Adobe Sign for Word and PowerPoint

Publisher Attestation: The information on this page is based on a self-assessment report provided by the app developer on the security, compliance, and data handling practices followed by this app. Microsoft makes no guarantees regarding the accuracy of the information.

Last updated by the developer on: October 28, 2019

General information

Information provided by Adobe Inc. to Microsoft:

Information Response
App name Adobe Sign for Word and PowerPoint
ID WA104381155
Office 365 clients supported Word 2016 for Mac, Word Online, Word 2013 or later, PowerPoint 2016 for Mac, PowerPoint Online, PowerPoint 2013 or later
Partner company name Adobe Inc.
Physical address 345 Park Ave, San Jose, CA 95110
Contact information for this app https://helpx.adobe.com/support.dc.html
URL of partner website https://www.adobe.com/
URL of Teams application info page https://helpx.adobe.com/sign/help/adobesign_microsoft_teams...
URL of Privacy Policy https://www.adobe.com/privacy/policies-business/esign.html
URL of Terms of Use https://go.microsoft.com/fwlink/?LinkID=521715&omkt=en
Main telephone number 1 (855) 959-0100
Description of available licensing options, if any https://acrobat.adobe.com/us/en/sign/pricing/plans.html
Licensing contact https://acrobat.adobe.com/us/en/sign/contact.html
Licensing telephone number 1 (855) 959-0100

Feedback

Questions or updates to any of the information you see here? Contact us!

How the app handles data

Information provided by Adobe Inc. on how this app collects and stores organizational data, and what control an organization has over this data.

Data access using Microsoft Graph

List any Microsoft Graph permissions this app requires, and for each, whether they are delegate or application permissions, the justification and purpose for this permission (what does the app use this information for?), and whether the app stores any of this information in its databases.

Permission Delegated/Application Justification/Purpose Is any of this data stored in app database(s)? Azure AD App ID
offline_access Delegated To refresh access token, when the current one is expired. For example, when user is in a "send for signature" window and leave it inactive for too long, we need to refresh a new token when user is active.
People.Read Delegated To autofill email address in the "Send for signature" experience, by typing some initial letters, do not require users to type the whole emails.
User.Read Delegated To read the profile of user and match their profile (basically, their email) to our database so they can use Adobe Sign.
openid Delegated To sign user in to ensure their consent for the permission of using Adobe Sign app. Email is the unique identifier for users in Adobe Sign. We store email ID so we can map all activities of that user to his or her Adobe Sign record.
Mail.ReadWrite Application To populate the attached document, sender and receiver emails, and message content from emails to Adobe sign to send for signature. This is to save the user time to retype those fields in Adobe Sign. After an agreement is signed, we automatically compose a new email for the user to send an email to inform to his recipients that the transaction is done. We need data from the email to pull out Adobe Sign History and Audit Trail report of every transaction. https://helpx.adobe.com/sign/using/audit-reports-transaction-history.html

Non-Microsoft Services Used

If the app transfers or shares organizational data with non-Microsoft service(s), list the non-Microsoft service(s) the app uses, what data is transferred, and include a justification for why the app needs to transfer this information.

N/A

Data access via bots

If this app contains a bot or a messaging extension, it can access the roster (first name, last name, display name, email address) of any team member in a team or chat it's added to. Does this app make use of this capability?

Access team/chat roster? Justification/Purpose Is any of this data stored in app database(s)?
No N/a None

Add-in Data Access

List the permissions this app requires for accessing your organization's data, the justification and purpose for this permission (what does the app use this information for?), and whether the app stores any of this information in its databases.

Permission Description
ReadWrite Document Can read and make changes to your document
Send Data Can send data over the Internet

Telemetry data

Does any organizational information, including EUII (end-user identifiable information) and OII (organizational identifiable information), appears in this application's telemetry/logs? If yes, describe what data is present and what controls/processes an organization has in place to archive and/or delete it. If no, describe the controls/processes in place to prevent EUII and OII from appearing in telemetry/logs.

None. We do not log any EUII or OII in out telemetry or logs. The process is our own security reviews which validate that we are not doing this.

Storing and securing organizational data

Describe where/how is this application's data is stored and how access to it is controlled. Is it encrypted? Who can access it? How do you ensure that only authorized systems/individuals can access it? Examples: 2FA for all admins, Privileged Access Management (PMA), partitioning service admin accounts from Azure AD/corporate user accounts, protected IP ranges between systems, etc.

We store the data in our service and have compliance and operation process for access control. All user related data and tokens are encrypted.

Organizational controls for data stored by partner

Describe any capabilities an organization's administrators have to control their information residing in partner systems, e.g. deletion, retention, auditing, archiving, end-user policy, etc.

We do not have any customer admin interaction in our system for Microsoft Teams application.

Human review of organizational information

Are humans involved in reviewing or analyzing any organizational data that is collected or stored by this app?

No

Feedback

Questions or updates to any of the information you see here? Contact us!

Information from the Microsoft Cloud App Security catalog appears below.

Note

The information on this page is based on a self-attestation report provided by the app developer on the security, compliance and data handling practices followed by the app. Microsoft makes no guarantees regarding the accuracy of the information. Contact us if you believe information about an app is outdated.

View in a new tab

Feedback

Questions or updates to any of the information you see here? Contact us!