Waiverly — Digital Waiver & E-Signature Kiosk (PHP + MySQL, Self-Hosted)
Self-hosted digital waivers with a minor/guardian gate and tamper-evident records.
The problem it solves
Gyms, clinics, salons, and tattoo studios hand out the same liability waiver every day, but generic e-signature tools skip the details that make a waiver defensible: checking that a minor has a parent's signature, proving exactly which wording someone agreed to, and showing whether a record was altered afterward. Renting a signing service also means a recurring fee and trusting someone else with participant data.
- No age/guardian check on generic e-sign tools
- No proof a record wasn't edited after signing
- Recurring fees for a form you fill out constantly
What you get
Minor / guardian gate
Age is computed from date of birth; anyone under your set minor age cannot submit without a parent/guardian name and second signature.
Immutable versioned text
Editing a template publishes a new version — every past record stays bound to the exact wording on screen when that person signed.
Tamper-evident records
Each signature is SHA-256 fingerprinted and re-checked on every view; an edited row shows as TAMPERED.
Expiry & re-sign
Set an expiry so status automatically derives to valid, expired, or needs re-sign with correct calendar math.
Verify by code
Every record gets a short, no-lookalike-character code to confirm it's real, current, and untampered.
Kiosk + public-link signing
Capture signatures at a front-desk kiosk or via a public link people sign on their phone before they arrive.
Installable mobile app (PWA)
Add it to a phone or tablet home screen straight from the browser — a full-screen app served from your own server, with no app store involved. Business data is never cached offline, so what you see is always live.
Own It 2.0 — API, 2FA, backups, dark mode
Waiverly 2.0 adds the 2.0 owner layer. Upgrade by replacing the files — the database migrates itself, and it is still the same one-time purchase.
- REST API with an OpenAPI spec and signed webhooks
- Two-factor sign-in (TOTP)
- Email notifications through your own SMTP
- One-click backups
- Dark mode
Own It 3.0 — works for your AI, not just for you
Every MCP tool is read-only by design: an agent can search the register, pull a waiver with the text exactly as signed and hand out a signing link, but it cannot manufacture a signature. A due list tracks everything expiring or expired, with one click to mint a fresh signing link — re-signing never edits the old record.
- Roles with email invitations and a last-admin guard
- Append-only audit trail across browser, API and agent
- Printable PDFs
- Scheduled backups with a guided dry-run restore
- Optional single sign-on (OIDC)
Pricing — one-time, yours forever
- ✔ Full source included — PHP you can read and change
- ✔ No subscription. One payment, yours forever
- ✔ It never phones home
- ✔ Your data stays on your server
No reviews yet — so here is what we offer instead. Every competitor price on our comparison pages is source-linked and dated, and when a vendor’s price won’t load we say so rather than guess. See the sources for yourself →
Screenshots
Honest limitations
- No signer-facing email: 2.0 notifies YOU through your own SMTP when a waiver is signed, but the signer is not sent a copy
- No online payment collection
- No government-ID identity verification, notarization, or eIDAS advanced/qualified signatures
- It's a record-keeping tool, not legal advice — wording sufficiency is your responsibility
2-minute web installer, plain PHP 8 + MySQL (or SQLite for a trial), no Composer or build step — Docker image included, with a 70-assertion test suite you can run yourself.
Covered in these guides
Every Ownware tool now has an MCP endpoint an AI agent can use under the same guards a person faces, plus roles with email invitations, an append-only audit trail, printable PDFs, your branding, guided backups and restore, and optional single sign-on.
A small clinic runs booking, waivers, a staff rota and expenses. We priced the hosted options from their own pages and worked out which layers are worth owning outright — and which are not, including the one that disqualifies most self-hosted booking tools.
Before comparing waiver prices, understand the objection: a self-hosted signed record is produced by the defendant. Here is that argument in full, what mitigates it, and the honest case for owning your waiver system anyway.
Platform, rota, waivers, leave, equipment. Five subscriptions priced from each vendor's own page, totalling $2,232 a year — and the single largest line is the one most gyms should not be buying at all.
Frequently asked questions
Do signers need an account?
No — they sign via kiosk or a public link.
Can I brand it and edit the waiver text?
Yes, in Settings and the template editor.
Will a digital waiver hold up?
Waiverly gives you a clean, tamper-evident, version-bound record with signer identity, timestamp, and every acknowledgment ticked — it's a record-keeping tool, not legal advice; wording sufficiency where you operate is on you.
MySQL or SQLite?
Either — MySQL for shared hosting, SQLite for a local trial.
What isn't included?
No signer-facing email, no online payment, no government-ID verification — those are deliberately out of scope.