“Docusign has adopted Binding Corporate Rules to facilitate the transfer of personal information from the European Economic Area and/or United Kingdom ("EEA") to Docusign outside of the EEA.”
This analysis describes what DocuSign's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Binding Corporate Rules are a formal cross-border data transfer mechanism under EU/UK data protection law; their adoption determines the legal basis on which EEA and UK personal data leaves those jurisdictions.
The updated privacy statement discloses that DocuSign collects marketing contact data from third-party sources, specifically from data provider Clay, which may include professional details such as job title, employer, and location. This data is used to support sales and marketing efforts. The policy also clarifies that individuals who opt out of email marketing will have minimum data retained to honor that request. These disclosures make explicit a practice that was previously not clearly described in the privacy statement.
View change record →If you are in the EEA or UK, your personal information transferred to DocuSign entities outside the EEA is governed by DocuSign's Binding Corporate Rules.
How other platforms handle this
If you send us, or enable us to collect, Business Products Data...you agree to the Business Products (Data) Terms.
We will share Personal Data that we collect, such as Account Information with any corporate affiliates...used for the purposes described in this Privacy Policy and generally to operate our business...
All transfers of information to service providers are covered by appropriate data agreements and, in the case of cross-border data transfers, legal mechanisms for doing so.
"Docusign has adopted Binding Corporate Rules to facilitate the transfer of personal information from the European Economic Area and/or United Kingdom ("EEA") to Docusign outside of the EEA.Excerpt from DocuSign's Privacy Statement
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
Binding Corporate Rules are a formal cross-border data transfer mechanism under EU/UK data protection law; their adoption determines the legal basis on which EEA and UK personal data leaves those jurisdictions.
If you are in the EEA or UK, your personal information transferred to DocuSign entities outside the EEA is governed by DocuSign's Binding Corporate Rules.
ConductAtlas has identified this type of provision across 281 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by DocuSign.