Scope
Defines covered sites, activities, dates, and exclusions so obligations are limited to intended assets and timeframes.
A clear agreement reduces ambiguity about who implements security measures, who bears financial responsibility after an incident, and how losses are allocated. It supports compliance with insurance, procurement, and regulatory expectations and documents agreed risk-mitigation steps.
Typical parties include facility owners, contractors, insurers, government contracting officers, property managers, and security service providers.
Parties should ensure authorized signatories execute the agreement and that responsibilities match operational capabilities and insurance limits.
Defines covered sites, activities, dates, and exclusions so obligations are limited to intended assets and timeframes.
Lists required physical, procedural, and technical safeguards (access controls, patrols, CCTV, screening) with minimum performance levels.
Specifies notice timing, information to deliver, escalation path, and cooperation obligations for investigations and law enforcement.
Sets minimum insurance types/limits, subrogation waiver terms, and indemnity triggers for loss allocation.
Allocates excused performance for acts of terrorism and defines remediation or termination rights following qualifying events.
Permits verification of security compliance, remediation deadlines, and consequences for repeated noncompliance.
| Field | Configuration |
|---|---|
| Signature field | Assign to named signer; require date stamp |
| Attachment field | Require upload of insurance certificate |
| Conditional clause | Show insurance clause if contractor is selected |
| Authentication | Enable email + SMS code or higher for critical roles |
Ensure your e-signature platform supports required authentication, attachments, and an auditable certificate of completion before e-signing.
Choose a platform that provides secure storage, exportable signed PDFs, and a tamper-evident audit trail to support claims, audits, and legal enforceability.
Set exact MM/DD/YYYY dates to avoid ambiguity about coverage start and end
Typically 24–72 hours for insurer notification; follow policy language
Specify days allowed to cure a compliance breach, commonly 30–90 days
Provide updated certificates within 10–30 days of renewal or change
Annual review recommended to align with insurance renewals
Parties negotiate scope and security measures; legal review occurs.
Risk and insurance teams confirm required coverage and limits.
Authorized signatories sign and date the agreement.
Store executed agreement and supporting documents in contract repository.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Varies by plan | Varies by plan | Varies by plan | Varies by plan |
| Bulk Send | Available on select plans | Available | Available | Available | Varies |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes (BAA available) | Yes (BAA available) | Yes (BAA available) | No | No |
| Envelope Cap | No envelope cap | 100 envelopes/user/year limit | Varies by plan | Varies by plan | Varies by plan |