Is an electronic signature legally enforceable?

Yes. Under the federal ESIGN Act (15 U.S.C. §7001) and state UETA laws, electronic signatures that demonstrate intent, consent, attribution, and record retention are generally enforceable. Exceptions include wills, certain court orders, and other categories excluded by statute.

Do I need notarization or witnesses?

Most Business Conduct Code Documents do not require notarization or witnesses for validity. Notarization may be used to certify signatures for certain filings or jurisdiction-specific requirements; consult state rules for documents where notarized acknowledgements are necessary.

Can I distribute and collect acknowledgements electronically?

Yes. Electronic distribution and acknowledgements are permissible when the signer consents and the process preserves records and attribution. Ensure consumer-facing disclosures when required and retain audit trails to meet ESIGN/UETA criteria and internal retention policies.

How long should acknowledgements be retained?

Retention depends on record type. Maintain signed codes and employee acknowledgements a minimum of three years for tax-related items (IRC §6501(a)) and six years for HIPAA-covered records (45 CFR §164.530(j)); many organizations retain seven years for governance consistency.

How do I update or revise the code?

Use a documented revision process: draft changes, conduct legal and stakeholder review, obtain executive approval, publish a new version with version number and effective date, and notify employees. Track acknowledgements for the revised document and archive prior versions for audits.

What are common compliance risks to watch?

Common risks include unclear scope, inconsistent enforcement, missing acknowledgements, inadequate reporting channels, and failure to align the code with specific regulatory obligations such as HIPAA or industry-specific rules. Regular audits and training reduce these risks and strengthen documentation for regulators.

Electronic Signature
Templates
Miscellaneous
Business Conduct Code Document

Business Conduct Code Document

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

BUSINESS CONDUCT CODE AGREEMENT

This Business Conduct Code Agreement (the Agreement) is made effective as of by and between Company Name: and Recipient Name: .

WHEREAS

WHEREAS, Company operates a business that requires adherence to ethical standards, compliance with applicable laws, and preservation of Company reputation and assets; and

WHEREAS, Recipient participates in Company activities as an employee, contractor, or agent and, as such, will be subject to policies and duties set forth herein to ensure lawful and ethical conduct; and

WHEREAS, Company and Recipient desire to set forth the responsibilities, reporting obligations, and remedies relating to the Business Conduct Code in a binding written agreement.

SCOPE OF WORK AND RESPONSIBILITIES

Scope of Compliance Responsibilities

Recipient shall perform the obligations described above in accordance with all applicable laws, regulations, and Company policies. Recipient shall exercise reasonable care to avoid conflicts of interest, protect confidential information, and refrain from any conduct that would materially harm Company’s business, reputation, or interests.

CODE OF CONDUCT REQUIREMENTS

The following obligations are material obligations of Recipient under this Agreement. Breach of any of the following may result in disciplinary action up to and including termination of relationship and pursuit of remedies available at law or equity.

Conflicts of Interest: Disclose any actual or potential conflicts of interest promptly in writing and refrain from actions that place private interests above Company interests.

Anti-Bribery and Anti-Corruption: Do not offer, give, solicit, or accept bribes, kickbacks, or improper payments in connection with Company business.

Confidentiality and Data Protection: Protect confidential, proprietary, and personal data in accordance with this Agreement and Company policy; use such information only for authorized purposes.

Compliance with Law: Comply with all applicable local, state, federal, and international laws, including trade controls, labor laws, and environmental regulations.

Reporting Obligations: Recipient must promptly report suspected violations of law or Company policy to Company’s designated compliance officer or other authorized personnel. Company will make reasonable efforts to investigate reported concerns and will not retaliate against good faith reporters.

PAYMENT TERMS

Consideration / Payment Amount Payment Schedule (describe) Late Payment Fee Invoice / Remittance Address

TERM AND TERMINATION

This Agreement shall commence on Start Date: and shall continue until End Date: unless earlier terminated as provided herein.

Either party may terminate this Agreement for convenience upon providing written notice of termination not less than days to the other party. Company may terminate immediately for cause, including but not limited to material violation of this Code.

CONFIDENTIALITY

Recipient shall hold in strict confidence all proprietary and confidential information of Company and shall not disclose, use, copy, or permit access to such information except as required to perform obligations under this Agreement or as expressly authorized in writing by Company. Confidential information includes, without limitation, trade secrets, technical data, business plans, customer lists, pricing, and financial information. Recipient shall implement reasonable administrative, physical, and technical safeguards to prevent unauthorized disclosure.

The obligations under this confidentiality clause shall survive termination or expiration of this Agreement for a period of five (5) years, except with respect to trade secrets, which shall be protected for so long as they remain trade secrets under applicable law.

Recipient acknowledges and agrees to the confidentiality obligations set forth in this Agreement.

GOVERNING LAW

This Agreement shall be governed by and construed in accordance with the laws of the State of without regard to conflicts of law principles. The parties submit to the exclusive jurisdiction of the courts of that State for disputes arising under this Agreement.

