Establishing secure connection…Loading editor…Preparing document…

Custom Controls Template

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

CUSTOM CONTROLS TEMPLATE

This General Business Agreement ("Agreement") is made effective as of (Effective Date), by and between Client Name: (Client) and Service Provider Name: (Provider).

WHEREAS

WHEREAS, Client requires the design, configuration, testing, and implementation of custom controls for Client systems and processes that are described in this Agreement; and

WHEREAS, Provider represents that it has the technical capability, personnel, and experience to perform the services and deliverables set forth in the Scope of Work; and

WHEREAS, the parties desire to set forth their respective rights and obligations with respect to the design, delivery, and maintenance of the custom controls in accordance with the terms of this Agreement.

SCOPE OF WORK

Provider shall perform the services and deliver the deliverables described below. Provider shall use commercially reasonable efforts, qualified personnel, and industry-standard methodologies to complete the work in accordance with the schedule agreed by the parties.

PAYMENT TERMS

Client shall pay Provider for the services performed and deliverables provided under this Agreement in accordance with the following terms.

Invoices shall be submitted by Provider in writing to the invoicing address below and are due within days of receipt unless otherwise specified in the Payment Schedule.

Late payments shall accrue interest at the lesser of (i) the maximum rate permitted by applicable law, or (ii) percent per month on the outstanding balance, calculated from the due date until paid. Client shall also be responsible for reasonable collection costs and attorneys' fees incurred by Provider in enforcing payment.

TERM AND TERMINATION

This Agreement shall commence on and shall continue until unless earlier terminated in accordance with this Agreement.

Either party may terminate this Agreement for convenience upon written notice delivered at least days prior to the effective termination date. Either party may terminate immediately for cause if the other party materially breaches this Agreement and fails to cure such breach within thirty (30) days after receipt of written notice identifying the breach.

CONFIDENTIALITY

"Confidential Information" means non-public information disclosed by one party (Disclosing Party) to the other (Receiving Party) that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and the circumstances of disclosure. Confidential Information includes, without limitation, software designs, control specifications, test results, trade secrets, business plans, customer data, and technical documentation.

The Receiving Party shall (i) protect Confidential Information with at least the same degree of care as it protects its own confidential information, but in no event less than reasonable care; (ii) use Confidential Information solely to perform its obligations under this Agreement; and (iii) not disclose Confidential Information to any third party except to its employees, contractors, or advisors who have a need to know and who are bound by confidentiality obligations at least as protective as those herein.

Confidential Information does not include information that: (a) is or becomes publicly available through no breach by the Receiving Party; (b) was known to the Receiving Party prior to disclosure as demonstrated by written records; (c) is lawfully received from a third party without restriction; or (d) is independently developed without use of the Disclosing Party's Confidential Information.

Upon termination or at the Disclosing Party's written request, the Receiving Party shall promptly return or destroy all materials containing Confidential Information and certify destruction if requested. The obligations of confidentiality shall survive termination of this Agreement for a period of years.

INTELLECTUAL PROPERTY

Unless otherwise agreed in writing, Provider shall retain ownership of any pre-existing intellectual property and tools used to provide the services. Client shall own custom deliverables created specifically for Client under this Agreement upon full payment, and Provider hereby assigns to Client all right, title, and interest in such custom deliverables. Provider retains the right to use general skills, know-how, and techniques developed during performance provided no Confidential Information or Client-owned deliverables are disclosed or used in violation of this Agreement.

LIMITATION OF LIABILITY

EXCEPT FOR WILLFUL MISCONDUCT OR GROSS NEGLIGENCE, IN NO EVENT SHALL EITHER PARTY BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES (INCLUDING LOST PROFITS) ARISING OUT OF OR RELATED TO THIS AGREEMENT, WHETHER IN CONTRACT, TORT, OR OTHERWISE. THE AGGREGATE LIABILITY OF EITHER PARTY ARISING OUT OF OR RELATED TO THIS AGREEMENT SHALL NOT EXCEED THE TOTAL AMOUNTS PAID BY CLIENT TO PROVIDER UNDER THIS AGREEMENT DURING THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

GOVERNING LAW

This Agreement shall be governed by and construed in accordance with the laws of the State of without regard to its conflict of laws principles. Any disputes arising under this Agreement shall be resolved in the state or federal courts located in that state, and each party consents to personal jurisdiction and venue therein.

