Docusign security breach of customer private info?

Question

Recently completed DocuSign doc and then an email coming to my gmail account stating the forms have been completed also had PDF attachments that had been provided inside the secure DocuSign application with personal ID info such as Driver’s License, Military Dependent ID and the completed form with SSN info.  I contacted Newtek Bank for whom the DocuSign forms were completed to establish a joint owner for an account.  They stated they have no control over 3rd party applications (i.e., DocuSign) used for this purpose.  I asked if they would provide a picture of a credit card, SSN card, etc., as an attachment to an unsecured email, they said of course not.  So why is this private ID info showing up as PDFattachment’s to an unsecured email from Josh xxx via DocuSign?

Luke.Cervantes · Accepted Answer

Hi ​@Jon1930,Welcome to the Docusign Community! We’re happy to have you here.I understand why receiving completed forms containing driver’s license, military dependent ID, and Social Security number as email attachments was concerning. You are right to question why sensitive information was delivered this way.The behavior you described typically occurs when the Docusign account used by the sender of the envelope/document, has the option to attach completed documents to the completion email enabled. When that option is enabled, Docusign sends the completed documents as PDF attachments to the envelope’s senders and signers/recipients. Docusign does not independently select which identity documents are included; those documents were uploaded to the envelope by the sender.Envelope DeliveryOnce a PDF is delivered as a standard email attachment, its handling is subject to the security of the recipient’s email account and can potentially be downloaded, forwarded, or stored outside Docusign. Docusign cannot control how an attachment is handled after delivery.Please contact the sender of the envelope promptly and ask them to:Confirm why the documents were included in the completion email.Disable the option to attach completed documents to completion emails for envelopes specially if the documents arecontaining sensitive personal information.Explain what steps they are taking to address your privacy concern.If you would like Docusign to review the delivery behavior, please provide the envelope ID andthe sender’s email address via Private Message.Please do not send your Social Security number, identificationdocuments, or unredacted copies of the forms.Regards,Luke | Docusign Community ModeratorIf this helped, select "Best Answer ✅" so other users can see it too!

Sign up

You can login or register as either a Docusign customer or developer. If you don’t already have a Docusign customer or developer account, you can create one for free when registering.

Docusign Community

You can login or register as either a Docusign customer or developer. If you don’t already have a Docusign customer or developer account, you can create one for free when registering.