Agreement Activity log and Audit Report

Overview

Every agreement in Acrobat Sign passes through a series of event “milestones” that define the progress of the transaction.

These milestones may include events such as:

• Document creation
• Modifications to the transaction sent
• Emails sent to recipients
• Email viewed by recipients
• Delegation of recipient authority
• Signatures/approvals applied to agreements
• Completed/declined/canceled status

Milestones are recorded in two formats with similar content, but slightly different goals:

Audit Reports contain the same agreement milestones as the History panel but include the Transaction ID of the authoritative document on the Acrobat Sign server.

Administrators can optionally enable the collection of IP addresses if needed.

Audit Reports are intended to be authoritative documents that articulate how a document has been manipulated from the moment it was created until it was fully resolved. They can be saved as PDF files and printed for internal processes as needed.

• A key difference to note is that the Audit Report shows all events standardized to the GMT time zone. This mitigates confusion for auditors reviewing transactions from users across multiple time zones.
  
  • The Activity list is dynamically generated for the viewer and reflects all events in the time zone of the viewer's local system.
  • The time stamp of the visible signature field embedded into the agreement reflects the time zone of the signer's local system at the time the signature is applied. The time zone code is supplied to provide context when viewing the PDF.
• The date stamp format is set to YYYY-MM-DD.
• Audit Reports are stored independently of the agreement objects viewed in the Manage tab of the web application. Deleting an object from the manage page does not delete the audit report.
  • If you know the transaction ID of an agreement, then you can access the Audit Report for that transaction from the website: https://secure.echosign.com/verify (security settings permitting)

The Audit Report has two stages:

• The “Interim” report – While a transaction is “in-flight,” the Audit Report is generated from the events logged against the agreement at the time the request is made. By definition, this report is incomplete and subject to change when the next recipient commits a logged event.

Interim reports are clearly marked at the top of the report to ensure they cannot be misinterpreted as final documents if they are saved/printed.

• The “Final” report – Once the agreement reaches a terminal state (Signed, Canceled, Declined, or Expired), the final Audit Report is generated and stored. No further events that take place in relation to the transaction (e.g., retention) can be added to the report.  This creates a full report of the events that took place to get the document signed, and nothing else.

How it's used

The Activity list is displayed on the Manage page by clicking the Activity link at the bottom of the right tail options:

The Audit Report is accessed through the Manage tab.

Select the agreement and click Download  Audit Report

Configuration

Availability:

The Activity log and Audit Reports are available for all Acrobat Sign accounts.

Configuration scope:

The Activity log and Audit Reports are enabled by default and cannot be disabled.

Many settings can influence the events reported (and the terminology used) in the Audit Reports. If there are events that you think should be included on the Audit Report, check with your group or account administrator to see if they can be added.

There are four methods that provide access to the Audit Report for users:

• Attach the Audit Report to the Signed and Filed email.
• Attach the Audit Report to documents downloaded from the Manage page.
• Allow access to the Audit Report via the transaction verification page.
• Attach Audit Report via API when getLatestDocument is called.