Scope
Define exactly which documents, categories of records, or data fields are covered and any excluded materials to avoid ambiguity about what may be shared.
A documented agreement reduces uncertainty about who may access or disclose legal materials, sets technical and procedural controls, and documents consent or authorization for reuse. It helps allocate liability, clarifies retention and destruction expectations, and supports auditability under federal rules such as ESIGN and applicable state law.
Organizations and individuals use sharer agreements to formalize data-sharing relationships and preserve legal privileges before transfer.
Choose parties who have authority over the records and can bind the organization to confidentiality, retention, and audit obligations.
An Authorized Sharer is typically a corporate officer, general counsel, or designated records custodian with authority to release documents. Their signature confirms the scope of materials shared, any permitted recipients, and representations about accuracy and privilege. The sharer must ensure internal approvals match the agreement terms and that technical controls are in place.
A Recipient may be external counsel, a regulator, vendor, or business partner authorized to receive documents under stated purposes and limitations. The recipient’s signature accepts confidentiality obligations, limits on onward disclosure, and responsibilities for secure storage and destruction as specified in the agreement.
Define exactly which documents, categories of records, or data fields are covered and any excluded materials to avoid ambiguity about what may be shared.
Specify the permitted uses (e.g., litigation review, regulatory response) and prohibit secondary uses without express written consent from the sharer.
Set nondisclosure obligations, standard of care for protection, and permitted disclosures such as compelled by law with notice requirements.
Describe technical safeguards (encryption, access logging, MFA) and procedural measures for transmission, storage, and destruction.
State retention periods, conditions for return or certified destruction, and obligations on expiry or contract termination.
Specify whether signatures, notarization, or remote online notarization are required and who bears related costs.
| Field | Configuration |
|---|---|
| Signer Order | Sequential or parallel routing |
| Authentication | Email link, SMS code, or KBA |
| Attachments | Allow required supporting documents |
| Audit Capture | Enable IP, timestamp, and certificate |
Select a platform that supports required authentication, audit trails, and the file formats used by your organization.
Ensure the chosen solution meets compliance needs (e.g., HIPAA BAA if PHI is involved) and can export a tamper-evident signed PDF with an audit trail for recordkeeping.
When responding to diligence requests, the firm used a sharer agreement to limit use to acquisition review and preserve privilege.
A healthcare provider authorized a business associate to receive limited patient records for billing under a BAA.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | Yes, 7-day trial | Varies | Varies | Varies | Varies |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |