How a request stays contained.
Document scope
The PDF lives on the request. It is not a public file drop.
Access
The sender account owns the request. The signer uses a link for that request.
Identity step
An ID / KBA step runs before the session. It is a product step. Integrations are not live yet.
Session record
When the session completes, the packet keeps a record of what happened.
Data handling
Retention is request-scoped. Details live in Privacy.