ENTIRE AGREEMENT

This Agreement, together with any exhibits, statements of work, and attachments expressly incorporated herein, constitutes the entire agreement between the parties with respect to the subject matter and supersedes all prior and contemporaneous agreements, proposals, and communications, whether written or oral. Any amendment to this Agreement must be in writing and signed by authorized representatives of both parties.

MISCELLANEOUS

If any provision of this Agreement is held to be invalid or unenforceable, the remainder of the Agreement shall remain in full force and effect. Neither party may assign this Agreement without the other party's prior written consent, except that either party may assign to an acquirer of substantially all of its assets or equity without consent.

Software controls Hardware controls Process controls

IN WITNESS WHEREOF, the parties have executed this Agreement as of the dates indicated below.

Client Printed Name:

By:

Date:

Provider Printed Name:

By:

Date:

Enter text✕

What the Custom Controls Template Is and Why It Exists

A Custom Controls Template is a structured document used to define, document, and manage internal controls for processes, systems, and regulatory obligations. It captures control objectives, owners, frequency, test procedures, evidence locations, remediation steps, and acceptance criteria so teams can operate consistently and demonstrate effective control design and operation for audits and inspections.

Why a Standardized Template Matters for Controls

A consistent template reduces ambiguity, improves auditability, and centralizes evidence. It supports clear roles and repeatable testing procedures, which helps teams demonstrate compliance, reduce operational risk, and accelerate internal and external reviews.

Why a Standardized Template Matters for Controls

Primary Users and Stakeholders for a Custom Controls Template

Ownership and collaboration are central: assign a single control owner, define reviewers, and record approvals to maintain a clear audit trail.

  • Compliance and risk teams who need standardized evidence for audits and regulator inquiries.
  • IT and security teams responsible for technical control implementation and monitoring.
  • Internal and external auditors who rely on consistent artifacts for assessment and reporting.

Core Elements Every Professional Custom Controls Template Should Include

A complete template groups functional elements so reviewers can find design, operation, and evidence quickly.

Control ID

Unique identifier for traceability across risk registers, audit reports, and remediation trackers, typically short alphanumeric code.

Control Objective

Concise statement of the risk mitigated and the intended outcome the control must achieve, including measurable success criteria where possible.

Control Owner

Named individual or role accountable for operating, monitoring, and updating the control plus contact information for escalation.

Frequency

How often the control operates or is tested (daily, weekly, monthly, quarterly) and any event-driven triggers that require immediate action.

Test Procedure

Step-by-step instructions for evidence collection, sampling approach, acceptance criteria, and how to record test results for repeatable validation.

Evidence Links

Location of artifacts, screenshots, logs, or signed records with file paths or repository links and version or retention metadata.

Required Fields and Short Reference Labels

Control ID: Short code
Owner: Name and role
Objective: Goal summary
Frequency: Operational cadence
Procedure: Test steps
Evidence: Storage path

Step-by-Step: Create and Approve a Control Using the Template

Follow these steps to populate, review, test, and finalize a control record with clear responsibilities and evidence.

  • 01
    Draft Control: Populate ID, objective, owner, frequency, and procedure.
  • 02
    Assign Owner: Designate a responsible person and reviewer.
  • 03
    Test Control: Execute test procedure and collect evidence.
  • 04
    Approve and Record: Reviewer signs off and files evidence in the repository.

How to Configure a Digital Workflow for the Template

Set up workflow settings to automate routing, authentication, and storage for each completed control record.

