GDPR checklist for electronic signature tools.
E-signature tools store signed documents, signatory details and audit trails, often long term. Compare 2 common tools and see what to check for each.
DocuSign
PandaDocWhat to check for electronic signature tools
- Agree on how long signed documents and audit trails are kept.
- Check which signatory data the tool shares with the document owner.
- Record the region and any transfer outside the EEA.
- Confirm how a document is deleted when you need to.
All electronic signature tools
Questions, answered.
What should I check before using an electronic signature tool under the GDPR?
Agree on how long signed documents and audit trails are kept. Check which signatory data the tool shares with the document owner. Record the region and any transfer outside the EEA. Confirm how a document is deleted when you need to.
Do I need a data processing agreement with an electronic signature provider?
If the provider handles personal data on your behalf, yes: Article 28 of the GDPR requires a written contract. Some providers publish the text, others give it to you inside your account. Providers that decide their own purposes may act as independent controllers instead, so check the role.
Which electronic signature tools does Privacyboard cover?
DocuSign, PandaDoc. Each has a page with its agreement, usual role and data location, checked on 1 November 2026.
Other categories
Privacyboard is not affiliated with these vendors. Checked on 1 November 2026. This is guidance, not legal advice.