DocuSign is a publicly traded (Nasdaq: DOCU) e-signature and agreement-management SaaS company. Its privacy notice describes broad but purpose-bound data categories collected for its various products (identity/contact data, account data, contract/transactional data, device and consent-based location data, plus marketing and advertising data for its own promotional activities), with a CCPA-style disclosure table showing most personal-information categories are marked "we do not sell/share this information." Notably, the policy states DocuSign does not deploy third-party advertising cookies or disclose customer data to advertising/marketing partners within its core products (eSignature, Contact Lifecycle, Identify), reserving third-party ad-tech use for its separate marketing website. Its Apple App Store privacy label lists first-party analytics, diagnostics, and marketing-use categories linked to identity. The company's FY2026 Form 10-K (filed with the SEC) confirms full ownership traceability as a Nasdaq-listed public company. The one identified concrete incident is a May 2017 malicious email campaign in which a non-core system exposed a list of customer email addresses (no names, passwords, financial data, or signed documents); no FTC or state-AG order was found.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
7 ON FILE
COLLECTION
DocuSign's Apple App Store privacy label lists Purchases, Location, Contact Info, Contacts, User Content, Identifiers, Usage Data, and Diagnostics as data categories collected and linked to the user's identity.
DocuSign's privacy notice lists the categories of personal information it collects directly from users, including identifiers and contact information such as name, email address, mailing address, phone number, or electronic signature.
DocuSign, Inc.'s Form 10-K for the fiscal year ended January 31, 2026, filed with the SEC, confirms its common stock is registered and trades on the Nasdaq Global Select Market under ticker symbol DOCU.
DocuSign's CCPA-style personal-information disclosure table marks most data categories as not sold or shared (e.g. internet/electronic network activity information is 'N/A – we do not sell/share this information'), but the same notice states its marketing websites — distinct from its core products — allow third-party advertising and marketing partners such as ad networks, ad-measurement services, and remarketing providers to use cookies to deliver targeted content and advertising.
DocuSign's own May 2017 security-alert notice states a malicious third party gained temporary access to a non-core communication system containing a list of customer email addresses, and that forensic analysis confirmed no names, passwords, financial data, or other sensitive information — nor any signed documents — were accessed.
DocuSign's Apple App Store privacy label states that contact data (email address, name) linked to the user's identity may be used for the developer's own advertising or marketing purposes and for analytics, listed separately from any third-party cross-app tracking category.
DocuSign's privacy notice states it does not deploy third-party advertising cookies within its core products (eSignature, Contact Lifecycle, Identify) and does not disclose customer data to advertising or marketing partners, distinguishing the product from its separate marketing website.