DocuSign: Trust page changed
DocuSign’s Trust page added an alert about PHP2Shell, a critical PHP vulnerability under active investigation; customer impact was not specified. It also removed the CLM Australia Production maintenance notice for CLM Prod AU S1 (4PM UTC to 7PM UTC), which warned of brief feature unavailability and slower UI responses.
Machine-written from the diff below (Sol; type: other). Check the diff before relying on it.
What changed
Struck in red is what DocuSign removed; blue is what they added. Muted text is unchanged context.
Compared with the previous archived version (#204 to #5228). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).
Archive proof
Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.
How the archive is checked, and what it cannot prove.
Before captured
In the 2026-10-17 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
2aa6fd08feb2e92e…After captured
In the 2026-10-22 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
4a5d07b09e3951f4…
History of this page
TodayWednesday, November 4Wed, Nov 4
1 page change
- Content changedPage change
Trust pagechanged
Friday, October 30
1 page change
- Content changedPage change
Trust pagechanged
DocuSign added planned CLM Prod EU S1 maintenance for Saturday, <date>, from 12AM UTC to 3AM UTC: UI previews, Workflow steps, Standard attributions and Party agreement may be unavailable for up to 10 minutes, with slower UI responses; workflow processing should continue normally. The eSignature Azure Australia and Canada Production disaster-recovery exercise notice was removed.
Saturday, October 24
1 page change
- Content changedPage change
Trust pagechanged
DocuSign’s Trust page replaced “core services” with “Docusign-operated services and products utilized by our customers” in its statement that these do not use PHP and are not affected. This clarifies the wording of the assurance without announcing a product or service change.
Friday, October 23
1 page change
- Content changedPage change
Trust pagechanged
DocuSign updated its PHP2Shell vulnerability alert to confirm that core services do not use PHP and are unaffected, and that its investigation found no indicators of compromise. A limited number of internal systems use PHP and are being remediated; the alert also links to PHP’s recommended mitigation measures.
Thursday, October 22
1 page change
- Content changedPage change
Trust pagechangedthis change
DocuSign’s Trust page added an alert about PHP2Shell, a critical PHP vulnerability under active investigation; customer impact was not specified. It also removed the CLM Australia Production maintenance notice for CLM Prod AU S1 (4PM UTC to 7PM UTC), which warned of brief feature unavailability and slower UI responses.
Cite this
Trust page changed on DocuSign’s Trust page, changed 2026-10-22 08:44 UTC (change 1 of 5).
- Title
- Trust page changed
- Vendor
- DocuSign
- Date
- URL
- https://rewindex.com/change/p5228