Field Configuration
Routing Sequential owner then reviewer
Authentication Email link or SMS code
Storage Central repository with versioning
Retention Tag Apply retention policy metadata

Where Completed Templates Are Sent or Filed

Decide final destinations for signed and tested control records to support audits and reporting.

  • Internal Repository: Primary storage for evidence and version history.
  • Audit Folder: Extracts for internal and external auditors.
  • GRC System: Link control status to risk registers.
  • Third Parties: Provide redacted packages to external assessors.

Delivery Options and Platform Requirements

Ensure the chosen platform supports tamper-evident storage, audit logs, and the integrations your teams already use to avoid manual reconciliation.

  • File Formats: PDF, DOCX, or HTML
  • Integrations: Salesforce, NetSuite, Google Workspace
  • Authentication: Email, SMS, KBA

Typical Timelines and Review Deadlines for Controls

Use these commonly adopted timing milestones to plan testing, reviews, and evidence collection cycles.

Initial Completion:

Complete template within 14 days of control creation.

Periodic Testing:

Test quarterly for high-risk controls; semi-annually for medium risk.

Annual Review:

Full design and operating effectiveness review every 12 months.

Remediation Window:

Document remediation within 30 days of a failed test.

Audit Submission:

Provide evidence on auditor request within agreed timeframe.

Common Mistakes When Preparing a Custom Controls Template

  • Leaving the control objective vague so testing cannot determine a clear pass or fail outcome.
  • Failing to name a single control owner, which causes unclear accountability and missed remediation deadlines.
  • Storing evidence in multiple unmanaged locations without consistent versioning or access controls.
  • Not specifying test procedures or sampling methodology, creating inconsistent audit results and rework.

Risks and Potential Consequences of Poor Controls Documentation

Audit Findings: Adverse report
Regulatory Fines: Monetary penalties
Operational Loss: Service interruptions
Contract Breach: Vendor liability
Data Exposure: Privacy incidents
Reputational Harm: Stakeholder distrust

Comparing eSignature Pricing and Core Capabilities for Template Execution

Key vendor pricing and capability differences that affect cost of executing and storing signed control records are summarized below.

signNow DocuSign Adobe Sign PandaDoc HelloSign
Starting Price $8/user/mo $15/user/mo $14/user/mo $19/user/mo $15/user/mo
Free Trial 7-day free trial Varies Varies Varies Varies
Bulk Send Yes Yes Yes Yes No
Audit Trail Yes Yes Yes Yes Yes
HIPAA Compliant Yes Yes Yes No No

Practical Examples of Using a Custom Controls Template

Real-world cases show how templates reduce friction during audits and improve evidence consistency.

Brian Fitzgibbons — Optica Ventures LLC

When scaling operations we needed repeatable control artifacts for third-party reviews

  • Template ensured consistent test steps across teams
  • The interface is simple and easy-to-use for our team; more importantly, it is just as easy for our customers.

Tim Martin — Martin Properties

Property managers required a unified approach to tenant-related controls

  • Template tied controls to lease documents and signatures
  • I can process and execute all of these documents online with 100% compliance and built-in security.

Practical Tips to Improve Accuracy and Reduce Rework

Adopt these practices to make the template actionable and audit-ready while minimizing review cycles.

Use precise, measurable objectives
Write control objectives that can be tested objectively; include quantifiable criteria so reviewers can conclude pass or fail without interpretation or extra inquiry.
Assign clear ownership
Designate a single owner with explicit responsibilities for operation, evidence collection, and remediation to avoid accountability gaps and missed deadlines.
Standardize evidence formats
Require specific evidence types such as log extracts, screenshots with timestamps, or signed attestations to reduce back-and-forth about acceptable artifacts.
Version and archive consistently
Use version identifiers and immutable storage for approved control records so auditors can verify history and changes without ambiguity.

Frequently Asked Questions About Using the Custom Controls Template

Answers to common questions about completing, signing, and retaining the template, including legal and technical considerations.


Need help? Contact support

be ready to get more
Join over 28 million airSlate SignNow users