Alerts and updates
Subscribe using the DocuSign Trust Center Alerts RSS feed URL: https://www.docusign.com/trust/alerts/feed.
Add an RSS reader extension to your browser (Chrome, Firefox), or enable via Outlook on a PC.
-
04/20/2020
DocuSign CLM UAT accounts will be unavailable Thursday, April 30, 2020 from 21:00 - 23:00 CDT for the 20.4 Product release. We apologize for any inconvenience.
Release Notes for this upcoming release can be found on our Community Site.
Please contact Technical Support at https://support.docusign.com/ if you have any questions.
-
04/16/2020
Your privacy and security are of the utmost importance to DocuSign. Many of the recent public concerns raised about the Zoom service center on issues related to the free or personal version of their service. DocuSign utilizes a highly encrypted enterprise version of Zoom for all its internal and external meetings and engagements. All video, audio, and screen sharing sessions are protected with the Advanced Encryption Standard (AES) 256 using a one-time key for that specific session.
In addition to this encryption, to secure and to prevent unexpected guests from joining our Zoom meetings and webinars, DocuSign has enhanced security across its Zoom implementation as of Wednesday, April 15. These security enhancements include requiring encrypted passwords to join and host meetings as well as to access meeting recordings. Additionally, we have enabled the waiting room feature by default to vet guests.
Passwords are enforced for all Zoom meetings including pre-scheduled, instant, and webinar formats. The encrypted passwords are embedded in the meeting link to enable “one-click” joining, so participants need not type a password when joining DocuSign Zoom sessions via this method.
We have been in touch with and collaborated with Zoom directly on these issues and concerns. We are confident that our DocuSign led Zoom meetings and events will continue to be secure moving forward.
-
04/13/2020
DocuSign has observed a new phishing campaign that spoofs DocuSign, suggesting that all contract documents associated with your "COVID-19 AFFIDAVIT for property" is completed. The email is coming from "brome526[@]bdhomes.com" and the URL within is https[:]//realestatesecuredocuments[.]org/2UCloO4. The final landing page is https[:]//realestateproperties.estate/x787xe8ruh22@/inline.php. The subject line is "Re: TK464351 COMPLETED DOCUSIGN : COVID 19 AFFIDAVIT for property" and similiar.
These emails are not sent from DocuSign. Do not click on the link in these emails, instead please forward them to spam@docusign.com and then delete the email immediately.
For more information on how to spot phishing please see our Combating Phishing white paper.
-
04/13/2020
DocuSign has observed a new phishing campaign that spoofs DocuSign. The email is using the email address "Mario.DaSilvaMelo[@]du.edu." The emails have the subject line similar to:
"A Document was sent to you for review for Covid-19 update."
These emails contain a link to a malicious script. These emails are not sent from DocuSign. Do not click on the link in these emails, instead please forward them to spam@docusign.com and then delete the email immediately.
For more information on how to spot phishing please see our Combating Phishing white paper (3.3 MB)
-
04/13/2020
DocuSign has observed a new phishing campaign that spoofs DocuSign. The email appears to come from Monty Hardy, Monty[@]redapplefinance.com. The emails have the subject line similar to:
"UPDATE on COVID-19 LOCKDOWN."
These emails contain a link to a malicious script. These emails are not sent from DocuSign. Do not click on the link in these emails, instead please forward them to spam@docusign.com and then delete the email immediately.
For more information on how to spot phishing please see our Combating Phishing white paper (3.3 MB)
-
03/27/2020
The renewed NA3 site certificate was enforced on the scheduled date of March 18, 2020. The renewed NA3 site certificate can be found on the DocuSign Trust Center Public Certificates page at https://www.docusign.com/trust/compliance/public-certificates.
-
03/27/2020
DocuSign has observed a new phishing campaign that spoofs not only DocuSign, but also the WHO (World Health Organization), and is delivered through Sendgrid, a well-known email service provider. The email purports to come from "DocuSign with World Health Organization” or similar using the email address “contato@redem4.com.br” and "coronov19_selfserviceBR@who.com.” The emails have the subject line similar to:
"Health Message: Important health guidelines and information about corona virus"
These emails contain a link to a malicious script. These emails are not sent from DocuSign. Do not click on the link in these emails, instead please forward them to spam@docusign.com and then delete the email immediately.
For more information on how to spot phishing please see our Combating Phishing white paper (3.3 MB)
-
03/27/2020
DocuSign has observed a new phishing campaign that spoofs not only DocuSign, but is attempting to take advantage of the global COVID-19 situation by claiming to contain FAQs as they relate to your company's health insurance plan, and whether testing for the virus is covered. The email is using the email address “abuse@createandgo.com” and the SMTP address of "awwco@zygcsj.com." The subject line is "COVID-19 Update T Customers" and similiar.
