Prevents falling behindOff-the-shelf productEstablished, AI retrofitted

Docusign

Docusign, Inc. ·www.docusign.com· As of: 2026-08-11

Sends documents out for signature, guides recipients through the signing flow, verifies their identity where requested, and records an audit trail for each transaction that is meant to evidence the signature later.

Work through this tool with an AI

ClaudeChatGPTPerplexity

Our verdict

A contract printed out for signature costs days that competitors no longer lose. Signing electronically wins those days back, and a dozen vendors ship the same function. What procurement therefore has to settle is the signature level the case at hand requires: the simple electronic signature sits in every plan, the qualified one costs an extra 10 euros per recipient, and only the latter holds where German law requires written form (Schriftform). That level decides both the price and the evidential position, and it never sits at the top of a feature list.

Evidence:As of 2026-08-11Legal entity, address, managing director, register court Amtsgericht Frankfurt am Main, HRB 111200 and VAT identification number of the German entityOpen sourceAs of 2026-08-11Registration of Docusign Germany GmbH on 12 March 2018, former name mertus 416. GmbH, share capital of 25,000 euros and filed annual accounts up to the financial year ending 31 January 2025Open sourceAs of 2026-08-11Data processing agreement in German dated 1 December 2022, order of precedence of documents, incorporation of the standard contractual clauses under Decision (EU) 2021/914, thirty days notice for new subprocessors, and the exclusion of bulk retrieval on termination in clause 10Open sourceAs of 2026-08-11AI attachment dated 8 July 2026: allocation of training consent by product and contract type, the 8 July 2026 cut-off for eSignature licences bought through the website, perpetual and irrevocable licence, survival beyond contract end, and an opt-out effective going forwardOpen sourceAs of 2026-08-11Indefinite retention of transaction data beyond the subscription and the statement that it can neither be deleted nor exported even at the customer request, plus the content and purpose of the Certificate of CompletionOpen sourceAs of 2026-08-11Five data centre regions, availability of the European region for eSignature, IAM and CLM, fixed at account provisioning, and the named data that leaves the region by design, page dated 14 April 2026Open sourceAs of 2026-08-11Public subprocessor list with purpose and country, group entities with countries, ANSSI supervision of Docusign France SAS as qualified trust service provider, and a subscription for changesOpen sourceAs of 2026-08-11Announcement of 5 August 2026 naming the AI suppliers Microsoft Azure AI Services, Google Vertex AI and DocuSmart, Inc. dba Lexion, and the addition of Sierra Technologies, Inc. for an in-product support chatOpen sourceAs of 2026-08-11Attestations with standard and version, among them ISO 27001:2022, ISO 27017:2015, ISO 27018:2019, C5 Type II from the German Federal Office for Information Security, SOC 1 and SOC 2 Type II, and PCI DSS 4.0, plus approval of the Binding Corporate Rules on 16 March 2018 in both rolesOpen sourceAs of 2026-08-11Plan prices of 9, 23 and 38 euros, envelope allowances of five per month and 100 per user per year, the qualified signature as an add-on at 10 euros per recipient, and the allocation of SSO, advanced signature and custom limits to the quoted tierOpen sourceAs of 2026-08-11Quarterly announcement of 4 June 2026 with revenue of 830.2 million US dollars, up 9 per cent, free cash flow of 289.4 million US dollars, share repurchases of 317.5 million US dollars, and close to 1.9 million customersOpen sourceAs of 2026-08-11Partnership with D-Trust of the Bundesdruckerei group for the qualified electronic signature in Germany since 2018, and an explanation of the role of a qualified trust service providerOpen sourceAs of 2026-08-11The vendor commentary on the AI regulation with risk tiers and deadlines as of 2024, without any statement on the Article 50 transparency duties for its own AI layerOpen source

Who it fits

Solo

suitable

The Personal plan costs 9 euros a month on annual billing and allows five envelopes per month. For one person having a handful of orders signed each month that is enough. Anyone needing a qualified signature pays an extra 10 euros per recipient and quickly ends up above the base price.

