Dropbox Sign (formerly HelloSign): where do your PDFs go?
Sovereignty score
43/100
High exposureDropbox Sign (formerly HelloSign) is published by Dropbox, Inc. (United States). The vendor falls under the US CLOUD Act: US authorities can request your files, whatever the hosting country.
Score calculated for this tool alone, without document-type weighting.
Checkpoints
- CLOUD Act
- Exposed Dropbox, Inc. is a US company whose main servers are in the United States (transfers covered by DPF / SCCs).
- Jurisdiction
- Non-EU United States — US law — subject to the US CLOUD Act
- Servers
- Non-EU Primary infrastructure hosted in the United States
- Retention
- Persistent Signed documents and audit trails kept for the lifetime of the account
- AI
- No No declared public training on signed contracts, but permanent US storage.
Quick answers
Is Dropbox Sign (formerly HelloSign) subject to the CLOUD Act?
Yes. Dropbox, Inc. is a US company whose main servers are in the United States (transfers covered by DPF / SCCs).
Where are files uploaded to Dropbox Sign (formerly HelloSign) hosted?
Primary infrastructure hosted in the United States.
How long does Dropbox Sign (formerly HelloSign) keep your documents?
Signed documents and audit trails kept for the lifetime of the account.
Does Dropbox Sign (formerly HelloSign) use your files to train AI?
No declared public training on signed contracts, but permanent US storage.
Which certifications does Dropbox Sign (formerly HelloSign) claim?
ISO/IEC 27001 · ISO/IEC 27018 · SOC 2 Type II.
Our analysis
US hosting and jurisdiction for all signed contractual documents.
Source: Dropbox Sign Privacy Policy & Security ·
Alternatives for “Signature”
Tools with the same use, ranked by sovereignty score.
What about all your tools?
Get the sovereignty score of every PDF tool your teams use in 2 minutes. Free, no email, 100% local.