Can I sign the renewal form electronically?

Yes. Electronic signatures are enforceable under the ESIGN Act and UETA when the signatory demonstrates intent, consents to use electronic records, attribution is clear, and the record is retained in a reproducible form.

Do renewal forms require notarization?

Not generally for SOC renewals. If a contract or jurisdiction requires notarization, follow the specific state rules; remote online notarization may be available depending on state law.

What happens if I change scope after submitting?

Notify the auditor immediately. Scope changes often require an amended engagement letter, may change fees, and can affect the testing approach and schedule.

Who must approve the renewal before submission?

An authorized executive or compliance owner with delegated authority should approve the scope and fees; auditors often require a named signer on record.

How should I deliver supporting evidence?

Provide organized, labeled files via secure file transfer or an auditor-approved portal. Ensure timestamps, versioning, and document owners are clear to reduce follow-up.

Can I revoke or correct a submitted renewal form?

Corrections typically require submitting an amended form or an addendum and communicating changes to the auditor; revocation may be possible but will affect scheduling and fees.

Electronic Signature
Templates
Miscellaneous
Service Organization Control Renewal Form

Service Organization Control Renewal Form

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

SERVICE ORGANIZATION CONTROL RENEWAL FORM

Parties and Recitals

WHEREAS, Service Provider: is a provider of outsourced services and maintains controls relevant to the provision of those services to its clients;

Service Provider Address

WHEREAS, Client: engages Service Provider for services that may be subject to a Service Organization Control report; and

Client Address

WHEREAS, the parties desire to renew the previously agreed engagement for a Service Organization Control assessment and to set forth the scope, fees, term, confidentiality, and other terms applicable to the renewal engagement.

Scope of Work

The Service Provider shall perform the following services in connection with the renewal engagement and produce a written report describing the procedures performed, findings, and the opinion where applicable.

Scope Description

Renewal Details

Report Type (select all applicable): SOC 1 SOC 2 SOC 3

Control Categories / Trust Services Criteria

Report Period: From to .

Previous SOC Report Date:

Audit Firm / Third-Party Assessor

Payment Terms

Fee Amount: (USD)

Payment Schedule

Invoices shall be sent to:

Late Payment Fee: % per month or minimum USD, calculated from invoice due date until paid in full.

Term and Termination

Term Commencement Date: . Term Expiration Date: .

Either party may terminate this renewal engagement upon days' prior written notice to the other party. Termination for material breach shall be effective upon written notice if the breach remains uncured for days following receipt of notice.

Termination for Cause (describe)

Confidentiality

Each party acknowledges that in connection with the renewal engagement it may receive Confidential Information of the other party. "Confidential Information" means nonpublic information disclosed in any form that is designated as confidential or that, under the circumstances, ought reasonably to be understood as confidential. Each party agrees to (i) maintain the confidentiality of such information using the same degree of care it uses to protect its own confidential information but no less than reasonable care; (ii) use Confidential Information solely to perform obligations or exercise rights under this agreement; and (iii) not disclose Confidential Information to any third party except to employees, contractors or auditors who have a need to know and are bound by confidentiality obligations no less protective than those contained herein.

Exceptions: Confidential Information does not include information that is (a) publicly available other than by breach of this agreement; (b) rightfully received from a third party without breach of any obligation of confidentiality; or (c) independently developed without the use of Confidential Information.

Confidentiality Acknowledgement

The undersigned acknowledges and agrees to be bound by the confidentiality obligations set forth above.

Cooperation and Access

The Service Provider shall provide the auditor and Client reasonable access to personnel, records, systems, and facilities necessary to perform the renewal assessment. The parties shall cooperate in scheduling, data collection, and remediation activities as reasonably required to complete the engagement within the agreed period.

Primary Contact for Coordination

Governing Law; Entire Agreement

Governing Law: This Renewal Form and any dispute arising out of or relating to it shall be governed by the laws of the State of without regard to its conflict of law principles.

