Identification
Dataset name, owner, steward, and a one-line description to uniquely identify the asset and its business purpose.
A consistent template reduces ambiguity about roles, retention, and security controls, making compliance, audits, and operational handoffs more efficient. It documents baseline controls and traceable decision points so stakeholders can act on a common source of truth.
Organizations use the template to centralize data handling rules across functional teams and external partners.
Use by multiple stakeholders ensures controls are enforceable, auditable, and aligned with applicable laws and internal policy.
The Chief Financial Officer or delegated officer signs to acknowledge financial data handling and retention commitments. This signatory confirms funding controls, financial recordkeeping practices, and approval of related access roles.
The IT Director or designated Data Manager signs to accept technical responsibilities for classification, access controls, backups, and secure disposal. They attest that system inventories and controls reflect the documented state.
| Field | Configuration |
|---|---|
| Route Order | Sequential or parallel approval |
| Authentication | Email, SMS, or two-factor |
| Conditional Fields | Show/hide based on responses |
| Audit Trail | Capture IP, timestamp, and actions |
Choose a platform that supports secure storage, audit trails, and the authentication level you require.
Ensure the provider meets any regulatory needs (for example HIPAA BAA availability) and supports long-term archival formats.
Dataset name, owner, steward, and a one-line description to uniquely identify the asset and its business purpose.
Sensitivity level plus handling rules such as encryption requirements, masking, and allowed downstream processing.
List of authorized roles, approval process for access requests, and required attestations for privileged users.
Explicit retention period, trigger events for disposition, and approved methods for secure deletion or archival.
Vendor names, contract references, data transfer locations, and minimum controls required in supplier agreements.
Required logs, audit artifacts, and where signed templates and supporting documents will be stored for inspection.
Provide a completed W-9 upon payer request; no fixed IRS submission deadline.
Provide recipient and IRS copies by January 31 for nonemployee compensation.
Paper submissions historically due by February 28; electronic by March 31.
Form 1040 is due April 15 (October 15 with approved extension).
Retain I-9 for 3 years after hire or 1 year after termination, whichever is later (8 CFR §274a.2).
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Varies | Varies | Varies | Varies |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |