DocuSign Trust Center
Your source for our latest security, compliance, legal, privacy and system performance information
Trust Alerts View System StatusTransparency is essential
DocuSign’s first priority is to make your experience safe and secure—and to ensure you have the information you need to feel comfortable transacting business online. That’s why we created the Trust Center: to give you access to the latest DocuSign security, compliance, legal, privacy, and system performance information, when and where you need it.
Trust resources
-
Third-party risk management
Learn MoreRead how third-party risk management teams evaluate e-signature solutions.
-
Are electronic signatures safe?
Read the postLearn how e-signatures are more secure than wet signatures.
-
Security and legal collaboration
Read the white paperLearn how successful teams work together to protect their organization from harm.
DocuSign compliance certifications
DocuSign meets or exceeds stringent US, EU and global security standards. Our commitment to and significant ongoing investment toward protecting customer data extends to all of DocuSign’s operating environments.
Alerts and updates
DocuSign has observed a new phishing campaign in which malicious URLs are being hidden in fake/imitation DocuSign-themed emails.
The emails have been spoofed to appear to be sent from dse@docusign[.]net or dse@docusign[.]com. These emails did not originate from our legitimate DocuSign email servers. They contain the following subject line:
-
“Re: Document to Sign and Complete”
The emails contain a link to a phishing page that is hosted on the following domain:
-
hxxps://ipfs[.]fleek[.]co/ipfs/<ID of letters and numbers>/
DocuSign does not use this service . Please treat any DocuSign-themed emails with a link to “ipfs[.]fleek[.]co” as phishing.
Do not click on any email or attachment links from unknown or untrusted senders. All customers are reminded that they should continue their own due diligence and identify and report to DocuSign any suspicious emails using legitimate DocuSign accounts and technology ( securityaccountabuse@docusign.com ), as well as suspicious emails spoofing the DocuSign brand ( spam@docusign.com ). Customers should also continue to utilize their own organization’s security tools to investigate potentially malicious documents, links and notifications.
For more information on how to spot phishing, please see our Combating Phishing and Protecting Your Organization Against DocuSign Brand Impersonation white papers.
The DocuSign CLM, CLM.CM, and CLM Essentials January 23.1 product release will be released to the UAT environment on Thursday, December 8, 2022, between 8:00 PM and 11:00 PM, US Central Time. We do not anticipate any impact to platform availability or access during this time.
Announcements for this upcoming release can be found on the DocuSign Support Center . Please continue to check the Support Center for enhancements and fixes that will be posted before UAT deployment.
Please contact Technical Support if you have any questions.
Please see the DocuSign Support Portal, Connect Certificates page for further details on the new certificate "Offer" and “Force” scheduled date.