Entire Agreement: This Renewal Form, together with any referenced engagement letter, exhibits, or attachments executed by the parties, constitutes the entire agreement between the parties with respect to the renewal engagement and supersedes all prior and contemporaneous understandings, agreements, negotiations, and communications, whether written or oral, regarding the subject matter hereof. Any amendment must be in writing and signed by authorized representatives of both parties.

Certifications

By signing below, each party certifies that it has the full corporate or organizational power and authority to enter into this Renewal Form and to perform its obligations hereunder, that the individual signing is authorized to bind the respective party, and that the facts set forth in this form are accurate to the best of the signer's knowledge.

Service Provider:

By:

Date:

Client:

By:

Date:

What the Service Organization Control Renewal Form Is

The Service Organization Control Renewal Form documents an organization's request to renew an existing SOC engagement or report schedule with an audit firm or compliance assessor. It captures updated organizational details, scope changes, control modifications, and the requested audit period so the assessor can plan testing and reporting. The form is typically used by service organizations that provide outsourced services impacting customer financial reporting or data security and that seek to maintain continuous SOC attestation coverage.

Why Completing a Renewal Form Matters

A correctly completed renewal form ensures consistent audit scope, prevents testing delays, and documents changes in systems or controls that affect SOC coverage and client assurances.

Who Prepares and Reviews This Form

Final approval typically rests with the compliance owner or an executive with delegated authority to bind the organization for audit scope and fees.

Internal Compliance Teams that manage control inventories and coordinate evidence collection for the audit process.
Information Security or IT Operations that specify technical scope, hosting environments, and control changes.
Vendor Management or Legal that confirm contractual obligations and client-facing scope.

Core Sections You’ll Find on the Renewal Form

Most forms group information into identifiable sections to make the auditor’s scoping efficient and to reduce follow-up questions during planning.

Organization Details

Legal name, DBA, tax ID, primary contact and business addresses for scope verification.

Engagement Scope

Services, locations, and systems included or excluded from the SOC engagement.

Control Changes

Recent control additions, removals, or key configuration changes since the last report.

Audit Period

Requested start and end dates for testing and whether interim or period-end testing is needed.

Supporting Evidence

List of documents, policies, and evidence the organization will provide for testing.

Signatory Authority

Designated approver, title, and signature block confirming the request and fees.

Required Administrative Data and Security Details

Entity Name: Full legal entity

Primary Contact: Name and role

Service Description: High-level service summary

Locations: Physical/cloud locations

Control Changes: Yes/No summary

Requested Period: MM/DD/YYYY range

Step-by-Step: How to Complete the Renewal Form

Complete the form in sequence to prevent missing scope items or evidence that trigger auditor queries.

01

Gather Documents: Collect policies, change logs, and previous SOC report references.
02

Define Scope: List included systems, services, and locations.
03

Summarize Controls: Note control changes and owners since last report.
04

Authorize Signer: Obtain signatory approval and date the form.

How to Configure an Online Renewal Workflow

When using an eSignature or document platform, set up fields and routing in advance to streamline execution and audit trails.

Field	Configuration
Entity Name Field	Required text field, auto-validated against ID registry
Date Range Field	Two date fields MM/DD/YYYY with validation
Control Change Attachment	Optional file upload for change tickets and evidence
Signer Routing	Sequential routing: preparer → manager → authorized signer

Digital Signing and Technical Requirements

Retain the signed copy and audit trail as evidence for the assessor and for your internal compliance records.

Document Format: PDF or DOCX accepted
Authentication: Email link, SMS code, or advanced auth
Audit Trail: IP, timestamp, and action log

Typical Submission Flow for a Renewal Form

A clear routing sequence reduces back-and-forth and shortens auditor planning time.

