Waiverly
Digital waivers with a guardian gate for minors, tamper-evident records and one kiosk for every waiver.
For businesses that need a signed waiver before an activity. Often replaces Smartwaiver or WaiverForever.
Single license $79 · Extended license $179 · paid once, yours for good
What it does
Age is worked out from the date of birth. Anyone under your minor age needs a parent or guardian's name and second signature.
Each record carries a SHA-256 fingerprint, re-checked on every view. An edit made outside the app shows as TAMPERED.
Editing a template publishes a new version. Every past record stays bound to the exact wording the person signed.
Emergency contact, medical conditions, experience level: text, yes/no, date or a choice. Follow-up questions appear only when they matter.
Every answer and the consent are sealed into the record's fingerprint, so an edited answer shows TAMPERED.
The desk sees at a glance whether a waiver stands. Only a valid one checks in.
Guests pick the waiver they need on the tablet and sign. The screen then comes back for the next guest.
People sign at the front-desk kiosk, or by a public link on their phone before they arrive.
Straight after your own waiver, sign for a child. The parent's details fill in as guardian and the records link.
Set an expiry and each waiver's status follows it: valid, expired or needs re-sign.
A separate consent box, unticked by default. Export only the signers who ticked it, ready for Mailchimp.
Signers can be emailed their waiver title, date, expiry, reference code and verify link. Never the signature image. Off by default, through your own SMTP.
Also: short verify codes, an optional photo at signing, and signings sent to Zapier, Make or n8n.
What Waiverly deliberately doesn’t do.
- No government-ID identity verification, notarization, or eIDAS advanced/qualified signatures — Waiverly proves what text was signed and that it has not changed, not who the signer legally is.
- No online payment collection: signatures, not money.
- Email goes through your own SMTP server — Waiverly ships no mail service and opens no account for you.
- A record-keeping tool, not legal advice — whether your wording protects you is a question for your lawyer.
What renting costs instead
5 months of Smartwaiver costs what Waiverly costs once.
Read Sep 7, 2026 · source5 months of WaiverForever costs what Waiverly costs once.
Read Jul 21, 2026 · sourceThe full comparison: every rival, what each does better, and who should stay with them →
Replacing one of these? Smartwaiver alternative · WaiverForever alternative
Release history
For Waiverly, 4.1 adds the signing link by text through your own SMS gateway, with one reminder before the visit if the person agreed. What’s new in 4.1 →
For Waiverly, 4.0 means updates from inside the app: the Updates page checks for a new release with your license key, verifies Ownware's signature, takes a backup and… What’s new in 4.0 →
For Waiverly, 3.2 meant your own questions on the waiver, shown only when they matter and sealed into the signed record, a separate marketing-consent box, an optional… What’s new in 3.2 →
The 3.1 wave gave the catalog a way to reach the other side of the transaction: counterparty email through your own SMTP server, calendar feeds your own calendar…
Every MCP tool is read-only by design: an agent can search the register, pull a waiver with the text exactly as signed and hand out a signing link, but it cannot…
Waiverly 2.0 adds the 2.0 owner layer.
What’s in the zip
The tree as the zip ships it — the working leftovers the packager deletes are not listed
- .htaccess
- API.md
- Dockerfile
- QUICKSTART.txt
- assets/
- bin/
- config.sample.php
- controllers/
- deploy/
- index.php
- install/
- manifest.json
- offline.html
- router.php
- src/
- sw.js
- tests/
- views/
src/Waiver.php: a real module, the first 24 of 532 lines
Chosen as the largest module in src/ that is not one of the shared cores — this product's own logic, not a file every product carries.
<?php /** * Waiver.php — THE core: signed records you can stand behind (fully covered by tests/run.php). * * 1. IMMUTABLE VERSION SNAPSHOTS. Waiver text is stored as append-only versions with a * SHA-256 content hash. Editing a template's text publishes a NEW version; every signed * record stays bound to the exact version (exact words) that was on screen when the * person signed. Nothing a later edit does can change what someone already agreed to. * * 2. TAMPER-EVIDENT RECORDS. Each signed waiver gets a SHA-256 fingerprint over the * canonical record (version hash + signer identity + acknowledgments + signature image * hashes + timestamp + validity window). Integrity is re-derived from the stored fields on every view — * if a row is edited in the database afterward, the record shows TAMPERED. * * 3. DATE MATH DONE RIGHT. Ages (minor/guardian gate) and expiry dates are computed in the * business's timezone with correct calendar rules: Feb-29 birthdays roll to Mar 1 on * non-leap years; "N months" expiry clamps to month-end (Jan 31 + 1 month = Feb 28/29). * * 4. DERIVED STATUS. valid / expired / needs re-sign (superseded) are never stored — * they are derived from the record + template at read time, so they cannot go stale. * Precedence: superseded > expired > valid. */ declare(strict_types=1);
Runs on: 2-minute web installer, plain PHP 8.1+ with MySQL (or SQLite for a trial), no Composer or build step — Docker image included, with an offline test suite you can run yourself. Tested on PHP 8.3. Or run it in Docker: the Dockerfile is in the zip.
