for a form you fill out constantly

Every feature

  • The signer gets their own copy. On signing, the signer can be emailed what they already know — waiver title, date, expiry, their reference code and the public verify link. Never the signature image, hash or IP. Off by default, through your own SMTP, with the outcome shown on the record.
  • Minor / guardian gate. Age is computed from date of birth; anyone under your set minor age cannot submit without a parent/guardian name and second signature.
  • Immutable versioned text. Editing a template publishes a new version — every past record stays bound to the exact wording on screen when that person signed.
  • Tamper-evident records. Each record carries a SHA-256 fingerprint that is re-checked on every view; an edit made outside the app shows as TAMPERED.
  • Expiry & re-sign. Set an expiry so status automatically derives to valid, expired, or needs re-sign with correct calendar math.
  • Verify by code. Every record gets a short, no-lookalike-character code to confirm the record exists, is on the current version and its fingerprint still matches.
  • Kiosk + public-link signing. Capture signatures at a front-desk kiosk or via a public link people sign on their phone before they arrive.
  • Installable mobile app (PWA). Add it to a phone or tablet home screen straight from the browser — a full-screen app served from your own server, with no app store involved. Business data is not stored offline on the device; what you see is read live.
  • Ask your own questions. Emergency contact, medical conditions, experience level: text, yes/no, date or a choice, each optional or required.
  • Questions that appear when they matter. "Tell us more" shows only after "yes" to medical conditions.
  • A separate marketing-consent box. Unticked by default and apart from the waiver.
  • Answers you can stand behind. Every answer and the consent are sealed into the signed record's SHA-256 fingerprint, so an edited answer shows TAMPERED.
  • Check people in against their waiver. The desk sees at a glance whether a waiver stands; only a valid one checks in.
  • Photo at signing, if you want it. Optional or required per waiver, sealed into the record.
  • Mailing list, with consent. Export only the signers who ticked the box, ready for Mailchimp; or send each signing to Zapier, Make or n8n.
  • One kiosk for every waiver. Guests pick the waiver they need on the tablet, sign, and the screen comes back for the next guest.
  • Sign for a child straight after your own waiver. The parent's details are filled in as the guardian, and the child's record links to the parent's.
  • Updates from inside the app. The Updates page installs a new release with your license key: Ownware's signature is checked, a backup is taken first, and the app puts the previous version back by itself if the update is interrupted or the database step or start-up check of the new version fails. It never checks by itself.
  • Backups by themselves. Automatic backups, an optional copy to S3-compatible storage you own, and a weekly check that the latest backup reads back. The Health page names anything that needs attention.
  • The signing link by text. Text a waiver's signing link to a number the person gave you for it, through your own SMS gateway, and, if they agreed, one reminder before their visit. Every text ends with a stop link, and a stopped number is never texted again.
  • Own It 4.0.1 — fixes and an up-to-date manual. For Waiverly, 4.0.1 fixes an installer that had lost its styling, a rollback that a page opened during an update could stop and a command-line update that ended in an error after putting the previous version back. Its manual, FAQ and QUICKSTART now cover everything 4.0 added, including two Nginx rules that keep the data folder private. Your license covers it: press Check for updates on the Updates page, or download it from your order page.
  • Own It 4.0.2 — the installer opens on every host. For Waiverly, 4.0.2 fixes a fresh install on an Apache host: the one-page setup at /install/ looped back to itself and never opened, and now it opens. Your license covers it: press Check for updates on the Updates page, or download it from your order page.

Release notes in full

  • Own It 4.1: the signing link by text. For Waiverly, 4.1 adds the signing link by text through your own SMS gateway, with one reminder before the visit if the person agreed. An Extended license bought from October 4, 2026 covers up to ten client installations, one per client project: hand each one over to the client or host it for them, with the client's logo and colors from the app's branding settings. The API reference now shows how to connect Waiverly to Zapier, Make or n8n, using its own webhooks and API key. Your license covers the update: press Check for updates on the Updates page, or download it from your order page.
  • Own It 4.0: it updates and backs itself up. For Waiverly, 4.0 means updates from inside the app: the Updates page checks for a new release with your license key, verifies Ownware's signature, takes a backup and puts the previous version back by itself if the update is interrupted or the database step or start-up check of the new version fails. A new install can start with a sample business and remove it in one click; backups run by themselves, with an optional offsite copy and a weekly check that the latest one reads back; and the Health page says whether the install is looking after itself.
  • Own It 3.2: the waiver asks what you need to know. For Waiverly, 3.2 meant your own questions on the waiver, shown only when they matter and sealed into the signed record, a separate marketing-consent box, an optional photo at signing, check-in against a valid waiver, one kiosk for every waiver, and a child signed for straight after the parent. Each change is a card above.
  • Own It 3.1: it writes to the people you serve. The 3.1 wave gave the catalog a way to reach the other side of the transaction: counterparty email through your own SMTP server, calendar feeds your own calendar subscribes to, attachments filed where the paperwork belongs, and export presets other people's software imports. Each outbound feature ships switched off and runs on your own credentials; a failed send is recorded, and the action that triggered it stands. What this app gained is listed at the top of this section.
  • Own It 3.0: works for your AI, not just for you. Every MCP tool is read-only by design: an agent can search the register, pull a waiver with the text exactly as signed and hand out a signing link, but it cannot manufacture a signature. A due list tracks everything expiring or expired, with one click to mint a fresh signing link — re-signing never edits the old record.
  • Own It 2.0: API, 2FA, backups, dark mode. Waiverly 2.0 adds the 2.0 owner layer. Upgrade by replacing the files — the database migrates itself, and it is still the same one-time purchase.

Browse self-hosted: Compliance software · Gym & studio software · Salon & clinic software · School & training-provider software · Charity, club & association software · Event & venue software · Photography & creative-studio software · Driving-school software

Waiverly$79 once
Demo Buy