Per User License
Web App only — no API access. Unlimited envelopes per user, so cost is predictable as volume grows.
Dropbox Sign Use Cases
Sign use cases span several verticals — from HR and onboarding to real estate, sales, insurance, and education. Moving these workflows to eSignature eliminates manual printing, signing, and scanning, while keeping documents authentic and legally binding. Because signing happens remotely, it also works well for teams with a distributed workforce or signers who aren't physically present.
| Vertical | Use Case |
|---|---|
| HR / On-Boarding | Employee onboarding, W-2/I-9 forms, authorizations, offer letters, NDAs |
| Real Estate | Lease agreements and HOA resolutions |
| Purchase / Sales | Sales contracts, RFPs, procurement agreements |
| Loan / Insurance / Tax | Tax, insurance, or financial documents such as loan agreements or credit applications |
| Education | Student contracts, tuition assistance, fundraising, campus events, scholarships, faculty agreements, parental approval forms |
Dropbox Sign Plans
Choosing the right plan comes down to three things: the customer's use case and required features, whether they'll primarily use the API or the Web App, and the volume of requests or users — which determines the right pricing metric.
Per Envelope License
API and Web App included. Unlimited users, which makes it easier to scale across a growing organization.
Note: You can have up to 20 signers on one document, regardless of plan.
Team Management
Every Dropbox Sign team member is assigned one of four roles — Admin, Team Manager, Developer (API plans), or Member — which determines what they can see and do. If your organization has multiple teams, each one has its own Admins and Team Managers, and members can't see other teams' documents even inside the same organization.
The Admin Console
The Admin Console is the headquarters of team management. Admins can create new teams, invite and manage users, track template ownership, and manage team settings.
| Console Section | What It Does |
|---|---|
| Users | Invite new users individually or in bulk, manage current team members, and update roles or team assignment. |
| Teams | Create and manage teams. Each team has its own Admin and Manager. There are four roles: Admin, Team Manager, Member, and Developer (API plans). |
| Reporting | Pull user activity, compliance, and document status reports. Team Managers see charts for their own team; Admins see all teams. |
| Settings | General (company name, logo, industry), Signature Requests (From field, email signature, default title/date format), Documents & Templates (sync and deletion controls), Syncing & Sharing. |
| Security | Manage SAML SSO and multi-factor authentication for the entire team. |
Multi-teams are Premium only: an account can have up to three levels of teams, with a total of 50 teams, but only on a Premium plan.
Dropbox Sign Numbers to Remember
Every plan shares the same core request limits — useful to know before you scope a rollout.
20
Signers per document
40
Files per signature request
40MB
Max size per document
500
Total pages per request
250
People per bulk send request
Bulk Send & In-Person Signing
Two ways to collect signatures beyond a standard one-to-one request, both available on Standard and Premium plans.
Bulk Send
Send single- and multi-signer requests to up to 250 people at once using a CSV. The file can include as many columns as you like, but it must include a "name" column and an "email_address" column in the header row.
In-Person Signing
Set up a template on an iPad or tablet so a client can sign with their finger on the spot. Intended for single-signer documents only — if more than one signer is needed, send the request through the Web App instead. Requires an internet connection.
Dropbox Qualified Electronic Signatures (QES)
QES verification requires a face-to-face video call to confirm the signer's identity. The signer receives an email requesting a QES, reviews the document in Sign, completes an IDnow video call (via app or browser, on phone, tablet, or laptop), and signs the document. Once IDnow verifies identity, Dropbox Sign applies a digital QES certificate generated by Namirial — a Trust Service Provider on the EU Trusted List — and confirms completion to both parties.
- IDnow stores signer identification data in Germany for 90 days, then deletes it completely.
- If a signer exits the process, both parties get periodic reminders — signers have 90 days to complete it.
- Resending a request due to a mistake counts toward your quota; a failed verification you don't resend does not.
- QES requests can only be sent to one signer at a time — they can't be used in bulk send.
- QES cannot be used for embedded API signing.
Quota alerts:Admins are emailed at 80% of their team's purchased QES quota. Once fully used, more are added automatically in the same increment you originally purchased (e.g. 100 at a time, up to 1,000). QES quota is valid for one year from purchase, and Admins can temporarily disable QES for the whole team.
Dropbox Document Management
Search documents by name, owner, or document ID, and add modifiers to refine results further. Deletion works differently depending on your role.
