diff --git a/README.md b/README.md
index a62c6a3..cb93d5f 100644
--- a/README.md
+++ b/README.md
@@ -27,6 +27,8 @@ The GUI and documentation support English and Japanese; the QDB-style language b
 
 ## Using the binary release
 
+Code signing: Free code signing provided by [SignPath.io](https://signpath.io), certificate by [SignPath Foundation](https://signpath.org). The application is under review; releases published after approval will be signed. See [Code signing policy](docs/code_signing_policy.md).
+
 If you only want to run the app, download the ZIP from GitHub Releases. GitHub Actions builds `QuickFileCopy-binary.zip` on a `v*` tag; the ZIP is not stored in this repository.
 
 - [Latest releases](https://github.com/maktak-105/QuickFileCopy/releases)
diff --git a/README_jp.md b/README_jp.md
index 823cf4e..4ad311f 100644
--- a/README_jp.md
+++ b/README_jp.md
@@ -27,6 +27,8 @@ GUIと文書は日本語／Englishに対応し、QDB形式の言語ボタンで
 
 ## 配布版を使う
 
+コード署名: [SignPath.io](https://signpath.io) による無償のコード署名を利用し、証明書は [SignPath Foundation](https://signpath.org) が発行します。現在申請中で、承認後に公開するリリースから署名されます。詳細は [コード署名ポリシー](docs/code_signing_policy.md)。
+
 実行だけなら GitHub Releases の ZIP を使います。`v*` タグで GitHub Actions が `QuickFileCopy-binary.zip` を作ります。ZIP はリポジトリには置きません。
 
 - [最新版の配布ページ](https://github.com/maktak-105/QuickFileCopy/releases)
diff --git a/docs/code_signing_policy.md b/docs/code_signing_policy.md
new file mode 100644
index 0000000..fa4fd12
--- /dev/null
+++ b/docs/code_signing_policy.md
@@ -0,0 +1,22 @@
+# Code signing policy
+
+Free code signing provided by [SignPath.io](https://signpath.io), certificate by [SignPath Foundation](https://signpath.org).
+
+Status: the application to SignPath Foundation is under review. Releases published before approval are not signed.
+
+## What is signed
+
+- Only Windows executables built from the source code in this repository by the GitHub Actions release workflow (`.github/workflows/release.yml`) and published on [GitHub Releases](https://github.com/maktak-105/QuickFileCopy/releases).
+- Third-party binaries shipped in the package (for example `WebView2Loader.dll` or runtime libraries) are not built by this project and are not signed by it.
+- Every signing request is approved manually by an approver.
+
+## Team roles
+
+- Committers and reviewers: [maktak-105](https://github.com/maktak-105)
+- Approvers: [maktak-105](https://github.com/maktak-105)
+
+All team members use multi-factor authentication for GitHub and SignPath.
+
+## Privacy policy
+
+This program will not transfer any information to other networked systems unless specifically requested by the user or the person installing or operating it.