Mid-market

suitable

Standard costs 23 euros, Business Pro 38 euros per user per month on annual billing. The envelope allowance bites long before the price does: 100 envelopes per user per year, identical in both plans. A sales team having offers signed weekly runs out in October. Custom limits only appear in the quoted plan, which is also where SSO sign-in sits.

Enterprise

suitable

For a vendor review there is unusually much on the table: a C5 attestation from the German Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik), Binding Corporate Rules approved both as processor and as controller, a German-language data processing agreement, and an EU region for all three main products. Two points remain before signing: AI training on your own contract data is the default for IAM and has to be actively switched off, and the data processing agreement explicitly rules out any bulk retrieval of your own data.

Buy, switch or build

Off-the-shelf

Adobe Acrobat Sign, or what the existing framework agreement already covers

Adobe Acrobat Sign covers the same job and in many organisations already sits inside the framework agreement for document tooling, which cuts one round out of procurement. Corporates stay for a second reason that has little to do with features: the chain of evidence hangs off whichever vendor produced the signature. Long-term contracts get challenged years later, and anyone who has switched vendors has to assemble the audit trail from two sources. That inertia is a matter of caution here rather than habit.

AI-native

Buying the signature from a European trust service

Anyone who mainly needs the qualified signature can buy it directly in Europe, for instance from Skribble in Switzerland or Yousign in France, both billing per signature rather than per user seat. For the analysis layer above it, Ironclad is a counterpart that treats the contract as a data record rather than a document. What you give up is the bundling: signature, storage, analysis and audit trail then sit with two or three vendors, each with its own contract, its own data processing agreement and its own seam in between. The prices of those vendors deserve checking first-hand before deciding, because they behave differently with signature volume than a per-seat price does.

Build it yourself

Building the flow yourself and buying in the signature

Building the signing flow yourself is feasible; producing the qualified signature yourself is not. It may only come from a qualified trust service provider, in Germany for instance D-Trust with sign-me, in Switzerland from Swisscom Trust Services. What remains is the flow around it, and that is manageable: sign-in through Ory, delivery through Cloudflare Pages, keys and access in Infisical, built with Claude Code. Two to three person-days to the first signature is realistic for the simple case. The bill arrives afterwards, from the evidence. An audit trail that holds up in court has to be complete, tamper-evident and readable for years, even after the database has moved three times. That is where self-building fails, and it fails late: the defect only shows up in the single dispute where the signature is contested.

Our advice

  • Solo: Take Personal, and first work out how often a qualified signature is genuinely required.
  • Mid-market: Buy, but check the envelope allowance before the plan.
  • Enterprise: Buy, and before signing switch off AI training and settle the data export route in writing.

Who is behind it

Staying power: Established

The vendor has been in the market since 2003, listed since April 2018, and reports quarterly. The German entity has been registered since March 2018 and has filed annual accounts ever since. Development visibly continues, most recently on the AI layer, which runs on acquired technology and on models from Microsoft and Google.

