For MSPs & IT Partners

Email signatures for every client tenant, from one login.

Deploy the add-in once per tenant. Each end user pastes their key once. After that every signature change you (or your client) makes is picked up automatically, across Outlook on Windows, Mac, web and mobile, and Gmail in the browser and mobile (plus more).

20 minutes, screen-shared, no pitch. Bring one messy tenant and we'll map the rollout.

Wholesale discount
30% off RRP
Client workspaces
Unlimited
Email clients supported
60+
Setup per user
One paste
Why this lands on your desk

Signatures are a small problem that generates a lot of tickets

Multiply any one of these by forty tenants and it stops being small.

Every tenant does it differently

One client is on transport rules, one has a spreadsheet of HTML files, one lets every user write their own. Nothing is documented and none of it survives a staff change.

Transport rules have documented limits

Microsoft's own admin documentation states you can't embed inline images, the signature can't sit directly under the latest reply, users can't see it in Sent Items, and lines containing unresolved directory variables get skipped.

Nobody's estate is uniform

A modern tenant with three people still on Outlook 2016, a designer on Thunderbird, and a sales team living in a CRM. Tools that only handle the tidy 80% leave you doing the rest by hand, every time someone changes their phone number.

The scripting path is closing

EWS starts being disabled in October 2026. There is still no Microsoft Graph API for signatures. If your automation depends on either, you need a plan before Q4.

Deployment

How we deploy across mixed email clients

Six ways in, plus raw HTML for anything with a signature box. They all work the same way underneath: the signature lives in your dashboard and the client fetches it with a unique key, so changing a template updates everyone without anyone re-pasting anything.

Method 01 · Recommended

Outlook add-in, deployed by the tenant admin

You (or the client's admin) push the SigStudio add-in from the Microsoft 365 admin centre to whichever users you assign. It appears in their Outlook, they paste their unique key once, and the add-in fetches and installs their signature.

Covers: Outlook on the web, new and classic Outlook on Windows and Mac, and the Outlook app on iOS and Android.

Method 02

Outlook add-in, sideloaded by the user

Same add-in, same result, installed by the individual instead of the admin. Useful when you're piloting with a handful of users, when the client's admin access sits with someone else, or when you want to prove it works before asking for a tenant-wide push.

Covers: everything above, one user at a time.

Method 03

Browser extension

Installs in Chrome, Firefox, Brave, Opera or Safari. The user pastes their key and their full signature appears on every new message, reply and forward. For Gmail it can also install a separate lightweight version into settings for the phone app.

Covers: Gmail, Outlook.com, AOL Mail, Yahoo Mail.

Method 04

Windows app

For the machines you can't modernise. Installs signatures into older desktop clients directly, so the three people still on a 2016 build aren't a manual job every time the brand changes.

Covers: Outlook 2013–2019 on Windows, Thunderbird, Postbox, Mailbird.

Method 05

macOS app

The same idea on the Mac side, including the older Outlook for Mac builds that the add-in route doesn't reach.

Covers: Outlook for Mac and Outlook 2019 for Mac, Thunderbird, Postbox, Mailbird.

Method 06

iOS Shortcut

An iCloud shortcut the user installs on their iPhone. It stores their key, renders their current signature and copies it ready to paste. They can reopen it any time to pull the latest version.

Covers: Apple Mail, Spark, Yahoo Mail, Canary, Polymail, Front on iOS.

And the edge cases

Anything that supports an HTML signature

Every signature is also available as a rendered, formatted HTML file and as raw HTML source. If a client, app, CRM or per-user sending tool has a signature box that accepts HTML, it's supported — including whatever unusual thing one department at one client insists on using. No integration required, and the source is yours to inspect.

Which method reaches which client

Including the two places nothing reaches. You'd rather know now than find out in front of a client.