Prepare Form: Pre-fill entity and scope details.
Attach Evidence: Upload change logs and policies.
Route to Signer: Send to authorized signer via eSignature.
Send to Auditor: Deliver signed packet and audit trail to assessor.

Typical Timelines and Processing Expectations

Understanding timeline expectations helps align internal resources with the auditor’s planning and testing windows.

Submission Lead Time:

30–60 days before desired audit start

Auditor Planning:

1–2 weeks for scope review and kickoff

Evidence Collection:

2–6 weeks depending on scope

Testing Window:

Depends on requested period; may include interim steps

Report Delivery:

Typically 4–8 weeks after testing concludes

Key Milestones in a Renewal Engagement

A milestone view clarifies critical handoffs and ensures timely completion of each phase.

01

Form Submission

Prepare and submit renewal form to initiate the engagement.

02

Kickoff Meeting

Auditor and client align on scope, timelines, and evidence.

03

Evidence Delivery

Client uploads documents and access for testing.

04

Testing & Review

Auditor conducts control testing and documents findings.

Common Mistakes That Slow Renewal

Incomplete scope descriptions that force auditor clarification and delay planning.
Mismatched entity names or tax IDs that prevent auditor acceptance of the request.
Missing change documentation for control updates that increases sample selection work.
Unsigned or improperly authorized forms that require re-execution and extend timelines.

Risks and Consequences of an Incorrect Renewal Form

Audit Delays: Longer engagement timelines

Scope Gaps: Uncovered services may not be reported

Client Impact: Contractual noncompliance risk

Increased Fees: Additional billable audit hours

Reputational Risk: Client confidence may erode

Remediation Burden: Post-audit corrective actions required

eSignature Provider Comparison for Executing Renewal Forms

Select an eSignature provider that supports audit trails, appropriate authentication, and any industry compliance (for example, HIPAA) required for your renewal packet.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day trial	Varies	Varies	Varies	Varies
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

Practical Renewal Scenarios

Two common scenarios show how organizations approach renewal depending on whether scope changed significantly or remained stable.

Scenario: Stable Scope

Company maintained the same services since the last report

Minimal control changes were documented
The renewal form focused on confirming dates, attaching the latest policies, and obtaining an authorized signature to schedule routine testing.

Scenario: Scope Expansion

Organization added a new cloud service and an overseas datacenter

Several controls were modified and new owners named
The renewal form required detailed change logs, additional evidence attachments, and a revised estimated fee schedule for expanded testing.

Who Can Sign the Renewal Form

Compliance Officer — SOC Manager

Typically signs to confirm that the information about controls and scope is accurate and that sufficient internal resources will be made available during the audit.

CISO — Chief Information Security Officer

May sign when the renewal involves technical scope or security-related attestations, confirming control ownership and technical attestations.

Frequently Asked Questions About the Renewal Form

Answers to frequent concerns about form content, signatures, and electronic submission to help prevent delays.

Need help? Contact support

Can I sign the renewal form electronically?
Yes. Electronic signatures are enforceable under the ESIGN Act and UETA when the signatory demonstrates intent, consents to use electronic records, attribution is clear, and the record is retained in a reproducible form.
Do renewal forms require notarization?
Not generally for SOC renewals. If a contract or jurisdiction requires notarization, follow the specific state rules; remote online notarization may be available depending on state law.
What happens if I change scope after submitting?
Notify the auditor immediately. Scope changes often require an amended engagement letter, may change fees, and can affect the testing approach and schedule.
Who must approve the renewal before submission?
An authorized executive or compliance owner with delegated authority should approve the scope and fees; auditors often require a named signer on record.
How should I deliver supporting evidence?
Provide organized, labeled files via secure file transfer or an auditor-approved portal. Ensure timestamps, versioning, and document owners are clear to reduce follow-up.
Can I revoke or correct a submitted renewal form?
Corrections typically require submitting an amended form or an addendum and communicating changes to the auditor; revocation may be possible but will affect scheduling and fees.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now