E‑signatures where your content lives

An electronic signature, often referred to as an e-signature, is an electronic process that indicates a person’s acceptance of a document or record. In the United States, the federal Electronic Signatures in Global and National Commerce Act (the ESIGN Act) defines an electronic signature as “an electronic sound, symbol, or process, attached to or logically associated with a contract or other record and executed or adopted by a person with the intent to sign the record.” Other countries define electronic signatures differently and may require the use of particular types of electronic signatures with respect to particular types of documents or records. E-signatures are often used for electronically accepting or signing electronic documents, contracts, or agreements, eliminating the need for paper.

E-signatures are legally binding in many countries, including the United States, where they are recognized and enforceable under various electronic signature laws and regulations. The ESIGN Act, for example, is a federal law passed in 2000 that facilitates the use of electronic records and signatures in interstate and foreign commerce. In addition, the Uniform Electronic Transactions Act (the UETA) was adopted by 49 individual US states. New York, the only state not to adopt the UETA, adopted its own Electronics Signatures and Records Act (ESRA), which also establishes that electronic signatures and records have the same force and effect as signatures and records produced by non-electronic means. These laws acknowledge the validity of electronic signatures when specific criteria, such as authentication, consent, and intent, are met. Box Sign supports compliance with these legal requirements. It’s important to note that there are exceptions to the ESIGN Act, the UETA, the ERSA and other e-signature laws and regulations. Please consult legal counsel licensed in your jurisdiction(s) to discuss whether the use of e-signatures are appropriate for your intended use cases.

Box Sign is designed with information security at its core — and the purpose of enabling the confidentiality, integrity, and availability of customer content. Box Sign, along with all the products built at Box, is vetted through our comprehensive product design review program, which includes Security, Compliance, Legal, and Privacy reviews. Box Sign is built within our Box production environment which inherits the common security controls used to meet Box’s regulatory and compliance obligations. Because Box Sign was built using our existing control framework, we ensured that Box Sign already meets our rigorous security standards for our certifications. Box Sign employs advanced encryption to safeguard your data both during transmission and while stored within the Box service. Additionally, Box Sign offers features like multi-factor authentication (MFA) and access controls, ensuring that only authorized users can access and sign documents, thereby enhancing overall security.

Learn more about security and compliance in Box Sign.

At Box, we rigorously manage data in a manner that meets business, legal, security, and regulatory needs. Our commitment to protecting the privacy and security of our corporate and customer data has resulted in Box providing comprehensive security compliance certifications across industries and geographic regions.

Box Sign can actively be used in compliance with various industry-specific and international regulations and standards. Our compliance offerings for our underlying infrastructure include, but are not limited to the following:

• ISO 27001, 27017, 27701 and 27018
• SOC 1, 2, and 3
• Cloud Computing Compliance Control Catalogue (C5)
• PCI-DSS
• FedRAMP Moderate
• U.S. Department of Defense Cloud Security Requirements Guide Impact Level 4 for Controlled Unclassified Information
• HIPAA/HITECH Act

Visit the Box Trust Center to learn more.

Yes, Box Sign is natively integrated right where your content lives in the Content Cloud, enabling teams to streamline workflows and execute on content that powers business — all within Box. Customers can leverage Box Sign with other Box solutions, like Box Relay, to automate next steps in a process, or leverage Box Shield to enable frictionless security when sending sensitive content for signature.

Customers on Business plans and above get unlimited native e-signatures at no additional cost. In addition to unlimited native e-signatures at no additional cost, customers on Enterprise Plus plans also get unlimited e-signatures at no additional cost when integrating Box Sign with third party applications. Additionally, Box does not charge additional fees for customers who want to leverage additional signer authentication capabilities.

You can learn more about Box pricing here.

Yes, Box Sign has a number of pre-built integrations with third party applications, like Salesforce and Workato, as well as easy-to-use APIs and developer-friendly tools. It’s easy to extend the power of Box Sign and enable secure, seamless e-signatures in third party and custom applications.

See our Box Sign integrations, and view Box Sign developer documentation here.