Is Apia digital signature safe?

Clean risk

Apia digital signature bridges browser signing requests to a local native application via chrome native messaging.

When a user visits an Apia signing page, the extension reads a signing payload from localStorage and forwards it to the native host com.apia.sign running on the local machine. The native host performs the signing operation and returns a token, which the extension writes back into localStorage for the page to consume. No data leaves the local device through the extension.

development@statum.bizv9.6.0.6Chrome Web Store
1Risk
Who publishes it

Statum - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
development@statum.biz
Declared legal entity
Statum
Registered contact
Statum

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 9.6.0.6. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on ajax.googleapis.com

    https://ajax.googleapis.com/

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

Updated 30 September 2026lofgfkcbecnmhnkalgpbgafobgkodjpg