{
  "slug": "documenso",
  "category": "e-signatures",
  "name": "Documenso",
  "description": "Open-source electronic signature platform for sending and signing documents, available as a hosted service or for self-hosting.",
  "website": "https://documenso.com",
  "source": "https://github.com/documenso/documenso",
  "license": "AGPL-3.0",
  "platforms": [
    "web"
  ],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": true,
  "pick_reason": "Open-source document signing, hosted or self-hosted, as a replacement for DocuSign. The core is AGPL-3.0, and self-hosted instances keep signed documents on your own server.",
  "disclosure": null,
  "grade": "D",
  "score": 56,
  "coverage": 100,
  "summary": "Documenso scores 56 out of 100 (grade D) on the electronic signatures criteria. It meets 3 of 8 criteria: open source, no ads or data sales and TLS configuration. It partly meets no trackers or telemetry and security headers. It does not meet independent audit, transparency report and tells users about requests. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade B.",
  "url": "https://privacyratings.com/e-signatures/documenso/",
  "markdown": "https://privacyratings.com/e-signatures/documenso/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://github.com/documenso/documenso/blob/main/LICENSE",
      "note": "All code is public. The core is AGPL-3.0 and enterprise features in packages/ee use the source-available Documenso Commercial License."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://documenso.com/privacy",
      "note": "The website uses Plausible analytics, and self-hosted instances send anonymous telemetry by default, which can be turned off."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://documenso.com/privacy",
      "note": "Funded by paid plans. The privacy policy states that personal information is not sold or rented."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No independent audit is published."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No transparency report or government request policy is published."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published policy on notifying users about data requests."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=app.documenso.com&hideResults=on",
      "note": "Grade A"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=app.documenso.com",
      "note": "Grade B (75/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    }
  },
  "tests": {
    "ssllabs": "A",
    "observatory": "B",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Google Fonts",
        "host": "fonts.gstatic.com",
        "effect": "none"
      },
      {
        "name": "Plausible",
        "host": "plausible.io",
        "effect": "partial"
      }
    ],
    "tested_at": "2026-10-01T06:38:55.066Z"
  },
  "last_modified": "2026-10-01T06:56:31Z"
}