DocuSign Policy: Response to User Data Requests
At DocuSign, we are committed to operating our business with the utmost integrity and highest ethical standards. The purpose of this policy is to provide basic guidance regarding response to governmental and civil investigations and inquiries. Consistent with DocuSign’s Terms and Conditions and Privacy Policy, DocuSign responds to valid legal process to the extent consistent with the federal Stored Communications Act, 18 U.S.C. §§ 2701 et seq. (the “SCA”) and other applicable laws. In fulfilling its legal obligations, DocuSign respects the privacy of its customers’ data while also acknowledging its customers’ business needs to be able to establish an audit trail for contracts executed on DocuSign’s platform.
ACCESS TO ACCOUNT HOLDER’S RECORDS
Parties seeking data related to a DocuSign transaction or account should always attempt to obtain the relevant data directly from the account holder before approaching DocuSign. Account holders generally have access to the same transactional records that DocuSign may be able to produce in response to legal process. Only account holders and their recipients have access to the content of their documents that may be stored on the DocuSign system, as provided in the Terms and Conditions.
SERVICE
Legal process should be served on DocuSign’s registered agent United Agent Group, Inc., located at West 505 Riverside Avenue #500, Spokane, WA 99201. A copy may also be provided electronically to legalprocess@docusign.com. DocuSign may reject legal process that is not properly served. Acceptance of legal process at any of the DocuSign office addresses, or via fax or email, is for convenience and does not waive any objections, including lack of jurisdiction or proper service.
NOTICE
DocuSign has a policy of providing notice to its customers regarding legal process requesting information about their accounts. This policy applies both to requests made by governmental entities and to requests made pursuant to civil litigation between private parties. DocuSign will provide notice to its customer(s) of a request prior to disclosure, unless a legally binding non-disclosure order or other legal mechanism requires delaying or prohibits such notice or in exceptional circumstances, such as to prevent imminent physical harm or financial loss, report suspected illegal activity, or where notice would be counterproductive. Law enforcement officials who believe that notification would jeopardize an investigation should obtain an appropriate court order or other appropriate process establishing that notice is prohibited.
DATA AVAILABLE
DocuSign will search for data that is specified with particularity. Accounts must be identified by name and email address and/or a DocuSign issued identification number, such as an Account ID or Envelope ID in an appropriate form of legal process. DocuSign may produce basic customer account information and other transactional information if properly requested by legal process and if consistent with the SCA. DocuSign encrypts the contents of its customer’s documents that may be stored on its system and cannot provide a decrypted or plain text version. Access to any form of content requires either a search warrant or appropriate user consent.
PRESERVATION
DocuSign will comply with preservation requests by governmental entities pursuant to 18 U.S.C. § 2703(f) and take steps to preserve available account records for 90 days, which may be extended for an additional 90 days pursuant to a preservation extension request by the governmental entity.
FOREIGN REQUESTS
DocuSign is a United States company and all of its U.S.-based data is stored inside the U.S. As such, DocuSign only responds to valid legal process issued by a U.S. governmental entity or court and properly served on it in the U.S. Parties to civil litigation or governmental entities outside the U.S. should appropriately domesticate requests through a U.S. court by working through the appropriate process for international cooperation, such as letters rogatory or a Mutual Legal Assistance Treaty. More information may be available by contacting the Office of International Affairs at the U.S. Department of Justice. DocuSign may disclose data pursuant to an emergency disclosure request when we believe that doing so is necessary to prevent death or serious physical harm to someone. [For more information about the emergency disclosure request process, please contact legalprocess@docusign.com.]
TESTIMONY
DocuSign does not provide expert testimony support. DocuSign records are self-authenticating pursuant to law and should not require the testimony of a records custodian. If a special form of certification is required, please attach it to your records request.
COST REIMBURSEMENT
DocuSign may seek reimbursement for costs incurred responding to requests for information as provided by law and may also charge additional fees for costs incurred in responding to unusual or burdensome requests. DocuSign may waive these fees at its sole discretion.
Effective Date: May 5, 2015