Security and compliance for Analyzer in Sign

Review the current compliance status, security safeguards, and compliance resources available for Analyzer in Sign.

Compliance roadmap for Analyzer in Sign

Analyzer in Sign is built on Adobe's audited cloud infrastructure and is designed from the ground up to meet the same compliance bar as Adobe Acrobat Sign. Formal certifications for Analyzer in Sign are in progress. This page explains what's available today and what's coming.

Where things stand today

• Analyzer in Sign runs on infrastructure governed by Adobe's Common Controls Framework (CCF), the same control framework underlying Acrobat Sign infrastructure.
• Formal certifications and audit reporting that explicitly name this service are in progress and are expected to be completed as part of Adobe's standard audit processes, as shown in the table below.
• Because the Compliance List in the Adobe Trust Center lists only services with a completed, named attestation or report, Analyzer in Sign isn't yet listed there. Certifications are typically posted after the close of Adobe's annual audit cycle and a mandatory validation period. Adobe expects the Analyzer in Sign compliance certifications to be posted in the November/December timeframe.

Until then, this page provides the current public compliance roadmap. Contact your Adobe Sales contact for additional information about the compliance and security posture of Analyzer in Sign.

Available now

HIPAA Ready: Adobe is prepared to enter into Business Associate Agreements (BAAs) covering this service. An external review report is currently in process.

Additional certifications in progress

A target date indicates work in progress. It doesn't mean that Analyzer in Sign currently holds the listed certification or assessment.

Visit the Adobe Trust Center for published certifications or contact your Adobe Sales contact for the latest status specific to Analyzer in Sign.

Need more details for a security review?

A security overview with data-flow diagrams showing how Analyzer in Sign operates within that environment is available in the Analyzer in Sign Security Overview.

Customers conducting a security or privacy review can request a documentation packet under NDA covering existing SOC 2 and ISO reports for Adobe's audited environment, with details about the controls that govern data handling. A completed CAIQ (Consensus Assessments Initiative Questionnaire) self-assessment is also available on request.

Contact your Adobe Sales contact to request this packet.

Use Analyzer with HIPAA-regulated data

Analyzer in Sign is HIPAA Ready. Organizations that plan to process protected health information (PHI) must complete the applicable Business Associate Agreement (BAA) process with Adobe before using Analyzer for that purpose.

Contact your Adobe Sales contact to begin the BAA process.

For the complete process, see Enable HIPAA readiness for Analyzer in Sign.

Things to know

• HIPAA Ready doesn't mean that every use of Analyzer automatically complies with HIPAA.
• Compliance programs shown with a target date are still in progress.
• Target dates can change while certification and assessment work is underway.
• Your organization remains responsible for using Analyzer in accordance with its agreements with Adobe and applicable legal and regulatory requirements.
• Detailed architecture and other controlled security information are available through the NDA documentation rather than this public Help page.