The security of your contracts, documented
Docform covers the contract lifecycle: drafting, approval, negotiation, electronic signature and tracking. Your contracts are hosted in France on Microsoft Azure. This page details our security measures, our subprocessors and our GDPR framework.
- Contracts hosted in France
- GDPR
- Signature compliant with the eIDAS framework
- TLS 1.2+ / AES-256 encryption
Regulations and reference frameworks
GDPR
CompliantGeneral Data Protection Regulation
eIDAS
Framework compliantBuilt-in electronic signature, compliant with the eIDAS framework, with an optional Certigna electronic seal on the final PDF
ISO 27001:2022
Reference frameworkInternational information security standard, used as a reference framework (Docform does not claim certification)
DORA
Reference frameworkDigital Operational Resilience Act, followed as a reference framework
EU AI Act
Reference frameworkEuropean regulation on artificial intelligence, followed as a reference framework
Security controls
Updated regularlyInfrastructure security
- Cloud services security
- Secure data transfer
- Access control
39 documented controls in total
Organizational security
- Information system scope
- Return of assets
- Intellectual property rights
20 documented controls in total
Product security
- Source code access
- Secure development lifecycle
- Secure coding
5 documented controls in total
Internal security procedures
- ICT business continuity
- Information backup
- Processing systems redundancy
50 documented controls in total
Data and privacy
- Acceptable use of information
- Information classification
- Information labeling
4 documented controls in total
Data collected
Resources
The documents marked "On request" are available to customers and qualified prospects once an NDA has been signed. Contact us.
Subprocessors
Microsoft Azure
Hosting of the platform and the contracts
Azure OpenAI (Microsoft)
OptionalArtificial intelligence for the assistant
Certigna (Dhimyotis)
OptionalElectronic seal on the final PDF
New Relic
Application monitoring
Your contracts are hosted in France. Some subprocessors handle data outside France, in particular for transactional email delivery, operated from the United States.
Frequently asked questions
Another question?
Our security team replies within 48 business hours. You can also cover these topics during a demo.