Email client Outlook add-in Extension Desktop app iOS Shortcut HTML file / source
Outlook on the web (classic and new) YesYes
New Outlook for Windows YesYes
Classic Outlook for Windows (M365) YesYesYes
Outlook 2013 / 2016 / 2019 for Windows YesYes
New Outlook for Mac YesYes
Outlook for Mac / Outlook 2019 for Mac YesYesYes
Outlook app, iOS and Android SyncsNot needed
Gmail on the web YesYes
Gmail app, iOS and Android Mobile version
Outlook.com, AOL Mail, Yahoo Mail (web) YesYes
Apple Mail, Thunderbird, Postbox (Windows & Mac) YesYes
Apple Mail on iOS YesManual
Spark, Canary, Polymail, Front (iOS) YesManual
Any other client, app or CRM that accepts HTML Yes

Mobile, honestly

Outlook app users are covered with no extra step. Because the add-in stores the signature in the mailbox rather than a local folder, it follows the user into the Outlook app on both iOS and Android. Most tools treat mobile as the gap; here it comes free with the add-in.

Gmail on a phone gets a separate lightweight signature, because Gmail enforces a 10,000-character limit on the signature it stores. The extension installs that shortened version for the phone and swaps the full HTML back in whenever the user composes on the web.

Anything else on iOS — Apple Mail, Spark, Yahoo, Canary, Polymail, Front — uses the shortcut. About thirty seconds, no help-desk ticket.

The two real limits

Android outside Outlook and Gmail. Those two are covered. The rest of Android's mail apps don't accept an HTML signature at all, so there's nothing for any vendor to install into — this is an Android limitation, not a product one.

Microsoft Teams has no signature feature. Not ours, not anyone's. What exists is Teams meeting branding, which is a Teams Premium feature and a different product entirely. Anyone selling you "Teams signatures" is selling you something Microsoft doesn't offer.

That's the list. If a client runs something unusual, tell us on the call and we'll say plainly whether it works.

Coming soon

Zero-touch deployment is on its way for Outlook

Automatic API deployment removes the one manual step that's left, the user pasting their key. You assign the signature; it appears. Nothing for the end user to install, paste or be walked through.

What changes

Signatures are written straight to the user's mail account. No key hand-out, no per-user step, no "did you paste it yet?" chase across a 5000-seat tenant.

What stays the same

Everything you build now still applies: the same workspaces, brand profiles, templates and users. This changes how signatures land, not how you manage them.

More surfaces too

We're extending the browser extension to the tools people actually send from — Salesforce and Follow Up Boss first — plus a custom app integration tool for the ones we haven't thought of.

ETA Q4 2026; we'd rather be straight with you about what works today. If any of it affects your rollout plan, ask on the call and we'll tell you exactly where it's up to.

Multi-tenant management

One account, one workspace per client

Workspaces are unlimited on every plan, so there is no penalty for having forty clients instead of four, and no separate login, invoice or password for each one.

  1. 1

    Create the client workspace

    One per client, or one per brand where a client has several. Each carries its own brand profile — logo, fonts, colours, layout — locked so nobody can drift off-brand.

  2. 2

    Import the users

    Name, email and role is enough to start. Import from Microsoft 365 or Google Workspace, or bulk-load a CSV. Merge fields fill the rest from the directory data you already maintain.

  3. 3

    Pick a route per group, not per tenant

    Add-in for the Microsoft 365 users, extension for the ones on Gmail or webmail, desktop app for the legacy machines, HTML source for the odd CRM. You can mix all of them inside one client, which is usually what a real estate actually needs.

  4. 4

    Hand the client the parts they should own

    Give their marketing lead access to their workspace only, so campaign banners and new starters stop coming to you as tickets, while the template stays locked to their brand. Their edits reach every signature without anyone touching a mailbox again.

Book a Walkthrough

Let's talk

20 minutes, screen-shared, no pitch. Bring one messy tenant and we'll map the rollout.

Tell us about your clients, their environments and what you need.

Changes landing in the next six months

Roaming signatures, EWS, and what they mean for your tenants

Two separate Microsoft changes are being talked about as one thing. They aren't, and the distinction matters for how you plan.

Roaming signatures aren't being switched off

They're becoming unavoidable. Signatures now live in the Exchange Online mailbox instead of the local %AppData%\Microsoft\Signatures folder. The tenant-level opt-out, PostponeRoamingSignaturesUntilLater, is described in Microsoft's own cmdlet reference as a way to temporarily disable the feature. Plan on the opt-out going away, not the feature.

