130 Total

Key Facts · in the document’s own words

With what does DocuSign use de-identified Customer Data?
“Building, training and maintaining our artificial intelligence models through machine learning that power certain of our Services using de-identified Customer Data (with customer consent)”
Version CA-V-002818, captured May 21, 2026 · live source ↗
Our reading, not the document’s words
DocuSign uses de-identified Customer Data, with customer consent, to build, train, and maintain the artificial intelligence models that power certain of its Services.
What has DocuSign adopted to facilitate transfer of personal information?
“Docusign has adopted Binding Corporate Rules to facilitate the transfer of personal information from the European Economic Area and/or United Kingdom ("EEA") to Docusign outside of the EEA.”
Version CA-V-002818, captured May 21, 2026 · live source ↗
Our reading, not the document’s words
DocuSign has adopted Binding Corporate Rules to facilitate the transfer of personal information from the European Economic Area and/or United Kingdom to DocuSign outside of the EEA.
For what is DocuSign not responsible regarding Customer Data or information?
“Certain features of third party integrations may use, transfer, and/or store Your Customer Data or information outside of the Services, and Docusign is not responsible for any such use, transfer, or storage.”
Version CA-V-002818, captured May 21, 2026 · live source ↗
Our reading, not the document’s words
DocuSign is not responsible for any use, transfer, or storage of Customer Data or information that occurs through third-party integrations outside of its Services.
Can the employing organization find that account and take certain actions that may affect it?
“When you create an account or user role with an email address assigned to you as an employee...that organization (if it is a Docusign customer with certain features) can find your account and take certain actions that may affect your account.”
Version CA-V-002818, captured May 21, 2026 · live source ↗
Our reading, not the document’s words
When an employee creates a DocuSign account using a work-assigned email address, the employing organization—if it is a DocuSign customer with certain features—can find that account and take certain actions that may affect it.
Does DocuSign knowingly sell the personal information of minors under 16 years of age without legally required affirmative authorization?
“Please note that we do not knowingly sell the personal information of minors under 16 years of age without legally required affirmative authorization.”
Version CA-V-002818, captured May 21, 2026 · live source ↗
Our reading, not the document’s words
DocuSign does not knowingly sell the personal information of minors under 16 years of age without legally required affirmative authorization.
Does DocuSign use Google Workspace APIs or Customer Data obtained through those APIs to develop, improve, or train generalized AI or ML models?
“Google Workspace APIs and Customer Data obtained through such APIs are not used to develop, improve, or train generalized AI and/or ML models.”
Version CA-V-002818, captured May 21, 2026 · live source ↗
Our reading, not the document’s words
DocuSign does not use Google Workspace APIs or Customer Data obtained through those APIs to develop, improve, or train generalized AI or ML models.
Stay ahead of the changes
Track DocuSign and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Summary
Generated by a model from the captured document; not read by a person

This document explains what personal information DocuSign collects about you—including how you use its services and your devices—and how it may share that information with event sponsors or marketing partners. Your employer can locate and take actions on a DocuSign account you created with a work email address if your employer is a DocuSign customer with certain features. DocuSign does not place third-party advertising cookies in its core products, and you may have the right to opt out of sales of your information or its use for targeted advertising, depending on your jurisdiction.

Analysis

DocuSign's Privacy Statement establishes the basis on which DocuSign collects, uses, and shares personal information across its Services, including behavioral and device-level data, with use of the Services framed as acknowledgment of those practices. It sets out DocuSign's use of de-identified Customer Data—with customer consent—to build and maintain AI models powering certain Services, while categorically prohibiting any use of Google Workspace API data for generalized AI or ML development. The statement defines cross-border transfer mechanisms, specifically Binding Corporate Rules for transfers of EEA and UK personal data to DocuSign outside those jurisdictions, and identifies sharing with event sponsors and joint marketing partners as a permitted data flow. DocuSign expressly disclaims responsibility for data handling by third-party integrations outside its platform, and establishes that its customer-facing products do not deploy third-party advertising cookies or disclose customer data to advertising and marketing partners.

What this means for you

Using DocuSign's Services means your personal information—including behavioral and device data—will be collected and used as described in its Privacy Notice. If you register for DocuSign-hosted events, webinars, or sweepstakes, your personal information may be shared with the sponsors of those events and with joint marketing partners. Importantly, if you created a DocuSign account with a work-assigned email, your employing organization may be able to locate that account and take actions affecting it. DocuSign uses de-identified Customer Data to train AI models only where customer consent has been obtained, and it does not use Google Workspace API data for AI development. If applicable law gives you the right to opt out of the sale of your information or its use for targeted advertising, you may exercise that right by contacting DocuSign as described in its Privacy Notice.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

1 important change detected

5 versions captured · Latest change detected by ConductAtlas: May 2026

May 21, 2026

medium
What changed DocuSign expanded its privacy statement to clarify that it collects personal information not only from individuals who directly access its services, but also from those with whom it communicates in connection with the services. The policy now explicitly discloses that it obtains marketing contact data (professional details, email, phone, job title, employer, location) from third-party data provider Clay to support sales and marketing efforts. The policy also clarifies that when users opt out of email marketing, DocuSign retains minimum data necessary to honor the opt-out request.
Why this matters The updated privacy statement discloses that DocuSign collects marketing contact data from third-party sources, specifically from data provider Clay, which may include professional details such as job title, employer, and location. This data is used to support sales and marketing efforts. The policy also clarifies that individuals who opt out of email marketing will have minimum data retained to honor that request. These disclosures make explicit a practice that was previously not clearly described in the privacy statement.
View full change record →
Clauses withheld

We withheld clauses we had published from this document. Each withholding is recorded in our correction log:

Featured provisions
Generated by a model from the captured document; not read by a person

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

130 provisions
12 featured
16 clause types
Privacy Rights 37
Show all 37 privacy rights provisions
Targeting and Audience Restrictions 1
Stay ahead of the changes

Monitoring

DocuSign has updated this document before. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle AI Models Designed to Avoid Personal Information Training and similar clauses.

Compare across platforms →
Archival ProvenanceSource & Archival Record
This version captured May 21, 2026 00:21 UTC
Last successful capture October 15, 2026 00:27 UTC
Date stated by the document October 9, 2025 (as printed in this version)
Capture Method Automated scheduled archival capture
Document ID CA-D-000198
Version ID CA-V-002818
SHA-256 (extracted text, extractor v5) cecb7b679a86e4c8688c4a253f996bc2ee16b5a36bc2cb3e435dadd6364b7ad3
✓ Snapshot stored Archived-bytes anchor not yet recorded

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 343 platforms.

Start monitoring → Compare plans