Technical owners can install it with one line and their license key: curl -fsSL https://ownware.io/install.sh | sh -s -- waiverly <your license key>
Nothing is obfuscated or encoded; what you read is what runs. Manual · API · the test run
Which license do I need?
It comes down to how many installations you need. Running your own business on one site is the Single license. A second domain of your own, or sites you build or run for other people, is the Extended license.
- Install it on one domain or subdomain you own or operate
- Change the source however you like for that installation
- Run your own business on it commercially, client work included
- Re-download the current build any time from your buyer portal
- A second site, or an installation you hand to a client as theirs, needs the Extended license
- No reselling, redistributing or sublicensing the source
- Not for offering it to other people as a hosted service
- Everything the Single license grants
- Install it on as many domains as you own or operate — no cap on the number
- Up to ten client installations, one per client project, handed over or hosted for each client; for more, buy another Extended license
- White-label: remove or replace the product name and logo in the screens of client installations
- Still no reselling or redistributing the source itself
- Running it as a multi-tenant service others sign up for needs a SaaS agreement
Every download carries the full terms as LICENSE.txt. The complete wording is on the terms page.
After you buy
The app’s Updates page installs a new release with your license key, with the release’s signature checked and a backup taken first. Your download link always serves the current build. Download again any time from your order page or the buyer portal; there is no renewal fee.
Email support for installation and for defects in the code as delivered: a person reads and answers every message. It does not cover custom development or server administration. What support covers
Refunds are handled by Lemon Squeezy as merchant of record, case by case. EU consumers keep the statutory 14-day right until delivery starts. Refund terms
It keeps running: your server, the full PHP source, no license check that can fail. If no stable release is published for 365 days, the domain limit lifts; after three such years your copy becomes MIT-licensed. The terms have the exact wording: continuity.
Questions
Do signers need an account?
Can I brand it and edit the waiver text?
Will a digital waiver hold up?
MySQL or SQLite?
What isn't included?
Does the signer get a copy?
Is Waiverly a subscription?
Waiver services charge per signature. What changes?
What exactly do I get for the money?
Can I get the signed waivers out?
Covered in these guides
- What's new in Own It 4.1
- What's new in Own It 3.2
- Driving-school software: seven jobs, in the order worth buying them
- The Studio Suite: booked, signed, current, counted
- Self-hosted booking, simple to use, with an API — the direct answer
- What's new in Own It 3.1
Also covered in: What a Twelve-Staff Gym Pays for Software Every Year — Line by Line · The Fee Stack Nobody Reads — Where the Second Price List Lives · Self-Hosted Waiver Software — The Custody-of-Evidence Problem Nobody Mentions · The Salon and Clinic Software Stack — Priced, and Which Two You Should Actually Own · What's new in Own It 3.0.
More about Waiverly
Self-hosted digital waivers with a minor/guardian gate and tamper-evident records.
The problem it solves
Gyms, clinics, salons, and tattoo studios hand out the same liability waiver every day, but generic e-signature tools skip three record-keeping details: a guardian signature for minors, the exact wording each person saw, and a check that shows if a record was changed. Whether a waiver holds up is a question for your lawyer: checking that a minor has a parent's signature, proving exactly which wording someone agreed to, and showing whether a record was altered afterward. Renting a signing service also means a recurring fee and trusting someone else with participant data.
- No age/guardian check on generic e-sign tools
- No proof a record wasn't edited after signing
- Recurring fees for a form you fill out constantly
Every feature
- The signer gets their own copy. On signing, the signer can be emailed what they already know — waiver title, date, expiry, their reference code and the public verify link. Never the signature image, hash or IP. Off by default, through your own SMTP, with the outcome shown on the record.
- Minor / guardian gate. Age is computed from date of birth; anyone under your set minor age cannot submit without a parent/guardian name and second signature.
- Immutable versioned text. Editing a template publishes a new version — every past record stays bound to the exact wording on screen when that person signed.
- Tamper-evident records. Each record carries a SHA-256 fingerprint that is re-checked on every view; an edit made outside the app shows as TAMPERED.
- Expiry & re-sign. Set an expiry so status automatically derives to valid, expired, or needs re-sign with correct calendar math.
- Verify by code. Every record gets a short, no-lookalike-character code to confirm the record exists, is on the current version and its fingerprint still matches.
- Kiosk + public-link signing. Capture signatures at a front-desk kiosk or via a public link people sign on their phone before they arrive.