For us, that's the good news

Tools that write signature files into a local folder are the ones roaming signatures break, and Microsoft says so directly. Our add-in doesn't do that. It puts the signature where roaming signatures already keep it, which is exactly why it follows the user into the Outlook app on iOS and Android without a second install.

EWS is the one with a date

Microsoft begins disabling Exchange Web Services across Exchange Online in October 2026, completing in April 2027. Combined with the absence of a Graph API for signatures, any EWS-based signature script you maintain has a hard expiry and no drop-in replacement.

WhenWhat happensWhat it means for you
Now Roaming signatures on by default for Microsoft 365 mailboxes on current Outlook builds Local-folder scripts and Set-MailboxMessageConfiguration signature parameters stop behaving as expected
Oct 2026 EWS begins being disabled globally in Exchange Online Audit every tenant for EWS-dependent tooling now. Microsoft publishes EWS usage reports to help
Apr 2027 EWS fully disabled No remaining grace period for in-house scripts
2029 Classic Outlook supported "at least until 2029" per Microsoft Every client eventually lands on new Outlook. Our add-in covers both, so the migration isn't a signature project

Dates from Microsoft Learn, verified 21 August 2026. We keep this table current.

FAQ

Questions MSPs actually ask

What does the end user actually have to do?

Paste one key, once. After the add-in, extension or app is in place, the user pastes their unique signature key into it and their signature installs. That's the whole user-facing process. Every change you make afterwards — a rebrand, a new banner, a corrected phone number — flows through without them doing anything again. We're building direct API deployment to remove even that first paste.

We still have people on Outlook 2016 and Thunderbird. Are they out of scope?

No, and this is usually the part that decides the deal. The Windows app installs signatures into Outlook 2013, 2016 and 2019, plus Thunderbird, Postbox and Mailbird. The macOS app does the same for Outlook for Mac, Outlook 2019 for Mac, Thunderbird, Postbox and Mailbird. So the machines you can't modernise stop being a manual job every time a client rebrands.

What about a client running something you don't have an app for?

Every signature is also produced as a rendered, formatted HTML file and as raw HTML source. If the client, app, CRM or sending tool has a signature box that takes HTML, it's supported — no integration needed, and you can read the source before you paste it. In practice that covers the long tail of one-department-at-one-client tools that nothing else handles.

Can we put signatures in Salesforce or our CRM?

Today, yes, using the HTML source or rendered file wherever the tool stores a per-user signature. Direct browser-extension support is in progress — Salesforce and Follow Up Boss first, plus a custom app integration tool for other sending platforms. We're not putting a date on it here; ask on the call for the current state.

What if the client's admin won't deploy the add-in?

Users can sideload the same add-in themselves. Same capability, same result, you just lose the ability to push it in one action. In practice this is how a lot of pilots start: get five users running on sideload, show the client the before-and-after, then ask for the tenant-wide deployment with evidence in hand.

Does the Outlook add-in cover mobile?

Yes, for the Outlook app on both iOS and Android, with no separate install. The signature is stored in the mailbox, so it syncs to the app the same way it syncs between the user's desktop and web. This is the part most vendors can't do, and it's worth demonstrating on a client's own phone during the walkthrough.

Gmail's phone app gets a lightweight version through the extension. Other iOS mail apps — Apple Mail, Spark, Yahoo, Canary, Polymail, Front — use the iOS Shortcut. The only genuine gap is Android mail apps other than Outlook and Gmail, which don't accept HTML signatures at all.

Why does the Gmail mobile signature look different from the desktop one?

Because Gmail caps a stored signature at 10,000 characters, and a full HTML signature with inline styling goes past that regularly. It's one of the most common support questions in the whole category. So the extension installs a trimmed mobile version into Gmail's settings for the phone, and swaps the full signature back in whenever the user composes on the web. The user sees the right one in each place without thinking about it.

What exactly are Outlook roaming signatures?

Instead of storing signatures as files in %AppData%\Microsoft\Signatures on each machine, Outlook stores them in the Exchange Online mailbox so they follow the user between devices. It applies to Microsoft 365 and Outlook.com accounts on Outlook build 2303 and later on Windows. Exchange on-premises, POP and IMAP accounts can't use it.

Are roaming signatures being disabled soon?

