Electronic signature privacy ratings

Services for sending documents and collecting legally binding signatures.

11 electronic signatures are rated against 9 public criteria, and 11 have enough evidence for a letter grade. Our pick is Documenso. Of the 11 with a known jurisdiction, 8 are based in a Five Eyes country, and 9 in the wider Fourteen Eyes.

Criteria for this category · Suggest an addition · Markdown

Electronic signatures privacy ratings, sorted by pick and then by grade
Name	Grade	Score	Data	Jurisdiction	Open source	No trackers or telemetry	No ads or data sales	Independent audit	Transparency report	Tells users about requests	TLS configuration	Security headers	Modern web standards
Documenso Our pick Open-source electronic signature platform for sending and signing documents, available as a hosted service or for self-hosting.	Grade D	56	100%	United States Five Eyes	Yes	Partial	Yes	No	No	No	Yes	Partial	Not tested yet
DocuSeal Open-source platform for creating fillable PDF forms and collecting electronic signatures, available as a hosted service or for self-hosting.	Grade D	53	100%	United States Five Eyes	Partial	Partial	Yes	Partial	No	No	Yes	Partial	Not tested yet
Dropbox Sign Electronic signature service from Dropbox, formerly HelloSign, for sending and signing documents online, with an API for adding signatures to other apps.	Grade D	50	100%	United States Five Eyes	No	No	Partial	Partial	Yes	Yes	Yes	Yes	Not tested yet
OpenSign Open-source electronic signature platform for preparing, sending and signing PDF documents, offered as a hosted service or for self-hosting.	Grade D	44	100%	India Outside Eyes	Yes	No	Yes	No	No	No	Yes	No	Not tested yet
Zoho Sign Electronic signature service from Zoho for sending, signing and tracking documents, with integrations into other Zoho apps.	Grade D	41	100%	India Outside Eyes	No	Partial	Yes	Partial	No	No	Yes	No	Not tested yet
Adobe Acrobat Sign Adobe's electronic signature service for sending, signing and tracking documents, with integrations for Microsoft 365, Salesforce and other business apps.	Grade F	38	100%	United States Five Eyes	No	No	No	Partial	Yes	Yes	Yes	No	Not tested yet
Docusign Electronic signature service for sending, signing and tracking agreements, part of Docusign's agreement management platform.	Grade F	38	100%	United States Five Eyes	No	No	Partial	Partial	Partial	Yes	Yes	No	Not tested yet
PandaDoc Document automation and electronic signature service for proposals, quotes and contracts, run by PandaDoc, Inc. in San Francisco. Data can be stored in the US or the EU.	Grade F	25	100%	United States Five Eyes	No	No	Partial	Partial	No	No	Yes	No	Not tested yet
SignNow Electronic signature service from airSlate, Inc. in the United States, for sending, signing and tracking documents, with an API for other apps.	Grade F	25	100%	United States Five Eyes	No	No	Partial	Partial	No	No	Yes	No	Not tested yet
SignWell Electronic signature service from Docsketch, LLC in the United States, for sending and signing documents, with templates and an API.	Grade F	25	100%	United States Five Eyes	No	No	Partial	Partial	No	No	Yes	No	Not tested yet
Youtrust Electronic signature and identity verification service from Youtrust SAS in Caen, France, formerly Yousign. The platform is hosted in France.	Grade F	22	100%	France Nine Eyes	No	No	Partial	Partial	No	No	Partial	Partial	Not tested yet

Questions

What is the most private option among electronic signatures?

Our pick is Documenso. Open-source document signing, hosted or self-hosted, as a replacement for DocuSign. The core is AGPL-3.0, and self-hosted instances keep signed documents on your own server.

How are electronic signatures rated?

Each entry answers 9 questions: open source, no trackers or telemetry, no ads or data sales, independent audit, transparency report, tells users about requests, TLS configuration, security headers and modern web standards. Answers need links to evidence. See the full criteria.

Does jurisdiction matter?

Jurisdiction decides which laws can compel a provider to hand over data. Each entry shows its country and whether it is in the Five, Nine or Fourteen Eyes. The data a provider can hand over depends mostly on what it stores and who holds the keys. Read about jurisdictions and the CLOUD Act.