Deleting as a User
You can delete documents from your own account. Documents deleted for everyone are permanently removed after 30 days and can be downloaded any time before that. You cannot delete a document that is pending signature.
Deleting as an Admin
Admins can delete a document for everyone, allow senders to delete their own documents, and bulk-delete a team's completed documents from the Admin console — with a 72-hour retention period.
Bulk Deletion Options
One-Off Delete
A manual, irreversible bulk delete of all completed documents to date, with a 72-hour retention period to download anything you want to keep. Active requests and drafts are not affected.
Ongoing Delete
Automatically deletes all future documents 72 hours after completion. Deactivating it cancels any pending deletions still inside the retention window.
Sync first:Dropbox Sign recommends activating team cloud sync before using bulk delete. Documents stored outside your Sign organization — including signers' own copies — are not deleted. All parties are notified by email when a document is deleted, and again 3 days before permanent deletion.
Templates & Template Links
Templates and template links both speed up repeat signature requests, but they work differently. Templates create signature requests sent directly to specific signers via email — ideal for something like an employee handbook sent to every new hire. Template links are shared via a URL that anyone can sign, such as a waiver embedded on your website. Templates and template links are available on Essentials, Standard, and Premium plans; how many you can create depends on your plan.
Key difference:a template can request signatures from multiple people at once — a template link can only collect one signer's signature at a time. Premium accounts can also set up variable signers within a template.
| Action | What to Know |
|---|---|
| Editing | Editing a template requires cancelling any pending requests sent from it and resending updated ones. Editing a template link keeps the same URL, so it doesn't need to be resent. |
| Deleting | Deleting a template or link removes it for you and everyone it was shared with. Admins can delete any template or link, even ones they don't own. Deleting a template does not cancel pending requests already sent from it. |
Signing Order, CC, Editing & Cancelling
The order in which people sign a document can establish authority, sequence, and evidence of who agreed to what and when — important for legal or financial documents and for defending a document in a dispute.
- CC recipients: Click "+ Add CC recipient" in the Review and Send step to copy anyone on a request. CC roles can also be built into templates. HIPAA compliance mode removes this option.
- Editing: You can edit and resend a request at any time, but everyone who already signed will need to sign again. HIPAA compliance may lock the Document Title and Message fields.
- Cancelling: Cancel a request any time before all signers complete it. If everyone has already signed, delete the document instead.
- Downloading: Once complete, download signed documents from the website or the Sign mobile app.
Branding & Notifications
Sign Business senders can brand their signature requests five ways: a company logo (shown on notification emails and the signer page), an email tagline, a custom "from" field, a custom email signature, and a custom URL signers land on after completing a request. The Dropbox Sign API goes further, allowing full white-labeling for admins who want to offer a branded eSignature experience inside their own product.
Notification Controls
Activity Alerts
Get notified when you sign, when someone signs a document you sent, when a document you sent is opened, and via a daily outstanding-request summary.
PDF Copies
Choose whether a signed PDF is emailed to you, to other signers and CC'd parties, or both — for documents you sign or send.
Working with the Dropbox Sign API
The Dropbox Sign API lets different software systems communicate with Sign directly — accessing electronic signature functionality and building custom workflows into any application, even self-developed ones. Approximately 90% of API customers implement Sign in under 5 days.
Built to Be Embedded
Drop signing directly into your own product or workflow instead of sending users to a separate app.
World-Class Developer Experience
Clear docs, SDKs, and sandbox testing make integration fast — most customers go live in under 5 days.
Best-in-Class User Experience
A polished signer flow that reflects well on your brand, not a generic third-party page.
Developer-Staffed Support
Get help directly from engineers who know the API, not a generic support queue.
App or API?
Teams that want a non-embedded experience without any coding are a good fit for the standalone Sign app. Teams of 10 or more can use the secure, scalable enterprise eSignature platform. If you need a customizable eSignature experience embedded seamlessly into your own workflow, the Dropbox Sign API is the better fit — including improved user experience, resource savings, compliance management, and flexibility to integrate into almost any environment.
Rate limits: API access is included on per-envelope plans. Talk to Iron Cove about the right API tier for your expected request volume before you build.