It's the other way round, and this is the single most common misunderstanding we hear. Roaming signatures are staying. What's temporary is your ability to turn them off: Microsoft's documentation for Set-OrganizationConfig -PostponeRoamingSignaturesUntilLater describes it as a way for admins to temporarily disable the feature without opening a support ticket. Treat any tenant currently relying on that switch as living on borrowed time.

Do roaming signatures break SigStudio?

No, they're what makes the mobile sync work. Microsoft's warning is aimed at signature tools that write files into the local %AppData%\Microsoft\Signatures folder; those stop working once the feature is on. Our add-in installs the signature through Outlook itself, so it lands where roaming signatures already keep it and then follows the user to every device signed into that mailbox. A tenant that turns roaming signatures on mid-rollout doesn't create a ticket for you.

What actually breaks in a tenant once roaming signatures are on?

Two things, and both catch people out:

  • The signature parameters on Set-MailboxMessageConfiguration, including SignatureHtml and AutoAddSignature, stop working. Microsoft's cmdlet reference states this directly. Worth remembering that cmdlet only ever applied to Outlook on the web anyway, which surprises a lot of people who've been running it as their standard script.
  • Microsoft warns that third-party signature add-ins that write to the local signature folder will no longer work when the feature is enabled.
Can I still turn roaming signatures off for a client today?

There are two levers and both have caveats. At tenant level, Set-OrganizationConfig -PostponeRoamingSignaturesUntilLater $true, documented as temporary. At client level, the DisableRoamingSignatures registry value under Outlook's Setup key. Note that one is under HKEY_CURRENT_USER, so it's per-user per-machine, its own deployment problem across a fleet, and the reason a lot of MSPs give up on it halfway through. Our honest advice: don't fight it. Deploy something that works with the feature on.

When is EWS being switched off, and does it affect signatures?

Microsoft begins disabling EWS in Exchange Online in October 2026 and completes it in April 2027. It affects signatures if any of your tooling reads or writes mailbox data over EWS, which covers a lot of in-house scripts and some older third-party tools. Microsoft publishes EWS usage reports and a code analyzer; run them across your tenants before Q4 rather than after.

Is there a Microsoft Graph API for signatures I can move to?

No. The Graph mailbox settings endpoint covers automatic replies, date and time format, locale, working hours, delegate meeting rules and user purpose. Signatures aren't among them, and there's a long-standing open developer request for it. So the honest position is that EWS is going away, Graph never arrived, and the remaining routes are transport rules, add-ins or client-side deployment. We use the add-in route, which is unaffected by the EWS retirement.

Does my clients' email route through your servers?

No. The signature is installed into the user's mail client and the message is composed with it already in place. We don't sit in the mail flow, we don't act as a relay, and we don't modify messages in transit, so there's no connector to add, nothing to re-order in front of a security gateway, and no dependency on our uptime for a client's mail to send.

Will this break DKIM, DMARC or Safe Links?

No. DKIM breakage happens when something alters the message body after it has been signed. Because the signature is already part of the message when the user hits send, Microsoft 365 or Google signs the finished message exactly as it normally would. Same reasoning for Safe Links and third-party gateways: there's no additional hop to order correctly.

Can each client have its own branding, users and admin?

Yes. One workspace per client, with its own brand profile, users and templates. Workspaces are unlimited on every plan, so a client with three sub-brands costs you nothing extra in structure. You can give a client's marketing lead access to their workspace alone, with fonts, colours and layout locked so nothing drifts off-brand.

How does partner pricing work?

Partners buy at wholesale, 30% off recommended retail, across every client workspace on the account, and bill their clients however they prefer. Talk to us about your tenant count and we'll confirm the terms in writing before you commit anything.

Can we just use Exchange transport rules instead?

For a plain text disclaimer at the bottom of a thread, yes, and it's free. Microsoft's own documentation lists what you give up: no inline images, the signature can't sit directly under the latest reply, users can't see it in Sent Items, and lines containing directory variables that don't resolve get skipped entirely, so a user with an empty mobile field gets a gap. It also only reaches Exchange — the Gmail, Thunderbird and CRM users in the same client are still yours to sort out by hand.

Bring us your worst tenant

Twenty minutes, screen-shared. Mixed clients, legacy desktops, the lot. We'll map a rollout and tell you plainly if we're not the right fit for it.