  • Legal entity in Germany: Docusign Germany GmbH, Mies-van-der-Rohe-Strasse 4, 80807 Munich, managing director Hugo De La Torre, local court (Amtsgericht) Frankfurt am Main, commercial register HRB 111200, VAT ID DE815769757; the register has carried the company since 12 March 2018, formerly trading as mertus 416. GmbH, with share capital of 25,000 eurosAs of 2026-08-11Legal entity, address, managing director, register court Amtsgericht Frankfurt am Main, HRB 111200 and VAT identification number of the German entityOpen source · As of 2026-08-11
  • Group and stock listing: Docusign, Inc. was founded in 2003 and has been listed on the Nasdaq under the ticker DOCU since 27 April 2018As of 2026-08-11en.wikipedia.org/wiki/DocusignOpen source · As of 2026-08-11
  • First-quarter results: Announcement of 4 June 2026 for the first quarter of fiscal 2027: revenue of 830.2 million US dollars, 9 per cent above the prior-year quarter, free cash flow of 289.4 million US dollars, share repurchases of 317.5 million US dollars, and by the vendor own account close to 1.9 million customers; the billings metric is no longer reported from this quarter onwardsAs of 2026-08-11Quarterly announcement of 4 June 2026 with revenue of 830.2 million US dollars, up 9 per cent, free cash flow of 289.4 million US dollars, share repurchases of 317.5 million US dollars, and close to 1.9 million customersOpen source · As of 2026-08-11
  • Acquisition of the AI layer: In May 2024 the vendor announced the acquisition of Lexion for 165 million US dollars in cash; that entity now appears as DocuSmart, Inc. dba Lexion among the AI suppliers in the subprocessor listAs of 2026-08-11Announcement of 5 August 2026 naming the AI suppliers Microsoft Azure AI Services, Google Vertex AI and DocuSmart, Inc. dba Lexion, and the addition of Sierra Technologies, Inc. for an in-product support chatOpen source · As of 2026-08-11
  • Standing as a trust service provider: Docusign France SAS is listed as a qualified trust service provider under Regulation (EU) No 910/2014 in the French Trusted List and is supervised by ANSSI; two of its own remote signing devices appear in the member states compilation of qualified signature creation devices. For the German qualified signature the vendor has worked with D-Trust of the Bundesdruckerei group since 2018, and with A-Trust for AustriaAs of 2026-08-11Attestations with standard and version, among them ISO 27001:2022, ISO 27017:2015, ISO 27018:2019, C5 Type II from the German Federal Office for Information Security, SOC 1 and SOC 2 Type II, and PCI DSS 4.0, plus approval of the Binding Corporate Rules on 16 March 2018 in both rolesOpen source · As of 2026-08-11

Cost of leaving: High

The documents themselves come out, one at a time and through the API. Three things stay behind. First, clause 10 of the data processing agreement states explicitly that no bulk retrieval is offered for the return of data and that the customer must engage Professional Services or customer support against a fee. Second, for transaction data and the Certificate of Completion the vendor states that it can neither delete nor export them even at the customer request, because the service is not architected for it. Yet those are precisely the records that carry the evidential weight of the signature. Third, templates, signing orders and the flows embedded in portals and emails all hang off the vendor address. Whoever moves takes the documents along and leaves behind the evidence of how they came about.

