Parties
Identify disclosing and receiving parties with legal entity names, DBA, addresses, and primary contact points for notices and inquiries to remove ambiguity.
Use the Confidential Information Form to clarify what information is protected, set handling obligations, and provide evidence of parties' intent. It reduces disputes over scope, helps meet regulatory privacy obligations, and supports enforceability of confidentiality provisions under contract and applicable electronic-signature laws.
Organizations and individuals who need to record and protect sensitive information complete this form during onboarding, vendor setup, or project intake.
Identify disclosing and receiving parties with legal entity names, DBA, addresses, and primary contact points for notices and inquiries to remove ambiguity.
List specific categories and examples of protected data (financials, technical specifications, customer lists, source code, PHI) to prevent overbroad definitions.
Define authorized purposes, restrict secondary uses, and list prohibited activities such as resale, public disclosure, or competitive reuse to limit exposure.
Specify storage, transmission, encryption, access controls, and secure disposal or return procedures to meet operational and regulatory standards.
State the effective date, duration of confidentiality obligations, retention period, and post-termination actions for materials and records.
Include signer printed name, title, date, and capacity; indicate whether electronic signatures are accepted and how intent is recorded.
| Form Field Setup and Configuration | Configuration |
|---|---|
| Auto-archive signed form after completion | Enabled; automatically store final PDF in the contract repository with metadata. |
| Require signer authentication by email or SMS | Use SMS code or email link per signer to verify identity. |
| Conditional fields for redaction and disclosure | Show specific fields only to authorized recipients based on role. |
| Retention policy and legal hold tagging | Apply retention metadata and legal hold flags when required. |
Platforms used to distribute, store, and audit Confidential Information Forms should enforce access controls, encryption, and retention metadata.
Sets when confidentiality obligations begin and when retention clocks start.
Retention obligations may follow IRS, HIPAA, or company policy requirements.
Healthcare records often require six years retention under federal HIPAA guidance.
Retain I-9 forms three years after hire or one year after termination, whichever is later (8 CFR §274a.2).
Provide W-9 upon request; missing TIN may trigger 24% backup withholding.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Varies by vendor | Varies by vendor | Varies by vendor | Varies by vendor |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
| Envelope Cap | No cap | 100 envelopes/user/year | Varies by plan | Varies by plan | Varies by plan |