Zoho Sign

Publisher Attestation: The information on this page is based on a self-assessment report provided by the app developer on the security, compliance, and data handling practices followed by this app. Microsoft makes no guarantees regarding the accuracy of the information.

Last updated by the developer on: April 29, 2019

General information

Information provided by Zoho Corporation Pvt Ltd to Microsoft:

Information Response
App name Zoho Sign
ID 7a22873b-81e6-48ed-aee3-6f0e7dd5a104
Capabilities Tab
Office 365 clients supported Microsoft Teams
Partner company name Zoho Corporation Pvt Ltd
Physical address ZOHO Corporation Pvt. Ltd. 4141 Hacienda Dr, Pleasanton,CA 94588
Contact information for this app support@zohosign.com
URL of partner website https://zoho.com
URL of Teams application info page https://www.zoho.com/sign/help/teams-extension.html
URL of Privacy Policy https://www.zoho.com/privacy.html
URL of Terms of Use https://www.zoho.com/terms.html
Main telephone number None
Description of available licensing options, if any Zoho Sign users who have an account with Zoho Sign can access the app in Teams, irrespective of their license. They will have access to the features in ZohoSign which corresponds to their license.
Licensing contact support@zohosign.com
Licensing telephone number 1 (877) 834 4428

Feedback

Questions or updates to any of the information you see here? Contact us!

How the app handles data

Information provided by Zoho Corporation Pvt Ltd on how this app collects and stores organizational data, and what control an organization has over this data.

Data access using Microsoft Graph

List any Microsoft Graph permissions this app requires, and for each, whether they are delegate or application permissions, the justification and purpose for this permission (what does the app use this information for?), and whether the app stores any of this information in its databases.

Permission Delegated/Application Justification/Purpose Is any of this data stored in app database(s)? Azure AD App ID
Files.ReadWrite.All Delegated Have full access to all files user can access.
Contacts.ReadWrite Delegated Have full access to user contacts.
User.ReadBasic.All Delegated Read all user's basic profiles.
Contacts.ReadWrite.Shared Delegated Read and write user and shared contacts.
Files.ReadWrite Delegated Have full access to user files.
Files.ReadWrite.Selected Delegated Read and write files that the user selects.
profile Delegated View user's basic profile.
email Delegated View user's email address.
offline_access Delegated Maintain access to data you have given it access to.

Telemetry data

Does any organizational information, including EUII (end-user identifiable information) and OII (organizational identifiable information), appears in this application's telemetry/logs? If yes, describe what data is present and what controls/processes an organization has in place to archive and/or delete it. If no, describe the controls/processes in place to prevent EUII and OII from appearing in telemetry/logs.

We don't collect EUII / PII in telemetry and logs. We have scripts in place to look for and alert for fixing any such data being visible.

Storing and securing organizational data

Describe where/how is this application's data is stored and how access to it is controlled. Is it encrypted? Who can access it? How do you ensure that only authorized systems/individuals can access it? Examples: 2FA for all admins, Privileged Access Management (PMA), partitioning service admin accounts from Azure AD/corporate user accounts, protected IP ranges between systems, etc.

All the customer data is encrypted at rest. Logical access to the servers is provided through an isolated & dedicated network and is highly secured and monitored. This network is protected with Firewall, 2- Factor Authentication and Kerberos Authentication Protocol. The accessing machines are securely hardened so that no data can be copied or transferred from the data center. Physical Access to the data centers are protected with Biometric+PIN. No visitors are allowed inside the dedicated cages of Zoho in the data centers. Only a very restricted number of employees have the access to the servers to carry out any emergency works.

Organizational controls for data stored by partner

Describe any capabilities an organization's administrators have to control their information residing in partner systems, e.g. deletion, retention, auditing, archiving, end-user policy, etc.

Customers as the data controller have access to the data all the time. Admins can add or remove users from Zoho Sign. They will be able to view all information stored in the application, including complete audit trails, reports of usage. They can delete data and users, transfer control of data between users.

Human review of organizational information

Are humans involved in reviewing or analyzing any organizational data that is collected or stored by this app?

Not specified.

Feedback

Questions or updates to any of the information you see here? Contact us!

Information from the Microsoft Cloud App Security catalog appears below.

Note

The information on this page is based on a self-attestation report provided by the app developer on the security, compliance and data handling practices followed by the app. Microsoft makes no guarantees regarding the accuracy of the information. Contact us if you believe information about an app is outdated.

View in a new tab

Feedback

Questions or updates to any of the information you see here? Contact us!