Regulation and data

How to read the traffic lightHow to read the traffic lightThe traffic light rates how well a point is evidenced, not how good the tool is. It draws only on the value, note and source held in the profile. Where a statement is missing, it rates the absence, not a guess. A well-reasoned "unclear" on a point that matters little for this tool is yellow. A missing source on a point that decides whether you can use it at all is red.documented, no condition attacheddocumented, tied to a conditiondocumented, but unfavourableopen on a point that decides usability
Data processing agreementScale for this point: Data processing agreementdocumented, no condition attached: Auftragsverarbeitungsvertrag öffentlich abrufbar und ohne weitere Bedingung Bestandteil des Vertrags; oder er entfällt nachvollziehbar begründet, weil kein Anbieter Kundendaten verarbeitet.documented, tied to a condition: Vertrag existiert, ist aber an einen Tarif gebunden, nur nach Anfrage einsehbar oder allein in den Nutzungsbedingungen geregelt statt als eigenes Dokument.documented, but unfavourable: Kein Auftragsverarbeitungsvertrag im üblichen Sinn: entweder weil der Anbieter für das Kerngeschäft eigenständig Verantwortlicher ist und stattdessen eine andere Konstruktion gilt, oder weil öffentlich offen bleibt, ob überhaupt einer angeboten wird.open on a point that decides usability: Weder ein Vertrag noch ein dokumentierter Weg zu einem Vertrag; der Einkauf hätte nichts, worauf er sich stützen kann.documented, no condition attachedseparate document, in German, publicly availableAs of 2026-08-11Data processing agreement in German dated 1 December 2022, order of precedence of documents, incorporation of the standard contractual clauses under Decision (EU) 2021/914, thirty days notice for new subprocessors, and the exclusion of bulk retrieval on termination in clause 10Open sourceThe data processing agreement exists as a separate document in German, carries the version date 1 December 2022 and is, by its own wording, part of the agreement without any further condition. It sets an order of precedence in which the Binding Corporate Rules rank ahead of the standard contractual clauses and those ahead of the main body. Alongside the German version the vendor maintains separate versions for France and Brazil.As of 2026-08-11
Storage locationScale for this point: Storage locationdocumented, no condition attached: EU-Speicherort ohne Zusatzkosten und ohne Tarifbindung, oder der Ort ist vollständig selbst bestimmbar, weil das Werkzeug im eigenen Betrieb läuft.documented, tied to a condition: EU-Speicherort möglich, aber an einen Tarif, einen gesondert zu aktivierenden Zusatz oder einen Umzug in eine getrennte Umgebung gebunden; oder die EU-Region ist nicht die Voreinstellung.documented, but unfavourable: Kein EU-Speicherort, der Ort ist aber eindeutig benannt, sodass die Folgen bewertbar sind.open on a point that decides usability: Der Speicherort ist öffentlich nicht benannt oder vom Kunden nicht steuerbar, sodass sich die Verarbeitung nicht verorten lässt.documented, tied to a conditionEU region for all three main products, audit trail and identifying data leave itAs of 2026-08-11Five data centre regions, availability of the European region for eSignature, IAM and CLM, fixed at account provisioning, and the named data that leaves the region by design, page dated 14 April 2026Open sourceThe vendor runs five regions: United States, Canada, Europe, Australia and Japan. The European region is available for eSignature, IAM and CLM, with data centres in Amsterdam, Frankfurt and Paris according to the vendor. Two limitations appear on the same page, dated 14 April 2026: the region is fixed when the account is provisioned, and part of the data leaves it by design. Named are sender and signer names and email addresses used for authentication, plus audit trail metadata with unique IDs and IP addresses. Support operates on a follow-the-sun model, so staff in other regions can access transaction data; document content is excluded from this and stays encrypted according to the vendor.As of 2026-08-11
SubprocessorsScale for this point: Subprocessorsdocumented, no condition attached: Vollständige öffentliche Liste der Unterauftragnehmer mit Zweck und Land; oder es gibt keine, weil das Werkzeug im eigenen Betrieb läuft.documented, tied to a condition: Liste existiert und ist benannt, aber nur nach Anfrage oder nach Zugang zu einem Vertrauensportal einsehbar, oder sie nennt Zweck und Land nicht vollständig.documented, but unfavourable: Keine geführte Liste; namentlich stehen nur einzelne Dienste in der Datenschutzerklärung, überwiegend solche der eigenen Website.open on a point that decides usability: Weder eine Liste noch eine Nennung der Verarbeiter des Produkts, und kein dokumentierter Weg, sie zu erfahren.documented, no condition attachedpublic list with purpose and country, changes announced with datesAs of 2026-08-11Public subprocessor list with purpose and country, group entities with countries, ANSSI supervision of Docusign France SAS as qualified trust service provider, and a subscription for changesOpen sourceThe list is available as a freely accessible document and names each subprocessor with purpose and country, separated into infrastructure, platform and customer success. Changes are published with dates in the alerts section and can be subscribed to; clause 7 of the data processing agreement promises thirty days notice and a right to object. The announcement of 5 August 2026 reveals who runs the AI layer: Microsoft with Azure AI Services, Google with Vertex AI, and the acquired DocuSmart, Inc. dba Lexion; newly added was Sierra Technologies, Inc. for an in-product AI support chat. Two observations for a vendor review: the document sits outside the vendor domain on a delivery service, and the version linked on 11 August 2026 carries the word Draft in its file title.As of 2026-08-11
