Prevent External Updates of Recipient Company Information

Business Need

We request a setting that allows organizations to prevent external DocuSign accounts from modifying or populating recipient profile/contact information, specifically the standard Company field, when signature requests are sent from external organizations.

Current Behavior

When a recipient completes the standard Company field during a signing process, the value may be stored and reused in future envelopes associated with the same email address. If an envelope is sent from an external DocuSign account, the external organization can indirectly cause updates to information that may later appear in subsequent signing experiences.

Currently, there is no administrative setting that allows organizations to:

• Block updates to the Company field originating from external DocuSign accounts.
• Lock recipient profile information against external modifications.
• Define trusted sources authorized to update recipient contact information.
• Disable the persistence of externally provided Company values.

Business Impact

This behavior creates governance and compliance concerns for organizations operating in regulated environments.

Specifically:

• Company information can be overwritten by individuals outside the organization.
• Data displayed to users may originate from external sources without validation.
• Internal administrators have no visibility or control over how these values are populated.
• Incorrect company information may be inherited across future signing transactions.
• Organizations cannot ensure the integrity and provenance of recipient profile data.

For our organization, it is not acceptable that information such as the Company field can be freely overwritten by external users and subsequently propagated without any control or validation by the recipient's organization.

Requested Enhancement

Introduce one or more administrative controls, such as:

1. Prevent external updates to recipient profile/contact information.
2. Block persistence of Company values provided through external envelopes.
3. Allow only internal senders to update recipient contact data.
4. Enable administrators to lock the standard Company field.
5. Provide auditing and reporting of profile changes and their originating sender organization.

Expected Benefit

This enhancement would improve:

• Data governance
• Regulatory compliance
• Information integrity
• Auditability
• Administrative control over recipient profile data

while maintaining flexibility for organizations that wish to continue using the current behavior.

We believe organizations should have full administrative control over recipient profile data. Information such as the Company field should not be editable or persistable through external DocuSign accounts without an explicit tenant-level policy and administrative consent.

Thank you

Daniela