Ownership
Record legal entity, site owner, primary contacts, and billing owner. Include street address, phone, and email to establish accountability and provide escalation contacts for legal and compliance inquiries.
A Website Fact Sheet centralizes critical information to reduce compliance gaps, clarify ownership, and speed incident response. It documents technical and legal controls needed for audits, supports consistent handoffs between teams or vendors, and helps demonstrate record integrity when relying on electronic signatures under ESIGN and UETA.
Complete the Website Fact Sheet during project onboarding, audits, or transfers to capture ownership, controls, and compliance posture.
Use the fact sheet as a single source of truth for review cycles, vendor management, and incident escalation.
Record legal entity, site owner, primary contacts, and billing owner. Include street address, phone, and email to establish accountability and provide escalation contacts for legal and compliance inquiries.
List domain, DNS provider, hosting vendor, CMS and version, SSL certificate issuer and expiry, CDN, and key integrations or APIs to support operational troubleshooting.
Describe categories of personal data collected, storage locations, data flows to third parties, retention rules, and where the privacy policy is stored or published.
Summarize authentication methods, encryption in transit and at rest, firewall/WAF, logging, and administrative access custody to show how data and access are protected.
Note compliance status with WCAG 2.0 Level AA, recent audit results, remediation backlog, and which pages or templates are covered by accessibility testing.
Detail backup frequency, software update cadence, scheduled maintenance windows, rollback procedures, and responsible teams for each operational task.
| Field | Configuration |
|---|---|
| Document Format | PDF/A or searchable PDF |
| Authentication | Email + SMS code or SSO |
| Storage Location | Encrypted cloud storage (S3, Box) |
| Integrations | Google Workspace, Microsoft 365, NetSuite |
Choose platforms that support PDF, DOCX, eSign, and common integrations while meeting industry compliance requirements.
Complete during launch or handoff prior to go-live.
Review and update at least once every 12 months.
Perform vulnerability scan quarterly and after major changes.
Run WCAG audit annually and after redesigns.
Update fact sheet within 72 hours after security incidents.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Varies | Varies | Varies | Varies |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
| Envelope Cap | No envelope cap | 100 envelopes/user/year | Varies | Varies | Varies |