Third-country transferScale for this point: Third-country transferdocumented, no condition attached: Keine Übermittlung in ein Drittland, oder die Übermittlung findet statt und die Grundlage ist benannt und im Vertrag verankert, etwa Standardvertragsklauseln, Angemessenheitsbeschluss oder EU-US-Datenschutzrahmen.documented, tied to a condition: Übermittlung findet statt, eine Grundlage ist genannt, aber ohne Zuordnung, welcher Empfänger auf welcher Grundlage arbeitet.documented, but unfavourable: Übermittlung findet statt und die eigenen Unterlagen widersprechen sich, oder die genannte Grundlage bezieht sich erkennbar nur auf einen Randbereich wie die Marketing-Website.open on a point that decides usability: Übermittlung findet erkennbar statt und eine Grundlage wird nirgends genannt.documented, no condition attachedBinding Corporate Rules as processor and as controller, plus standard contractual clausesAs of 2026-08-11Data processing agreement in German dated 1 December 2022, order of precedence of documents, incorporation of the standard contractual clauses under Decision (EU) 2021/914, thirty days notice for new subprocessors, and the exclusion of bulk retrieval on termination in clause 10Open sourceThe European supervisory authorities approved the Binding Corporate Rules on 16 March 2018 in both roles, as processor and as controller. The data processing agreement additionally incorporates the standard contractual clauses under Implementing Decision (EU) 2021/914, module 2 for controller-to-processor transfers and module 3 for the chain below, with general written authorisation under clause 9. The UK addendum applies for the United Kingdom, and the Swiss deviations are named individually. A basis is therefore assigned to every group of recipients.As of 2026-08-11
Training on customer dataScale for this point: Training on customer datadocumented, no condition attached: Vertraglich oder in der Datenschutzerklärung ausdrücklich ausgeschlossen, mit Erstreckung auf die eingesetzten Modellanbieter; oder es gibt keine Datenübertragung an einen Anbieter.documented, tied to a condition: Ausschluss ab einem bestimmten Tarif, oder die Zusage steht nur auf einer Dokumentationsseite statt im Vertrag, oder die Frage stellt sich für das Werkzeug sachlich kaum und der Anbieter schweigt dazu.documented, but unfavourable: Nutzung ist die Voreinstellung und nur ein Widerspruch beendet sie; oder der Anbieter trainiert eigene Modelle auf bereinigten Kundendaten.open on a point that decides usability: Keine Aussage, obwohl das Werkzeug KI-Funktionen auf Kundeninhalten betreibt.documented, but unfavourabledefault for IAM and CLM, opt-out available, a cut-off date decidesAs of 2026-08-11AI attachment dated 8 July 2026: allocation of training consent by product and contract type, the 8 July 2026 cut-off for eSignature licences bought through the website, perpetual and irrevocable licence, survival beyond contract end, and an opt-out effective going forwardOpen sourceThe AI attachment dated 8 July 2026 settles this in a table, and that table is the most valuable find in the entire document set. For IAM and CLM the customer consents to training on its own contract data by entering the contract. For eSignature on its own this does not apply as long as a master services agreement is in place. For plans bought through the website, a cut-off date decides instead: anyone who licensed eSignature before 8 July 2026 does not consent, anyone buying after that date does. Two points shape the picture. The licence granted is perpetual and irrevocable, it survives the end of the contract, and the vendor is not obliged to delete AI improvement data created earlier. The opt-out is available at any time through a button in the product but only takes effect going forward. Before use, customer data is anonymised and aggregated according to the vendor.As of 2026-08-11
Retention and deletionScale for this point: Retention and deletiondocumented, no condition attached: Löschfristen nach Vertragsende beziffert und die Löschung oder Rückgabe zugesagt; oder die Fristen bestimmt der Betreiber selbst, weil das Werkzeug im eigenen Betrieb läuft.documented, tied to a condition: Löschung ist zugesagt, die Fristen sind aber nur teilweise beziffert, oder Sicherungskopien sind ausdrücklich ausgenommen.documented, but unfavourable: Nur der Grundsatz der Erforderlichkeit ohne jede Frist nach Vertragsende, oder Fristen sind allein für Randbereiche wie Website-Protokolle genannt.open on a point that decides usability: Keine Aussage zu Aufbewahrung und Löschung.documented, tied to a conditiondeletion on request promised, without a period; transaction data kept indefinitelyAs of 2026-08-11Indefinite retention of transaction data beyond the subscription and the statement that it can neither be deleted nor exported even at the customer request, plus the content and purpose of the Certificate of CompletionOpen sourceClause 10 of the data processing agreement promises to delete personal data as quickly as possible at the customer request. No period in days is given, and archived backups are explicitly excluded; they are instead isolated and protected from further processing. Read separately from this is the statement on transaction data: the vendor retains it beyond the end of the subscription, indefinitely, and by its own account even where the customer requests deletion. It justifies this by its role as a neutral third party that must still be able to evidence a challenged transaction later.As of 2026-08-11
