Vendor profile
Docusign: where is customer data stored and processed?
DocuSign's customers are mainly businesses, so this is a business product. Customer data is stored in the account's datacenter region, which is one of five regions where the customer can choose Europe, but the country in Europe is not stated; for accounts provisioned in the EU, Azure is used for storage and processing, and the USA is used via 365 Data Centers for customers outside EU/EEA. Login and identity verification use several sub-processors, including Idura for Norway as an optional add-on, and the country for these is not confirmed. Level 1 support is provided by Cognizant from Hungary, the Philippines, Japan, Costa Rica and India, and email is sent via Amazon SES from several European countries and the UK, with SMS via Vonage from the Netherlands.
Checked 13 October 2026 · based on the vendor's own public documents
See the map and sources
Where data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|
| Storage | Europe (country not stated) | –
Only for customers in other regions: USA |
|---|
| Processing | Europe (country not stated), France | –
Only for customers in other regions: USA |
|---|
| Login and user account | Norway, France | –
Only for customers in other regions: Japan, United Kingdom, USA |
|---|
| Notifications and email | Germany, Ireland, Italy, Sweden, France, Netherlands | United Kingdom
Only for customers in other regions: USA |
|---|
| Support | Hungary | Philippines, Japan, Costa Rica, India |
|---|
| Group companies | – | India |
|---|
| AI features | Europe (country not stated) | –
Only for customers in other regions: USA, Canada, Australia, Japan, Switzerland |
|---|
Only outside the EU/EEA, with no European alternative stated: Group companies.
Ownership and agreements
| Owner | DocuSign, Inc. (USA) |
|---|
| Headquarters | USA |
|---|
| Data processing agreement | Not found on the vendor's website |
|---|
| Certifications | ISO/IEC 27001, SOC 1, SOC 2, PCI DSS, ISO/IEC 27017, ISO/IEC 27018 |
|---|
Sub-processors (41)
| Name | Country | Purpose |
|---|
| 365 Data Centers | USA | Infrastruktur (eSignature) |
| Centersquare | USA | Infrastruktur (eSignature) |
| Equinix | Tyskland, Nederland, USA, Frankrike | Infrastruktur (eSignature, CLM) |
| Amazon SES | USA, Australia, Canada, Japan, Tyskland, | E-postutsending |
| Switch | USA | Infrastruktur (CLM) |
| GBG | Storbritannia, USA | Identitetsverifisering |
| Australia Post | Australia, New Zealand | Identitetsverifisering |
| FranceConnect | France | Identitetsverifisering |
| LexisNexis Risk Solutions | USA, Australia | KBA, e-post- og SSN-verifisering |
| LIQUID, Inc. | Japan | Identitetsverifisering, eSignature |
| OneID Limited | United Kingdom | Identitetsverifisering |
| Onfido | Storbritannia, USA | Identitetsverifisering |
| Idura ApS | Danmark, Sverige, Norge, Finland | Identitetsverifisering |
| Socure | USA | Identitetsverifisering (risikobasert) |
| Docaposte Arkhineo | France | Arkivering av bevis for QES/AES |
Sources