ENTIRE AGREEMENT

This Agreement, including any exhibits or schedules attached hereto, constitutes the entire agreement between the parties with respect to its subject matter and supersedes all prior and contemporaneous agreements, understandings, negotiations, and discussions, whether oral or written. No amendment, modification, or waiver of any provision of this Agreement shall be effective unless in writing and signed by authorized representatives of both parties.

MISCELLANEOUS PROVISIONS

Severability: If any provision of this Agreement is held invalid or unenforceable, the remainder shall remain in full force and effect. Waiver: Failure to enforce any provision shall not constitute waiver. Assignment: Recipient shall not assign or delegate duties under this Agreement without prior written consent of Company.

Additional Notes / Special Provisions

ACKNOWLEDGEMENT

By signing below, Recipient acknowledges receipt of the Business Conduct Code, confirms understanding of its duties and obligations, and agrees to comply fully with the terms set forth in this Agreement.

Company Printed Name:

By (Signature):

Date:

Recipient Printed Name:

By (Signature):

Date:

What the Business Conduct Code Document Is

The Business Conduct Code Document is a formal corporate policy that sets expected standards of behavior, ethics, and compliance for employees, contractors, and officers. It defines prohibited conduct, reporting channels, conflict of interest rules, confidentiality obligations, and disciplinary procedures, and it clarifies roles and responsibilities for enforcement. Organizations use it to align conduct with legal obligations, industry standards, and corporate values while documenting governance decisions. A well-drafted code supports internal investigations, regulatory audits, and training programs and serves as an auditable record of organizational policies.

Why a Clear Code Matters

A clear Business Conduct Code Document reduces legal risk, guides employee decisions, and demonstrates commitment to compliance. It provides a reference for disciplinary action, helps satisfy regulatory expectations, and supports consistent decision-making during audits or investigations under applicable federal and state law.

Who Creates, Maintains, and Uses the Code

Human resources, legal, compliance teams, managers, and senior leadership typically use and maintain the Business Conduct Code Document within organizations.

Human resources: drafts and updates the code, manages acknowledgements, and coordinates employee training.
Legal and compliance: reviews language for regulatory risk, advises on investigations, and enforces policy.
Senior leadership: approves policy, sets tone at the top, and authorizes disciplinary measures.

External stakeholders such as auditors, regulators, and contracted vendors may receive certified copies for compliance reviews.

Primary Roles Responsible for the Code

Chief Compliance Officer

Responsible for interpreting legal obligations, coordinating investigations, advising leadership on regulatory risk, and approving final revisions to the Business Conduct Code Document. Acts as the primary liaison with external regulators and ensures policies align with applicable federal statutes such as ESIGN/UETA only where e-signature processes intersect with policy delivery.

Human Resources Director

Oversees dissemination, employee training, acknowledgment tracking, and operational implementation of the Business Conduct Code Document. Coordinates with legal for policy wording, maintains records of acknowledgements, and enforces procedures for investigations and corrective action consistent with company discipline guidelines.

Essential Sections to Include

Core sections of a Business Conduct Code Document clarify scope, prohibited behaviors, reporting channels, investigation process, disciplinary actions, and review cycles.

Scope

Defines who and which activities the code covers, including employees, contractors, and third parties, and specifies behavioral expectations both on and off duty when representing the organization.

Prohibited Conduct

Lists specific forbidden actions such as fraud, harassment, bribery, and conflicts of interest, with illustrative examples and thresholds that trigger disciplinary review to promote consistent enforcement.

Reporting

Describes internal reporting channels, anonymous hotlines, external reporting options, non-retaliation protections, and timelines for acknowledging and initiating investigations after a report is received, plus expected response times for each channel.

Investigations

Outlines investigation procedures, impartiality standards, evidence handling, confidentiality limits, expected timeframes for fact-finding, roles of HR, legal, and external investigators, and retention of investigative records.

Discipline

Sets progressive disciplinary measures, possible sanctions, appeals process, and how sanctions relate to the severity of violations and mitigation or aggravating circumstances, including documentation requirements for appeals.

Review Cycle

Specifies periodic review cadence, version control, approval authority, and employee retraining requirements after substantive changes to ensure the code remains current and compliant, with stakeholder consultation records maintained.

Step-by-Step: From Draft to Employee Acknowledgement

Follow these steps to prepare, approve, and publish your Business Conduct Code Document internally and distribute it to staff.

01

Draft: Assemble policy language with legal review and HR input.
02

Review: Legal and leadership review for compliance and tone.
03

Approve: Obtain signoff from CEO or delegated authority.
04

Publish: Distribute final code, collect acknowledgements, and log retention.

How to Set Up an Online Template and Workflow

Configure an online template for the Business Conduct Code Document and set signing, authentication, and retention options.