CertificationsScale for this point: Certificationsdocumented, no condition attached: Mehrere anerkannte Nachweise, benannt mit Norm, Fassung und Geltungsbereich, und bezogen auf den Anbieter selbst.documented, tied to a condition: Ein anerkannter Nachweis für den Anbieter belegt, der Bericht aber nur auf Anfrage, oder der Nachweis hängt an einem Tarif, oder der Geltungsbereich bleibt teilweise offen.documented, but unfavourable: Nur pauschale Nennung ohne Norm-Fassung und Geltungsbereich, oder bloße Selbstauskunft, oder die Nachweise gehören dem Infrastrukturanbieter statt dem Anbieter, oder der Prüfzeitraum ist erkennbar veraltet, oder die eigenen Angaben widersprechen sich.open on a point that decides usability: Kein Nachweis genannt und keine Sicherheits- oder Vertrauensseite vorhanden.documented, no condition attachedISO 27001:2022, 27017:2015 and 27018:2019, C5 Type II, SOC 1 and SOC 2 Type II, PCI DSS 4.0As of 2026-08-11Attestations with standard and version, among them ISO 27001:2022, ISO 27017:2015, ISO 27018:2019, C5 Type II from the German Federal Office for Information Security, SOC 1 and SOC 2 Type II, and PCI DSS 4.0, plus approval of the Binding Corporate Rules on 16 March 2018 in both rolesOpen sourceThe attestations are named with standard and version and relate to the vendor itself. For the German market the decisive one is the C5 Type 2 attestation against the criteria catalogue of the German Federal Office for Information Security, scoped to the eSignature product. Added to that are FedRAMP and GovRAMP authorisations for the government edition and a DISA provisional authorisation at level IL4. The audit reports themselves sit in the Trust Portal and require authentication and a signed non-disclosure agreement, which is customary for reports of this kind. The certification list contains no ISO/IEC 42001 for artificial intelligence management systems.As of 2026-08-11
EU AI Act, Article 50Scale for this point: EU AI Act, Article 50documented, no condition attached: Der Anbieter macht eine belegte Aussage, die die eigene Pflicht trägt, etwa Modelldokumentation und Zertifizierung nach ISO/IEC 42001; oder das Werkzeug enthält nachvollziehbar begründet kein KI-System im Sinne der Verordnung.documented, tied to a condition: Der Anbieter äußert sich zur Verordnung oder ordnet die eigene Funktion ein, eine benannte Zusage zu den Transparenzpflichten aus Artikel 50 fehlt aber; oder das Werkzeug enthält kein KI-System, das gegenüber Menschen auftritt, und der Anbieter schweigt.documented, but unfavourable: Das Produkt enthält KI-Funktionen, der Anbieter schweigt dazu oder trägt ein Selbstetikett ohne Nachweis; die Kennzeichnung ist vom Betreiber aber selbst setzbar.open on a point that decides usability: KI spricht im Produkt unmittelbar mit Endkunden und der Anbieter sagt zu Artikel 50 nichts; die Kennzeichnung lässt sich ohne Zusage des Anbieters nicht sicher setzen.documented, tied to a conditiondetailed commentary on the regulation, no commitment on its own roleAs of 2026-08-11The vendor commentary on the AI regulation with risk tiers and deadlines as of 2024, without any statement on the Article 50 transparency duties for its own AI layerOpen sourceThe vendor comments at length on the AI regulation, but as a use case for its own contract management: the German-language post explains the risk tiers and recommends managing supplier contracts and evidence through its product. What is missing is any classification of its own role. On the Iris AI layer, which analyses contracts and flags risks, there is no commitment regarding the transparency duties in Article 50 of Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744, which apply from August 2026. The post also works from the 2024 position and cites the deadlines applicable then. Because Iris operates towards the customer own staff rather than towards its end customers, the disclosure can be set in-house. That does not follow as readily for the in-product support chat added in August 2026.As of 2026-08-11
Audit loggingScale for this point: Audit loggingdocumented, no condition attached: Nachvollziehbares Protokoll über Zugriffe und Änderungen in allen Tarifen enthalten, mit benannter Frist und Ausleitung in eigene Systeme; oder die Nachvollziehbarkeit liegt vollständig in eigener Hand, weil das Werkzeug im eigenen Betrieb läuft.documented, tied to a condition: Protokoll vorhanden, aber an einen höheren Tarif oder einen kostenpflichtigen Zusatz gebunden, oder die Ausleitung fehlt in den unteren Stufen; Reichweite und Frist sind benannt.documented, but unfavourable: Protokolle sind nur anbieterseitig beschrieben, oder Reichweite und Frist bleiben offen, sodass sich Nachweispflichten nicht planen lassen.open on a point that decides usability: Öffentlich nicht belegt, ob der Kunde überhaupt ein auswertbares Protokoll erhält.documented, tied to a conditionaudit trail per transaction in every plan, no bulk retrievalAs of 2026-08-11Indefinite retention of transaction data beyond the subscription and the statement that it can neither be deleted nor exported even at the customer request, plus the content and purpose of the Certificate of CompletionOpen sourceEach transaction produces a Certificate of Completion recording participants, timestamps, consents and technical identifiers such as IP addresses, and usable in court according to the vendor. The pricing table lists the real-time audit trail as included in all four tiers. Scope is therefore named, and so is the period: indefinite. What is missing is the export. The customer can download documents and certificates individually during the term; bulk retrieval is ruled out by the data processing agreement, which points to paid assistance instead. Anyone wanting to keep evidence in their own systems has to settle that route before signing.As of 2026-08-11

