Fully Managed Documenso
as a Service

Regulation: ESIGN Act 15 USC §7001, UETA §7 (49 states), eIDAS Regulation (EU) 910/2014 for cross-border EU work, ABA Formal Opinion 477R (2017) on encrypted transmission of confidential client information.

Configuration we tune: EU or US region of the firm's choice; WORM-equivalent object-storage lifecycle for completed-envelope archive; per-team signing certificates so a departing attorney's cert can be revoked without invalidating historical envelopes; retention policy defaulted to the longer of the firm's bar minimums.

Workflow example: A senior partner uploads an engagement-letter PDF, drags signature, initial, and date fields onto it, and saves it as a template. The assistant generates a Direct Link, drops it into the Clio matter intake email, and the client signs from their phone. The signed PDF and RFC-3161 timestamp write back to Clio via Zapier.

Quantifiable: A 10-attorney firm typically generates 30 to 60 signed engagement letters per month. New York Rule 1.15(d)(1) mandates seven years of retention for financial and retainer records; California Rule 1.15(d) requires five. SLA expectation: 99.9% on the signing endpoint.

Regulation: 21 CFR Part 11 (FDA electronic records and signatures), EMA Annex 11 for computerised systems in GxP, ICH GCP E6(R3), EU Clinical Trial Regulation 536/2014.

Configuration we tune: Documenso Enterprise Edition license (Part 11 module is gated behind it); single-tenant instance (multi-tenant is a Part 11 risk); passkey re-authentication enforced on every signature for the Part 11 "uniquely authenticated, attributable, time-stamped" requirement; PostgreSQL point-in-time recovery enabled; append-only audit-log replication to immutable object storage.

Workflow example: Clinical Operations uploads an ICF amendment. A multi-recipient ordered workflow routes it to the Principal Investigator at each of the 14 trial sites for signature, then to the IRB chair for approval, then to each enrolled participant. Every signature requires fingerprint or passkey reauthentication. The resulting PDF is PAdES-LTV sealed and archived.

Quantifiable: A mid-size Phase 2 trial (200 participants × 14 sites) generates roughly 3,000 signed ICFs and amendments. FDA expectations on Part 11 records run to the lifetime of the product plus 25 years. SLA expectation: 99.95%+ during enrollment windows.

Regulation: EU data-protection law (Article 9 special-category data — health, race, religion in employment paperwork), USCIS Form I-9 electronic signature requirements under 8 CFR §274a.2(e–i), state employment rules (CA AB-5, NY WTPA), German BetrVG works-council provisions.

Configuration we tune: Region pinned to Germany or US depending on workforce; SSO via SAML 2.0 or OIDC against Okta or Entra ID; embedded widget configured for the customer's careers domain with CORS and CSP headers set; language pack (German, French, Spanish, English) selected at provisioning.

Workflow example: A candidate advances to "Offer Extended" in Greenhouse. A webhook creates a Documenso envelope from the "Senior Engineer Offer DE" template with merge-tag data. The candidate signs via the embedded widget on the company's careers site. On envelope.completed, BambooHR receives the signed PDF and creates the employee record.

Quantifiable: A 100-person company typically sees 8 to 15 signed offer letters per month and roughly 30 contractor and vendor agreements. Retention defaults: US FLSA 3 years for payroll-relevant records, German HGB §257 6 years for accounting-relevant employment records, four years post-termination as the industry baseline.

Regulation: FINRA Rule 4511 (books and records), SEC Rule 17a-4 (amended 2023 to permit WORM or record-log-based electronic recordkeeping), MiFID II Article 16(7) for EU investment-firm record-keeping, FFIEC IT Examination Handbook on managed-services oversight.

Configuration we tune: S3 object-lock in compliance mode for signed envelopes; audit logs replicated append-only to a separate cold-storage bucket; Documenso's RFC-3161 timestamping pointed at a qualified Time-Stamping Authority; SSO tied to the firm's IAM with break-glass procedures documented per FFIEC.

Workflow example: A wealth manager initiates new-account paperwork from the CRM. Documenso creates a sequential envelope with KYC, suitability questionnaire, and account-opening agreement. The client signs each in order. On completion, a webhook pushes the envelope and audit log to the compliance archive (S3 object-lock) plus a copy to OneDrive for the relationship manager.

Quantifiable: A 30-advisor RIA typically processes 400 to 800 signed envelopes per month. SEC Rule 17a-4 retention runs six years, with the first two in easily accessible storage. FINRA 4511 retention is six years. SLA expectation: 99.9%; MTTR target ≤4 hours.