@Mike Beveridge
You are absolutely correct in your understanding. When documents are sent as attachments, they are transmitted over HTTPS with TLS (Transport Layer Security) 1.3 (or lower, depending on the recipient’s configuration) to secure the communication from sender to recipient, minimizing the risk of interception during transmission. However, the risk increases once the email lands in the recipient's inbox.
DocuSign provides several features and options that help ensure security at the recipient’s side, even after the document has been delivered. Here are some effective security options you can implement:
Access Authentication for Recipients
DocuSign offers multiple ways to authenticate recipients before they can access or sign the document:
-
Access Code Authentication: The sender can set a one-time passcode (OTP) or access code, which the recipient must enter before viewing the document. This code can be shared separately (e.g., by phone).
-
SMS Authentication: A verification code is sent to the recipient’s mobile phone via SMS. The recipient must enter this code to access the document.
-
Knowledge-Based Authentication (KBA): For U.S.-based recipients, KBA can be enabled, where the recipient must answer a series of questions based on public and personal information.
-
ID Verification: DocuSign provides options to verify the recipient’s identity using government-issued ID or similar methods. This adds an additional layer of security.
By implementing these options, you can enhance the security of DocuSign envelopes and ensure that the recipient accesses the document in a secure manner.
Welcome to the DocuSign Community! Your feedback is highly valued. If you find my response helpful, please give it a "Like" and consider marking it as the "Best Answer" to assist others with similar issues.
Back to Docusign.com