What it really costs

Entry price

The German pricing page lists three plans on annual billing: Personal at 9 euros a month and 108 euros a year, Standard at 23 euros per user per month and 276 euros a year, Business Pro at 38 euros per user per month and 456 euros a year. Monthly billing is up to 44 per cent more expensive according to the toggle. The fourth tier is quoted by sales.As of 2026-08-11Plan prices of 9, 23 and 38 euros, envelope allowances of five per month and 100 per user per year, the qualified signature as an add-on at 10 euros per recipient, and the allocation of SSO, advanced signature and custom limits to the quoted tierOpen source

As of 2026-08-11

What gets expensive

In three places, none of them in the headline price. First at the signature level: the qualified electronic signature is a paid add-on at 10 euros per recipient in the three web plans, and the advanced signature is only included in the quoted plan and otherwise a matter of negotiation. Second at the envelope allowance: Personal allows five envelopes a month, Standard and Business Pro 100 per user per year each, and a custom limit only comes through sales. Third at administration: SSO sign-in, central organisation management and round-the-clock support also sit on the quoted tier. Identity verifications and SMS delivery are listed in Standard as a one-off bonus of five each.

What it displaces

  • Print, sign, scan, send back
  • Posting contract copies for countersignature
  • Chasing by hand who has not signed yet

Interfaces

  • API for envelopes, templates and recipients, plus SDKs for common languages
  • Webhooks through Connect on send, view, sign and complete
  • Embedded signing inside your own interfaces
  • Connections to Salesforce, SAP, Microsoft 365 and Google Workspace
  • App Center with over 1,000 pre-built integrations according to the vendor
  • Qualified signature through D-Trust, A-Trust and Swisscom Trust Services
  • Access for AI tools through a dedicated MCP server

Matching methods

  • MEDDIC / MEDDPICCThe method treats the paper process as a checkpoint of its own alongside the decision process, because deals routinely stall there, and the signing flow is where that checkpoint becomes observable at all.
  • Bowtie Funnel / Revenue ArchitectureThe method places commitment as the measurable handover between the two halves, and the signature with its timestamp is the one record of it that does not have to be estimated.
  • Regulatory Density TestThe method asks how much regulation a market carries and who earns from it; the tiers of the eIDAS regulation are a case in point, because the highest tier is tied to a state-supervised authorisation and therefore cannot be competed away.

Sources

  1. 1.Legal entity, address, managing director, register court Amtsgericht Frankfurt am Main, HRB 111200 and VAT identification number of the German entity (opens in a new tab)docusign.com/de-de/unternehmen/impressum · As of 2026-08-11
  2. 2.Registration of Docusign Germany GmbH on 12 March 2018, former name mertus 416. GmbH, share capital of 25,000 euros and filed annual accounts up to the financial year ending 31 January 2025 (opens in a new tab)northdata.com/…/Amtsgericht+Frankfurt+am+Main+HRB+111200 · As of 2026-08-11
  3. 3.Data processing agreement in German dated 1 December 2022, order of precedence of documents, incorporation of the standard contractual clauses under Decision (EU) 2021/914, thirty days notice for new subprocessors, and the exclusion of bulk retrieval on termination in clause 10 (opens in a new tab)docusign.com/…/germany · As of 2026-08-11
  4. 4.AI attachment dated 8 July 2026: allocation of training consent by product and contract type, the 8 July 2026 cut-off for eSignature licences bought through the website, perpetual and irrevocable licence, survival beyond contract end, and an opt-out effective going forward (opens in a new tab)docusign.com/…/germany · As of 2026-08-11
  5. 5.Indefinite retention of transaction data beyond the subscription and the statement that it can neither be deleted nor exported even at the customer request, plus the content and purpose of the Certificate of Completion (opens in a new tab)docusign.com/trust/security/transaction-data-use · As of 2026-08-11
  6. 6.Five data centre regions, availability of the European region for eSignature, IAM and CLM, fixed at account provisioning, and the named data that leaves the region by design, page dated 14 April 2026 (opens in a new tab)docusign.com/privacy/data-residency · As of 2026-08-11
  7. 7.Public subprocessor list with purpose and country, group entities with countries, ANSSI supervision of Docusign France SAS as qualified trust service provider, and a subscription for changes (opens in a new tab)docusign.com/trust/privacy/subprocessors-list · As of 2026-08-11
  8. 8.Announcement of 5 August 2026 naming the AI suppliers Microsoft Azure AI Services, Google Vertex AI and DocuSmart, Inc. dba Lexion, and the addition of Sierra Technologies, Inc. for an in-product support chat (opens in a new tab)docusign.com/… · As of 2026-08-11
  9. 9.Attestations with standard and version, among them ISO 27001:2022, ISO 27017:2015, ISO 27018:2019, C5 Type II from the German Federal Office for Information Security, SOC 1 and SOC 2 Type II, and PCI DSS 4.0, plus approval of the Binding Corporate Rules on 16 March 2018 in both roles (opens in a new tab)docusign.com/trust/compliance/certifications · As of 2026-08-11
  10. 10.Plan prices of 9, 23 and 38 euros, envelope allowances of five per month and 100 per user per year, the qualified signature as an add-on at 10 euros per recipient, and the allocation of SSO, advanced signature and custom limits to the quoted tier (opens in a new tab)ecom.docusign.com/de-DE/plans-and-pricing/esignature · As of 2026-08-11
  11. 11.Quarterly announcement of 4 June 2026 with revenue of 830.2 million US dollars, up 9 per cent, free cash flow of 289.4 million US dollars, share repurchases of 317.5 million US dollars, and close to 1.9 million customers (opens in a new tab)investor.docusign.com/…/default.aspx · As of 2026-08-11
  12. 12.Partnership with D-Trust of the Bundesdruckerei group for the qualified electronic signature in Germany since 2018, and an explanation of the role of a qualified trust service provider (opens in a new tab)docusign.com/…/partnerschaft-d-trust-und-docusign · As of 2026-08-11
  13. 13.The vendor commentary on the AI regulation with risk tiers and deadlines as of 2024, without any statement on the Article 50 transparency duties for its own AI layer (opens in a new tab)docusign.com/… · As of 2026-08-11
  14. 14.en.wikipedia.org/wiki/Docusign (opens in a new tab)As of 2026-08-11

Last reviewed: 2026-08-11 by Dr. Oliver Gausmann, Convios GmbH

Details out of date? Let us know.

← Back to the toolbox