DocuSign
Security and trust center evidence
Docusign brings agreements to
Summary
DocuSign has 3 registry-verified rows and 1 vendor-stated row in the CertReports index, last verified 1 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 25 Oct 2026, DocuSign is listed in the FedRAMP registry as FedRAMP Authorized, issued 10 Aug 2017 following an audit by Schellman Compliance, LLC. As of 26 Oct 2026, DocuSign is listed in the Visa Global Registry as PCI DSS validated through 31 Oct 2026, audited by BOTECH Fraud Prevention & Intelligence SL. As of 26 Oct 2026, DocuSign states on its trust centre that it holds ISO 27001. As of 26 Oct 2026, DocuSign is listed in the CSA STAR registry at Level 1 self-assessment (CAIQ), Trusted Cloud Provider, issued 25 Feb 2019. As of 26 Oct 2026, no public evidence found for SOC 2.
- FedRAMP - Authorized, listed in FedRAMP registry (as of 25 Oct 2026)
- PCI DSS - listed in Visa Global Registry, validated through 31 Oct 2026 (as of 26 Oct 2026)
- ISO/IEC 27001 - vendor states on its trust centre (as of 26 Oct 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 26 Oct 2026; it is regenerated whenever a row changes.
Among e-signature vendors
3verified rows
Category median 1.5, across 10 indexed e-signature vendors. DocuSign has more verified rows than 90 percent of them.
agreement managementdigital contractsdocument signingelectronic signature
Compare with similar vendors
Pick your own comparisonCompliance grid
FedRAMPVerifiedFedRAMP Authorized
as of 1 Nov 202646 sources · Schellman Compliance, LLC
PCI DSSVerifiedListed on the Visa Global Registry as PCI DSS validated through 2026-10-31
as of 26 Oct 20263 sources · BOTECH FRAUD PREVENTION & INTELLIGENCE SL.
ISO/IEC 27001Vendor-statedVendor states ISO 27001 on its trust centre
as of 1 Nov 202621 sources
CSA STARVerifiedSTAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider
as of 26 Oct 20266 sources
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Change history
- 26 Oct 2026PCI DSS auditor changedAuditor changed from A-LIGN Compliance and Security, Inc., dba A-LIGN to BOTECH FRAUD PREVENTION & INTELLIGENCE SL..
- 19 Oct 2026PCI DSS auditor changedAuditor changed from Enterprise Risk Management, Inc, (dba ERMProtect) to A-LIGN Compliance and Security, Inc., dba A-LIGN.
- 12 Oct 2026PCI DSS auditor changedAuditor changed from LBMC, PC to Enterprise Risk Management, Inc, (dba ERMProtect).
- 29 Sep 2026PCI DSS auditor changedAuditor changed from A-LIGN Compliance and Security, Inc., dba A-LIGN to LBMC, PC.
- 29 Sep 2026PCI DSS renewedExpiry moved from 2026-10-31 to 2027-06-30.
- 22 Sep 2026Trust centre movedTrust centre URL is now https://www.docusign.com/.
- 22 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
- 19 Sep 2026Trust centre movedTrust centre URL is now https://www.docusign.com/trust.
Similar vendors with evidence
Related by product tags and the E-signature category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Sertifi
E-signature
Sertifi offers an Agreement Platform built for businesses who need a more efficient and secure way to manage the full contract
HelloSign
E-signature
eSignature software for small and mid-market businesses.
OneSpan
E-signature
OneSpan, the digital agreements security company™, helps organizations accelerate digital transformations by enabling secure, compliant
SnapSign
E-signature
SnapSign is a Simple, Secure and Affordable Electronic Signature Platform that enables your to get documents eSigned
Evidence against regulations
All regulations for DocuSignHow much of each regulation’s vendor requirements DocuSign’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read