Questions before implementation of Docusign

Hello, we are working on a project to make the DocuSign solution available to our Group Treasury.

We have some questions for you and need specific answers due to the confidentiality of our activities and clients. Could you please help us answer the questions below:

• When data is collected by DocuSign, can they be anonymized? Where are they stored?
• How long is the data collected by DocuSign (accounts, identity documents, photos, videos, etc.) retained?
• After how long is the data (accounts, identity documents, photos, videos, etc.) deleted ? For example, for a user who leaves the group and therefore will no longer be able to access his account.
• Can we have a RACI matrix of access to different types of data?
• What are the different levels of access depending on the position/responsibility? For example: access to logs, signed documents, videos, identity documents. This is related to the previous question
• Describe the steps in the procedure for signing a complete document with video verification
• If I have a DocuSign account and I am a document signatory, is it possible to retain the initial verifications in my account (photos, video, etc) and only sign my name for subsequent signatures?
• If identity verification fails during DocuSign, what is the procedure?
• Who are DocuSign's subcontractors? We have identified IDVerse
• Will non-EU employees be able to access to Docusign? If yes, Could they sign using the same workflow as EU employees?
• Will it be possible to display an information notice to users during the workflow process? The location of this notice can be communicated to you if we decide to implement Docusign.