Security controls. Transparent readiness.
Review the controls available today and the current scope of our security readiness work.
Current security and privacy controls
- Encryption at rest and in transit.
- Audit trails for document activity.
- Data retention controls.
- Separate opt-in choices for analytics and marketing cookies on public pages. Optional tracking stays off private signing, account, and checkout pages.
Compliance readiness assessment
As of October 5, 2026, we are carrying out an initial gap assessment against HIPAA requirements, SOC 2 criteria, and ISO/IEC 27001 requirements. The assessment is intended to identify the technical, operational, and documentation work needed.
This is an internal readiness review, not an independent audit. Docupacket does not currently have a SOC 2 report or ISO/IEC 27001 certification, and we are not claiming HIPAA compliance.
Do not use Docupacket for protected health information (PHI). The restrictions in our Terms of Use continue to apply.
Security inquiries
Contact admin@docupacket.com. Please describe the issue without including customer documents, passwords, or sensitive personal information.