Data Inventory
List categories of personal and legal information collected, including the source and purpose for each category, to support lawful processing and mapping to retention rules.
A clear form reduces legal risk by documenting intent, consent, attribution, and retention practices required for enforceable electronic records under ESIGN (15 U.S.C. ch. 96) and state UETA laws. It creates an audit trail for regulatory review and supports consistent handling across departments.
Organizations use this form when collecting or processing regulated data or when an audit trail for legal information handling is required.
Multiple functions may sign or acknowledge the form; the parties listed above commonly provide primary custody, review, and approval.
List categories of personal and legal information collected, including the source and purpose for each category, to support lawful processing and mapping to retention rules.
State the statutory or contractual basis for processing, including consent, performance of a contract, legal obligation, or legitimate interest where applicable.
Describe role-based access, approval workflows, and authentication methods required before any disclosure of covered information.
Specify retention periods, archival procedures, and secure disposal methods aligned with IRS, HIPAA, or other applicable rules.
Identify permitted recipients, third-party processors, subcontractors, and conditions for disclosure, including cross-border transfers if relevant.
Set out audit trail requirements, incident reporting steps, and responsibilities for investigating and remediating breaches.
| Field | Configuration |
|---|---|
| Signature | Require signer full name, typed or drawn; timestamp included. |
| Authentication | Use email link plus SMS code for higher-risk submissions. |
| Conditional Fields | Show disclosure language only for consumer-facing transactions. |
| Retention Flag | Set automated retention based on the Effective Date field. |
Choose a platform that supports audit trails, secure storage, and applicable compliance controls.
Confirm the vendor provides necessary compliance assurances (ESIGN, UETA) and offers encryption in transit (TLS 1.2/1.3) and at rest (AES-256) before eSubmission.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Varies | Varies | Varies | Varies |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |