Legal Center

Read our transparent legal policies and agreements in our Legal Center to ensure full compliance with and understanding of BoldSign’s terms and conditions.

BoldSign has completed a SOC 2 Type 2 audit, and the report is available on request. Customers choose where data is stored and processed, across the United States, the European Union, Canada and Australia. A Data Processing Addendum is found here: DPA with EU Standard Contractual Clauses and the UK Addendum included by reference, and BoldSign publishes its full subprocessor list.

A HIPAA Business Associate Agreement is reviewed and accepted in the BoldSign account. Certifications and frameworks include TX-RAMP Level 2, HIPAA, GDPR and PCI DSS. Signatures are compliant and can be used in court under the US ESIGN Act and UETA, and under eIDAS across the European Union. Qualified electronic signatures (QES), the highest assurance tier under eIDAS, are supported through a qualified trust service provider.