← Back to GDPR Knowledge Hub

Is Adobe sign GDPR Compliant?
What You Need to Know

A complete breakdown of Adobe sign's privacy posture, sub-processors, and what your agency needs to do to use them legally.

Overall Status
Compliant with Configuration

Vendor Overview

Headquarters
United States
Category
Marketing / Analytics
Transfer Mechanism
Standard Contractual Clauses (SCCs) + Data Privacy Framework
Sub-processors
12 known sub-processors

GDPR Compliance Status

  • Data Processing Agreement (DPA) Available
    Adobe sign provides a standard DPA that you must sign or accept in their settings before processing personal data.
  • EU Hosting Available
    You can select an EU data center (e.g., Frankfurt or Dublin) during setup to keep data within the EEA.

What you need to do

To use Adobe sign compliantly as an agency, you must:

  1. Sign their Data Processing Agreement (DPA).
  2. Configure EU hosting in your account settings (if applicable).
  3. Update your Record of Processing Activities (ROPA).
  4. List them in your Privacy Policy as a sub-processor.

Track Adobe sign's compliance automatically.

Stop manually checking for vendor updates. Custodia tracks Adobe sign alongside the other tools agencies commonly run, alerting you if their DPA or hosting changes.

Start free assessment