Docusign eSignature and the GDPR: AI training, data location and DPA

Trains on your data unless you switch it off.

Yes, for new buyers: customers who bought eSignature on the website on or after 8 Jul 2026 consent to Docusign training its AI on their data, anonymised and aggregated first; the account's AI data controls setting is on by default. Customers who bought before that date have not consented

Source: docusign.comSection 2 table 'Web Plan Customers and Users' and Section 4.1 (version date 8 Jul 2026)Second source: support.docusign.comChecked on 17 October 2026

You can switch the training off.

Yes. Account administrators can turn off the AI data controls toggle under Admin > AI Control Settings; from then on Docusign stops ingesting the account's data, but data already anonymised for training is kept

Source: support.docusign.comSection 'Turn the AI data controls setting off or on' and FAQ 'What happens to my data if I turn the AI data controls setting off?' (last updated 21 Sep 2026)Second source: docusign.comChecked on 17 October 2026

Set by location: Agreement Data is stored in one of five data center regions (US, Canada, Europe, Australia, Japan), chosen automatically for web customers as the region closest to where the account is signed up

Source: docusign.comQuestion 'Where is my data physically stored?' (last updated 14 Apr 2026)Checked on 17 October 2026

EU hosting available.

Yes: Europe is one of Docusign's five data center regions and Agreement Data stays in the account's region; support staff in any Docusign company may see limited personal information, but not document contents

Source: docusign.comQuestion 'Where is my data physically stored?'Second source: docusign.comChecked on 17 October 2026

DPA in the terms.

Yes. The web-plan Data Protection Attachment (version date 9 Jan 2025) is incorporated into and made part of the Terms

Source: docusign.comOpening paragraphChecked on 17 October 2026

39 listed.

Public. 39 supplier rows for eSignature and its add-ons: hosting by 365 Data Centers, Centersquare, Equinix and Microsoft Azure, email by Amazon SES, AI by Microsoft Azure AI Services and Google Vertex AI, the rest for optional ID checks, SMS and other add-ons; plus 4 support suppliers and 18 Docusign companies

Source: assets.ctfassets.netSection 'Docusign eSignature Service and Related Service Add-ons' (last updated 8 Oct 2026)Second source: docusign.comChecked on 17 October 2026

Not listed.

No listing found for search terms 'DocuSign' and 'Docusign'; Docusign relies on Binding Corporate Rules approved by EU data protection authorities

Source: dataprivacyframework.govSearches 'DocuSign' and 'Docusign' returned no resultsSecond source: docusign.comChecked on 17 October 2026

Customers set envelope retention and can purge documents at any time (an audit log can be kept); on request before the Terms end, Docusign deletes personal data as soon as reasonably practicable. Anonymised AI training data is kept with no duty to delete

Source: docusign.comSection 'Destruction or Retrieval of Personal Data'Second source: docusign.comChecked on 17 October 2026

ISO/IEC 27001:2022, 27017:2015 and 27018:2019; SOC 1 Type II and SOC 2 Type II; PCI DSS 4.0; BSI C5 Type II (eSignature); FedRAMP; EU qualified trust service provider under eIDAS (Docusign France)

Source: docusign.comPage 'Docusign Global Certifications, Self-Assessments, and Standards'Checked on 17 October 2026

Partly: admins can switch off AI training (AI data controls); the switch for the AI assistant and agents is only for IAM plans in North America, so no AI features switch is documented for Business Pro in Europe

Source: support.docusign.comArticle 'Manage AI Features for an Account' (last updated 2 Sep 2026), NoteSecond source: support.docusign.comChecked on 17 October 2026

€38 / user / mo.

EUR 38 per user/month billed annually (EUR 456 a year); VAT basis not stated

Source: ecom.docusign.comPlan card 'Business Pro' (German page)Checked on 17 October 2026