Security and trust
Built so you can stand behind every signature
An electronic signature is only as good as the evidence behind it. This page explains what DocuSend records and how your documents are protected.
Stored in Canada
Documents, signatures and audit records are stored in Montréal (AWS ca-central-1). They are not stored outside Canada.
Encrypted everywhere
TLS protects every connection. Stored files and database records are encrypted at rest with AES-256.
Private by default
Storage is never public. Files are served only to the signed-in sender or through a signer's own link.
One link per signer
Every recipient gets a unique, unguessable 192-bit link tied to their email address. A link cannot be reused for someone else.
Complete audit trail
Each view, consent, signature, decline and void is logged with a timestamp, IP address and device.
Tamper evidence
Originals and sealed PDFs are fingerprinted with SHA-256. Any change, however small, produces a different fingerprint.
Legal validity
Electronic signatures are legally recognized across Canada, the United States and the European Union for most commercial and personal agreements.
This page is general information, not legal advice. For high-stakes or unusual documents, consult a lawyer.
Canada
The Personal Information Protection and Electronic Documents Act (PIPEDA), Part 2, and provincial legislation such as Ontario's Electronic Commerce Act, 2000, British Columbia's Electronic Transactions Act and Quebec's Act to establish a legal framework for information technology.
United States
The federal ESIGN Act (2000) and the Uniform Electronic Transactions Act, adopted by 49 states.
European Union
eIDAS Regulation (EU) No 910/2014. DocuSend signatures are simple electronic signatures (SES), which cannot be denied legal effect solely because they are electronic.
Exceptions
Some documents still require wet ink or witnesses in many jurisdictions: wills and codicils, certain powers of attorney, some land transfer instruments and negotiable instruments.
What the certificate of completion contains
- Envelope ID and document fingerprint
- Sender name and email
- Each signer's name and email
- IP address and device for every action
- Viewed, consented and signed times (UTC)
- Each signer's adopted signature
- Signing order used
- Complete event history
Have a DocuSend PDF?
Confirm it has not been altered since it was sealed. The file never leaves your device; only its fingerprint is checked.
Verify a document