Field	Configuration
Template Name	Business Conduct Code Template
Signer Authentication	Email + SMS code or SSO per risk level
Acknowledgement Method	E-signature checkbox with audit trail
Retention Setting	Retain final signed PDF for seven years

Typical Routing and Submission Flow

Typical routing for a Business Conduct Code Document includes review, approval, signing, and distribution steps.

Prepare: Upload final text and attach exhibits.
Authorize: Leadership reviews and signs approval memo.
Sign: Employees acknowledge by e-signature or checkbox.
Distribute: Publish to intranet and record acknowledgements.

Digital Signing, Storage, and Integration Considerations

Choose eSignature and storage platforms that meet legal and security requirements for the Business Conduct Code Document and support audit trails and access controls.

Integrations: Salesforce, Microsoft 365, Google Workspace.
Formats: PDF, DOCX, HTML, Excel supported.
Security: TLS 1.2/1.3 in transit, AES-256 at rest.

Typical Timelines and Deadlines

Key timing expectations for drafting, review, adoption, and employee acknowledgement of the Business Conduct Code Document.

Draft Completion Deadline:

Set initial draft deadline at least 60 days before publication.

Legal Review Period:

Allow 14–30 calendar days for legal and HR review.

Leadership Approval Window:

Reserve up to 14 days for executive signoff.

Employee Acknowledgement Deadline:

Require acknowledgements within 30 days of publication.

Periodic Review Cycle:

Review and update the code every 12 months or as needed.

Common Preparation Mistakes to Avoid

Vague scope language that fails to specify covered personnel or activities, leading to inconsistent application and confusion during investigations and enforcement.
Outdated references to superseded laws, obsolete contact details, or old organizational names that undermine legal reliability and create administrative burdens.
Incomplete reporting channels or unclear non-retaliation language discouraging whistleblowers and increasing regulatory risk during external complaints.
Failing to obtain or track employee acknowledgements, which complicates enforcement and may weaken the organization's position in audits or litigation.

Penalties and Risks of an Incorrect or Mismanaged Code

Regulatory Fines: Possible fines or sanctions.

Civil Liability: Increased exposure to lawsuits.

Reputational Damage: Loss of public trust.

Enforcement Gaps: Inconsistent discipline outcomes.

Audit Findings: Negative compliance reports.

Operational Disruption: Resource-intensive investigations.

Saving, Versioning, and Supporting Documents

Options for saving and distributing the finalized Business Conduct Code Document include standard file formats, versioned records, and secure archival.

Download Formats

Provide signed copies in PDF/A, PDF, and DOCX formats. PDF/A preferred for long-term archival, while DOCX allows editable corporate templates for future revisions and redlines during review cycles.

Version Control

Embed a version number, approval date, and change log in every distributed copy. Store previous versions in a secure archive to support audits and legal defensibility.

Attachments

Include related policies, training materials, investigation procedures, and exhibits as appendices. Label attachments clearly and link them in the document index for quick reference for compliance reviews.

Access Logs

Preserve audit trails showing who accessed, downloaded, or acknowledged the code. Logs should be exportable and retained according to retention policy for investigations and regulatory requests.

eSignature Vendor Pricing and Feature Snapshot

Key vendor features and pricing to consider when selecting an eSignature provider for the Business Conduct Code Document.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies	Varies	Varies	Varies
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

Frequently Asked Questions

Answers to frequent questions about completing, signing, storing, and enforcing a Business Conduct Code Document are provided below.

Need help? Contact support

Is an electronic signature legally enforceable?
Yes. Under the federal ESIGN Act (15 U.S.C. §7001) and state UETA laws, electronic signatures that demonstrate intent, consent, attribution, and record retention are generally enforceable. Exceptions include wills, certain court orders, and other categories excluded by statute.
Do I need notarization or witnesses?
Most Business Conduct Code Documents do not require notarization or witnesses for validity. Notarization may be used to certify signatures for certain filings or jurisdiction-specific requirements; consult state rules for documents where notarized acknowledgements are necessary.
Can I distribute and collect acknowledgements electronically?
Yes. Electronic distribution and acknowledgements are permissible when the signer consents and the process preserves records and attribution. Ensure consumer-facing disclosures when required and retain audit trails to meet ESIGN/UETA criteria and internal retention policies.
How long should acknowledgements be retained?
Retention depends on record type. Maintain signed codes and employee acknowledgements a minimum of three years for tax-related items (IRC §6501(a)) and six years for HIPAA-covered records (45 CFR §164.530(j)); many organizations retain seven years for governance consistency.
How do I update or revise the code?
Use a documented revision process: draft changes, conduct legal and stakeholder review, obtain executive approval, publish a new version with version number and effective date, and notify employees. Track acknowledgements for the revised document and archive prior versions for audits.
What are common compliance risks to watch?
Common risks include unclear scope, inconsistent enforcement, missing acknowledgements, inadequate reporting channels, and failure to align the code with specific regulatory obligations such as HIPAA or industry-specific rules. Regular audits and training reduce these risks and strengthen documentation for regulators.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now