# Zoho Sign privacy rating

Electronic signature service from Zoho for sending, signing and tracking documents, with integrations into other Zoho apps.

## Summary

Zoho Sign scores 41 out of 100 (grade D) on the electronic signatures criteria. It meets 2 of 8 criteria: no ads or data sales and TLS configuration. It partly meets no trackers or telemetry and independent audit. It does not meet open source, transparency report, tells users about requests and security headers. It is based in India: Not in the Five, Nine or Fourteen Eyes. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B-.

- Website: https://www.zoho.com/sign/
- Jurisdiction: India. Not in the Five, Nine or Fourteen Eyes.
- Platforms: Web, Android, iOS
- Home page trackers: none found
- Category: [Electronic signatures](https://privacyratings.com/e-signatures/)
- Also rated: [Zoho Mail](https://privacyratings.com/email-providers/zoho-mail/) (Email providers), [Zoho Workplace](https://privacyratings.com/office-suites/zoho-workplace/) (Office suites), [Zoho Forms](https://privacyratings.com/forms/zoho-forms/) (Forms and surveys)
- Grade: D (41/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | Partial | Zoho states it does not use third-party tracking on its websites, but it uses first-party cookies to track visitor activity. | https://www.zoho.com/privacy.html |
| No ads or data sales | Yes | Funded by subscriptions. The privacy policy states that Zoho does not sell personal information or earn money from advertising. | https://www.zoho.com/privacy.html |
| Independent audit | Partial | Zoho has SOC 2 Type 2 audits by an independent firm. The reports are available to customers, not publicly. | https://www.zoho.com/compliance.html |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=sign.zoho.com&hideResults=on |
| Security headers | No | Grade B- (65/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=sign.zoho.com |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/e-signatures/zoho-sign/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/e-signatures/zoho-sign.md