DocuSign: Trust page changed

Trust / securityChanged (not classified) (rule)Changed 2026-11-04 08:44 UTCwww.docusign.com

Summary

Summary pending. The diff below shows exactly what changed.

What changed

~~Struck in red~~ is what DocuSign removed; blue is what they added. Muted text is unchanged context.

Added#1

…operating environments. Learn More Alerts and updates Planned nothing here Production - Saturday ‹date› ‹date› Docusign will undertake…

…operating environments. Learn More Alerts and updates Planned Disaster Recovery Exercise for eSignature & IAM in IL4 Production - Saturday ‹date› ‹date› Docusign will undertake…

Added#2

…IL4 Production - Saturday ‹date› ‹date› Docusign will nothing here If you have any questions, contact Docusign Support…

…IL4 Production - Saturday ‹date› ‹date› Docusign will undertake a planned disaster recovery exercise on Saturday, November 7, from ‹date› to ‹date› . The scope of this exercise is to perform a regional full-platform failover of eSignature and IAM in the IL4 Production environment. This exercise is not expected to cause downtime or impact eSignature or IAM services, however we are notifying customers as a precautionary measure. If you have any questions, contact Docusign Support…

Removed#3

…back here for any updates regarding the schedule. [UPDATED] Alert: PHP2Shell Vulnerability ‹date› [UPDATED: ‹date› ] On ‹date› , Docusign became aware of a critical vulnerability affecting PHP, known as PHP2Shell. Details regarding this vulnerability and PHP’s recommended mitigation measures are available in the PHP project’s security advisory: https://www.php.net/archive/2026.php# ‹date› -5 . We can confirm that our Docusign-operated services and products utilized by our customers do not use PHP and are not affected by this vulnerability. The Docusign security and engineering teams have completed a comprehensive investigation into PHP2Shell and found no indicators of compromise in our environment. We have identified a limited number of internal Docusign systems that utilize PHP and we are actively remediating them. For developers, we are also updating our external integration documentation with an instruction to use a patched PHP version. We are continuing to monitor for any further changes or updates. The security of our products is a top priority. Docusign will continue to monitor the situation as it evolves. Please visit https://docusign.com/trust/alerts for the latest updates regarding this alert. [ORIGINAL: ‹date› ] On <d … See All Follow Us on X Subscribe to…

…back here for any updates regarding the schedule. removed See All Follow Us on X Subscribe to…

Compared with the previous archived version (#11162 to #14484). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).

Archive proof

Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves this record existed by then and has not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Oct 30
Before captured 08:45 UTC
In the 2026-10-30 checkpoint, timestamped by FreeTSA and DigiCert on Oct 31, 00:42 UTC. Record hash 3c6fc744978c00f5…
Download proof

Rewindex captured a newer version after the last checkpoint; the next run (00:41 UTC) commits it.

History of this page

TodayWednesday, November 4Wed, Nov 4

1 page change

Content changed
08:44Page change
Trust pagechangedthis change

Friday, October 30

1 page change

Content changed
08:45Page change
Trust pagechanged
DocuSign added planned CLM Prod EU S1 maintenance for Saturday, <date>, from 12AM UTC to 3AM UTC: UI previews, Workflow steps, Standard attributions and Party agreement may be unavailable for up to 10 minutes, with slower UI responses; workflow processing should continue normally. The eSignature Azure Australia and Canada Production disaster-recovery exercise notice was removed.

Saturday, October 24

1 page change

Content changed
08:45Page change
Trust pagechanged
DocuSign’s Trust page replaced “core services” with “Docusign-operated services and products utilized by our customers” in its statement that these do not use PHP and are not affected. This clarifies the wording of the assurance without announcing a product or service change.

Friday, October 23

1 page change

Content changed
08:45Page change
Trust pagechanged
DocuSign updated its PHP2Shell vulnerability alert to confirm that core services do not use PHP and are unaffected, and that its investigation found no indicators of compromise. A limited number of internal systems use PHP and are being remediated; the alert also links to PHP’s recommended mitigation measures.

Thursday, October 22

1 page change

Content changed
08:44Page change
Trust pagechanged
DocuSign’s Trust page added an alert about PHP2Shell, a critical PHP vulnerability under active investigation; customer impact was not specified. It also removed the CLM Australia Production maintenance notice for CLM Prod AU S1 (4PM UTC to 7PM UTC), which warned of brief feature unavailability and slower UI responses.

Cite this

Trust page changed on DocuSign’s Trust page, changed 2026-11-04 08:44 UTC (change 5 of 5).

Title: Trust page changed
Vendor: DocuSign
Date: 2026-11-04 08:44 UTC
URL: https://rewindex.com/change/p14484

All DocuSign changes DocuSign profile Markdown JSON