- GDPR
- ESIGN and UETA
- 21 CFR Part 11
- PCI DSS
- AWS physical security
Compliance certifications, regulations and security
GDPR Compliance
BunnyDoc understands that protecting privacy requires a comprehensive security programme. We conducted a thorough study and developed a resources page with detailed information regarding GDPR and how BunnyDoc is compliant.
ESIGN and UETA compliance
BunnyDoc conforms with the standards of the Electronic Signatures in Global and National Commerce Act (ESIGN) and Uniform Electronic Transactions Act (UETA), giving customers across all industries and verticals the ability to manage and sign their documents electronically.
21 CFR Part 11
BunnyDoc’s organisational features and functionality help our clients fulfil their obligations under 21 CFR Part 11 by assisting them to comply with those obligations. These functions include document history retention, two-factor authentication, session duration and timeouts because of inactivity, eSignature timestamps, digital certifications, and session timeouts.
PCI DSS certification
For payment collection, we work with third-party “Stripe.” Regarding protecting consumer data, privacy, and security, they take this matter extremely seriously.
Physical security
Data centre locations are carefully selected to mitigate environmental risks like flooding, extreme weather, and seismic activity. AWS provides physical data centre access only to approved employees. All employees who need data centre access must first apply for access and provide a valid business justification. Access requests are approved based on the principle of least privilege, requiring individuals to specify the desired data centre layer, and imposing time restrictions. Access to data centres is regularly reviewed. Access is automatically revoked when an employee’s record is terminated in Amazon’s HR system
Software security
Two-factor Authentication
Secure your account with two-factor authentication
Signer Authentication
Protect your documents with dual authentication. Authenticate Signer with a passcode.
Session Timeout
Session timeout if the signer does not complete the document in a certain time.
Encryption
Your data is stored in an encrypted format. When it comes to databases, your passwords are not stored as plain text.
Signature Restriction
Set this up if you are not accepting all types (draw, type, upload) of signatures.
Audit Trail
Keep track of all signing events and changes for each document using a court-admissible audit trail.
Frequently asked questions
Does BunnyDoc comply with the country’s laws I lived in?
Each country has its own regulations for how eSignatures can be used. Please check out the list of countries.
How secure is my document in BunnyDoc?
Cloud storages like the one BunnyDoc uses, is safer and more secure than storing documents physically. Only approved employees are allowed to access data centers.
How does BunnyDoc encrypt and store documents?
BunnyDoc stores documents using SSL and AES-256 bit encryption. When it comes to its database, it only keeps one-way encrypted passwords, no plaintext.
Is BunnyDoc safe?
BunnyDoc takes protecting confidential information seriously. It holds 21 CFR Part 11 compliant, and only authorized persons are allowed to access data centers and system backend.
Are documents stored differently depending on the type of plan a user has?
Pricing plans are different only in terms of features. Security and storage stays same no matter what package you are on. You can be sure that your documents are safe and secure.
How can I track who signs the document?
Every uploaded document has a history. If you review the Audit Trail, you will see who did what to your contract, when they signed/declined and where they did it from with unique information like timestamps, Ip address, email, and more.