DBX Sign — Trust

Trust

In short: your documents are yours, we hold them on one private server you can name the location of, three companies sit in the path and they are all listed below, the app loads nothing from anybody else, and we set two cookies — both of which are needed to keep you signed in.

Everything on these pages describes what DBX Sign actually does today. Where we have not done something — an independent audit, a certification — we say so plainly rather than leave the question hanging. We would rather be the service you can check than the one with the most badges.

The pages

Privacy Notice — what we hold, why, and for how long
Security — how documents are protected, and what we have not had audited
Sub-processors — every company in the path, named and dated
Electronic signature legality — the law, by jurisdiction
Accessibility — our conformance statement
Copyright & DMCA — how to report infringing material
Report a problem — anyone can, no account needed
Legal & compliance — how each signature is evidenced

Reporting a security problem

If you believe you have found a vulnerability, email [email protected] with "SECURITY" in the subject. We will acknowledge within two business days and tell you what we intend to do. We will not pursue or support legal action against anyone who reports a problem in good faith, stays within their own account or test data, does not degrade the service for others, and gives us a reasonable chance to fix it before telling anybody else. We do not run a paid bounty.

Last reviewed 8 October 2026. This page is reviewed at least every six months and whenever the service changes in a way that affects it.

DBX Sign · operated by DBX Enterprises, Safford, Arizona Trust Legal Privacy Verify a document

DBX SIGNTrust

Trust

The pages

Reporting a security problem