REST API

Downloads

Endpoint	Gives	When
`GET /v1/signing-requests/{id}/source-document`	The PDF as you uploaded it	While the request is a draft
`GET /v1/signing-requests/{id}/signed-document`	The signed PAdES PDF	Once `status` is `completed`, and for a `declined` or `expired` request that has at least one signature

The answer is application/pdf with Content-Length and a Content-Disposition file name.
Without a signed PDF, the answer is 404 signed_document_not_ready. A sent draft is 404 source_document_not_available.
The audit log of your organisation records each download of a signed PDF, with the key that made it.
A signed PDF holds all that a check needs: every signature, its timestamp and the validation data. Keep the file; you do not need the service to check it.