Scope of Hosting
Define hardware and services covered, permitted applications, data types allowed, and any excluded systems to prevent scope creep and unclear responsibilities.
A formal agreement clarifies obligations, reduces liability, and documents compliance measures such as encryption and incident response. It helps IT and legal teams enforce consistent security controls and supports auditability required under ESIGN, UETA, HIPAA, or industry rules.
Organizations use this agreement when staff host servers, appliances, or backups offsite; primary contacts complete it to align IT, security, and legal responsibilities.
Chief point of contact for configuration, monitoring, and access control. Signs to accept responsibility for technical standards, patching schedule, and periodic audits; coordinates with security for incident response and with HR for employee onboarding or termination actions.
Individual hosting the server at a personal or alternate business location. Commits to physical security, uptime windows, access arrangements, and notification requirements for incidents, and acknowledges potential inspections or removal obligations.
Define hardware and services covered, permitted applications, data types allowed, and any excluded systems to prevent scope creep and unclear responsibilities.
Specify required technical controls (encryption, firewall rules, patch cadence, antivirus, physical locks) and minimum compliance baselines such as HIPAA or company policy.
Grant IT audit and remote access rights, logging requirements, and specify who may perform maintenance or incident investigations.
Describe maintenance windows, update schedules, backup responsibilities, and mandatory incident reporting timelines and formats.
Allocate risk, limits on damages, indemnities, and require liability or cyber insurance coverage levels where appropriate.
Procedures for decommissioning, secure data transfer or destruction, and timelines for physical equipment return or remote access revocation.
| Field | Configuration |
|---|---|
| Signature Type | Electronic signature allowed |
| Signer Authentication | Email link + SMS code recommended |
| Retention Policy | Store signed PDF for minimum retention |
| Notification Routing | Notify IT, Legal, and HR upon completion |
Choose a signing platform that supports audit trails, encryption at rest, and access controls consistent with your compliance obligations.
Provision access within 5 business days
Initial security validation within 10 business days
Perform yearly compliance audit
Provide 60 days advance renewal notice
30 days written notice for voluntary termination
Employee requests hosting and attaches equipment inventory.
IT and legal sign-off secured before deployment.
Network and monitoring configured and tested.
Data transfer and device removal at termination.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day trial | Varies by promotion | Varies by promotion | Varies by promotion | Varies by promotion |
| Bulk Send | Yes | Yes | Yes | Yes | Yes |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
| Envelope Cap | No cap | 100 envelopes/user/year | Varies | Varies | Varies |
An engineer hosts nightly backups at home on company-owned hardware
A remote developer hosts a staging server with non-production data