GDPR for E-sign

This is how CallGuide E-sign complies to the EU General Data Protection Regulation act.

Also see GDPR for the administrator and GDPR relating to employees.

General

For an introduction to CallGuide E-sign, see What is CallGuide E-sign?

The person holding an account with admin privileges manages both users accounts and documents in the service.

If you have several accounts within the service you need to manage every account separately in terms of rights of the individual/data subject.

About the E-archive for documents, activities and status

• Signed documents are generally automatically stored in the E-archive. Signed documents consists of one or more PDFs, information tags and a log of events relating to the signed document. By default the service collects events and gather those in an event log (audit trail) that is appended to the signed document when it is signed by all parties.
• A user with relevant privileges may search, erase and download documents via the E-archive, and via open interface (API) of the service, The data in CallGuide E-sign constitutes of signed and sealed documents each with an evidence log of actual events therefore rectification or deletion of information in signed documents is not possible.
• The service supports automatic deletion of documents in the E-archive after a predefined set of days. The deleted documents are then moved to the trash bin. The trash bin is emptied after 30 days. This feature is not enabled by default. You need to order this feature.
• In the E-archive, you may search for information tags in signed documents. The set of information tags is defined for each process/documents by you. It is not possible to search for information within the PDFs.

Security

In order to increase the security in terms of login, you can activate two-factor authentication (2FA).

You can restrict the access to the service by set up an IP range defining the IP numbers allowed to access the service. This feature is not enabled by default. You need to order this feature.

You are responsible for managing which users having access to the service, for example when your employees no longer works for you or when you change sub contractors.