These emails are not sent from DocuSign. Do not click on the link in these emails, instead please forward them to spam@docusign.com and then delete the email immediately.
For more information on how to spot phishing please see our Combating Phishing white paper.
-
03/25/2020
Funding will go to the CDC Foundation, United Nations Foundation and the Silicon Valley Community Foundation to support vulnerable populations, nonprofits and small businesses impacted globally
This is an unprecedented moment in time, with the COVID-19 pandemic requiring companies and sectors to stand together in an urgent, coordinated global response. At DocuSign we are proud to join forces with 24 other Bay Area companies to commit an initial $22M in collective funding for organizations on the front lines.
DocuSign funds will support Silicon Valley Community Foundation’s COVID-19 Coronavirus Regional Response Fund. These funds will specifically support low-income individuals and families, nonprofit organizations and small businesses that are impacted by this crisis in each of the 10 Bay Area counties.
“We and our Bay Area community foundation partners are proud to lead this effort to raise funds and shepherd critical resources for those most in need in our region during this unprecedented global crisis. We are grateful that local companies are committing themselves to helping our communities. In such uncertain times, it is uplifting to witness the philanthropic and business sectors coming together to take powerful action,” said Nicole Taylor, Silicon Valley Community Foundation President and CEO.
In addition to DocuSign’s support for the Bay Area initiative, the DocuSign IMPACT Foundation is matching employee contributions to other regional organizations at 200% to help serve the communities around the world most affected by this crisis.
To align efforts, increase impact and encourage other companies to get involved, 24 companies are coming together to support several other organizations, including the CDC Foundation’s Emergency Response Fund and the United Nations Foundation’s COVID-19 Solidarity Response Fund. These funds will help communities and public health responders meet the challenges posed by the COVID-19 pandemic.
“Philanthropic and private sector support is critical for use alongside government funding to address needs that arise in emergency responses where speed and flexibility are paramount to saving and protecting lives,” said Judy Monroe, MD, president and chief executive officer of the CDC Foundation. “That’s why flexible philanthropic and private sector support is imperative. We are incredibly grateful to see everyone coming together at this time to address the very dangerous coronavirus threat.”
Funding for the United Nations Foundation’s COVID-19 Solidarity Response Fund will support the global public health response. These funds will directly support the World Health Organization’s work to help countries prevent, detect, and respond to the COVID-19 pandemic.
“All of us have a personal stake in conquering this pandemic,” said Elizabeth Cousens, President & CEO of the UN Foundation. “And we can bend the curve if we take swift, smart action now. Contributions to the COVID-19 Solidarity Response Fund will support the World Health Organization’s lifesaving work – and we are immensely grateful.”
We are joining with Autodesk, Box, Cisco, Dropbox, GitHub, Intuit, LinkedIn, NetApp, Okta, PagerDuty, Palo Alto Networks, Pledge 1%, Postmates, Pure Storage, Salesforce, SAP, ServiceNow, Silicon Valley Bank, Slack, SurveyMonkey, Twilio, Workday, Zoom Video Communications and Zuora in this effort. We urge other companies to join us in supporting their local and global communities during this evolving crisis.
To get involved, visit the CDC Foundation’s Emergency Response Fund, the United Nations Foundation COVID-19 Solidarity Response Fund and Silicon Valley Community Foundation COVID-19 Regional Response Fund.
-
03/23/2020
The DocuSign CLM and CLM.CM April 20.3 Product Release will be deployed to the NA11, NA21, EU11, EU21 Production environments on Friday, April 3, 2020 between 9:00 PM and Midnight, US Central Time.
We don't anticipate any impact to availability or access during this Product Release.
Release Notes for this upcoming release can be found on the DocuSign Support Center.
Please contact Technical Support if you have any questions.
-
03/19/2020
Please see the DocuSign trust page at https://www.docusign.com/trust/compliance/public-certificates for further details on the enforcement of the account.docusign.com certificate.
-
03/16/2020
By Joan Burke, Chief People Officer and Emily Heath, Chief Trust & Security Officer, DocuSign
Update: March 16, 2020
Our thoughts are with everyone who has been affected by COVID-19. We know how challenging this situation can be, especially as we learned that a handful of our own employees have tested positive for the virus.
Amid the changes to the social distancing guidelines being instituted around the world to help stem the spread of the virus, we wanted to share an update on our own policies.
We are extending our remote working policy for all global employees beyond March 31. While it is difficult to give a firm date for when we will reopen our offices, based on information from a range of highly respected global experts, health institutions and governments, we have asked our employees to be prepared to work remotely and practice social distancing for up to another eight weeks.
We’d like to thank our employees for their continued commitment to working through this and driving our business forward together. As always we remain committed to our customers and partners, and we will continue to share additional information and updates as we learn more.