- Installable mobile app (PWA). Add it to a phone or tablet home screen straight from the browser — a full-screen app served from your own server, with no app store involved. Business data is not stored offline on the device; what you see is read live.
- Ask your own questions. Emergency contact, medical conditions, experience level: text, yes/no, date or a choice, each optional or required.
- Questions that appear when they matter. "Tell us more" shows only after "yes" to medical conditions.
- A separate marketing-consent box. Unticked by default and apart from the waiver.
- Answers you can stand behind. Every answer and the consent are sealed into the signed record's SHA-256 fingerprint, so an edited answer shows TAMPERED.
- Check people in against their waiver. The desk sees at a glance whether a waiver stands; only a valid one checks in.
- Photo at signing, if you want it. Optional or required per waiver, sealed into the record.
- Mailing list, with consent. Export only the signers who ticked the box, ready for Mailchimp; or send each signing to Zapier, Make or n8n.
- One kiosk for every waiver. Guests pick the waiver they need on the tablet, sign, and the screen comes back for the next guest.
- Sign for a child straight after your own waiver. The parent's details are filled in as the guardian, and the child's record links to the parent's.
- Updates from inside the app. The Updates page installs a new release with your license key: Ownware's signature is checked, a backup is taken first, and the app puts the previous version back by itself if the update is interrupted or the database step or start-up check of the new version fails. It never checks by itself.
- Backups by themselves. Automatic backups, an optional copy to S3-compatible storage you own, and a weekly check that the latest backup reads back. The Health page names anything that needs attention.
- The signing link by text. Text a waiver's signing link to a number the person gave you for it, through your own SMS gateway, and, if they agreed, one reminder before their visit. Every text ends with a stop link, and a stopped number is never texted again.
- Own It 4.0.1 — fixes and an up-to-date manual. For Waiverly, 4.0.1 fixes an installer that had lost its styling, a rollback that a page opened during an update could stop and a command-line update that ended in an error after putting the previous version back. Its manual, FAQ and QUICKSTART now cover everything 4.0 added, including two Nginx rules that keep the data folder private. Your license covers it: press Check for updates on the Updates page, or download it from your order page.
- Own It 4.0.2 — the installer opens on every host. For Waiverly, 4.0.2 fixes a fresh install on an Apache host: the one-page setup at /install/ looped back to itself and never opened, and now it opens. Your license covers it: press Check for updates on the Updates page, or download it from your order page.
Release notes in full
- Own It 4.1: the signing link by text. For Waiverly, 4.1 adds the signing link by text through your own SMS gateway, with one reminder before the visit if the person agreed. An Extended license bought from October 4, 2026 covers up to ten client installations, one per client project: hand each one over to the client or host it for them, with the client's logo and colors from the app's branding settings. The API reference now shows how to connect Waiverly to Zapier, Make or n8n, using its own webhooks and API key. Your license covers the update: press Check for updates on the Updates page, or download it from your order page.
- Own It 4.0: it updates and backs itself up. For Waiverly, 4.0 means updates from inside the app: the Updates page checks for a new release with your license key, verifies Ownware's signature, takes a backup and puts the previous version back by itself if the update is interrupted or the database step or start-up check of the new version fails. A new install can start with a sample business and remove it in one click; backups run by themselves, with an optional offsite copy and a weekly check that the latest one reads back; and the Health page says whether the install is looking after itself.
- Own It 3.2: the waiver asks what you need to know. For Waiverly, 3.2 meant your own questions on the waiver, shown only when they matter and sealed into the signed record, a separate marketing-consent box, an optional photo at signing, check-in against a valid waiver, one kiosk for every waiver, and a child signed for straight after the parent. Each change is a card above.
- Own It 3.1: it writes to the people you serve. The 3.1 wave gave the catalog a way to reach the other side of the transaction: counterparty email through your own SMTP server, calendar feeds your own calendar subscribes to, attachments filed where the paperwork belongs, and export presets other people's software imports. Each outbound feature ships switched off and runs on your own credentials; a failed send is recorded, and the action that triggered it stands. What this app gained is listed at the top of this section.
- Own It 3.0: works for your AI, not just for you. Every MCP tool is read-only by design: an agent can search the register, pull a waiver with the text exactly as signed and hand out a signing link, but it cannot manufacture a signature. A due list tracks everything expiring or expired, with one click to mint a fresh signing link — re-signing never edits the old record.
- Own It 2.0: API, 2FA, backups, dark mode. Waiverly 2.0 adds the 2.0 owner layer. Upgrade by replacing the files — the database migrates itself, and it is still the same one-time purchase.
Browse self-hosted: Compliance software · Gym & studio software · Salon & clinic software · School & training-provider software · Charity, club & association software · Event & venue software · Photography & creative-studio software · Driving-school software