Security & Authentication
Dropbox Sign stores forms and audit trail databases in data centers certified ISO 27001, ISO 9001, SOC 1 Type 2, and SOC 2 Type 2. Every signed document carries a transaction log processed with hashing technology, so any tampering is detectable — the audit trail can even be returned as a separate file instead of being appended to the signed document. Note that self-signed "Just me" documents don't include an audit trail, since you're the only signer.
Court-Admissible Audit Trails
Every interaction with a signature request is logged and appended to the signed document.
SSL Encryption in Transit
All communications between signers, senders, and Dropbox Sign use SSL encryption.
AES 256-bit Encryption at Rest
All stored documents are encrypted using AES 256-bit encryption in certified data centers.
SMS & Password Authentication
Require signers to verify with an SMS code or a sender-set password before viewing a document.
Single Sign-On (SSO)
Premium plan admins can enable SAML SSO in account settings or the admin console.
Multi-Factor Authentication
Require two or more forms of identification before a user can access their Dropbox Sign account.
Compliance & Data Residency
Sign technology uses an Adobe Trusted List (ATL) compliant, cloud-based HSM to apply "certifying" digital signatures — applied invisibly to provide authenticity, integrity, and origin assurance, with no further changes, annotations, or additional digital signatures allowed once applied.
Certifications & Regulations
- SOC 2 Type 2
- ISO 27001
- HIPAA (Standard & Premium annual plans with signed BAA)
- U.S. ESIGN Act of 2000
- Uniform Electronic Transaction Act (UETA) of 1999
- eIDAS regulation for the EU (2016)
- GDPR
- Privacy Shield
Data Residency
Dropbox Sign stores document data across the US, Australia, the EU, Japan, Canada, and the UK, with the US as the default region for all plans. Premium customers can choose an alternative region — all at-rest documents and signatures for the account are then stored in the corresponding AWS data infrastructure, with a backup in a second regional location (for example, Frankfurt with a backup in Paris).
Integrations with Microsoft & Google
Beyond the open API, Dropbox Sign ships ready-to-install integrations for the tools most teams already use — letting admins and signature requestors initiate, automate, and complete signing without leaving those apps.
Microsoft Integrations
Microsoft Word
Sign or request signatures directly from any Word file up to 40MB, including CC'd recipients.
Microsoft Dynamics 365
Generate an eSignature capture form, add recipient info, and send for signature without leaving Dynamics.
Microsoft OneDrive
Sync adds a Dropbox Sign folder to OneDrive and lets you upload documents to sign directly from OneDrive.
Microsoft Azure AD
Provides single sign-on and just-in-time provisioning for your Dropbox Sign team.
Microsoft SharePoint
Native out-of-the-box integration for initiating and completing signature requests from SharePoint.
Out-of-the-Box Integrations
HubSpot
Initiate, automate, and complete signature requests natively inside HubSpot.
Salesforce
Send contracts and track signature status without leaving the Salesforce record.
SharePoint
Native template creation, reporting, and document storage inside SharePoint.
Google Docs & Drive
The Dropbox Sign add-on lets you prepare and send signature requests directly from Google Docs.
Frequently Asked Questions
Common questions we hear from teams evaluating or already running Dropbox Sign.
What is the difference between per-user and per-envelope pricing?
Per-user plans include unlimited envelopes and are Web App only (no API). Per-envelope plans include the API and unlimited users, making them the better fit for teams that need to embed Dropbox Sign into their own systems.
How many people can sign one document?
Up to 20 signers per signature request. Bulk send can reach up to 250 people, but each of those documents is treated as a single- or multi-signer request sent individually via a CSV.
What is a Qualified Electronic Signature (QES)?
A QES adds identity verification through a face-to-face video call with IDnow before a digital certificate from Namirial is applied to the signature. QES requests can only be sent to one signer at a time and cannot be used for embedded API signing.
Can I merge two Dropbox Sign accounts?
No. Sign cannot merge two accounts under two different email addresses, even if they belong to the same person, and the same email cannot be assigned to two different accounts. You can delete the account you don't want and change the email on the one you keep.
What happens when I delete a document?
Documents deleted for everyone are permanently removed after 30 days and can be downloaded any time before that. Documents pending signature cannot be deleted — they must be cancelled first. Admins get a 72-hour retention window on bulk deletions.
Is Dropbox Sign HIPAA compliant?
Yes, for customers on an annual Standard or Premium plan who have signed a Business Associate Agreement (BAA) and meet the minimum contract value. Admins can also enable HIPAA compliance mode, which removes the CC recipient option.