GDPR-compliant signing on the DocuSeal EU Cloud
docuseal.eu servers are located in Ireland to ensure compliance with EU data regulations (GDPR) for customers based in the EU, with the same core product and API, and your documents stored inside the Union.
What is the GDPR?
The General Data Protection Regulation (GDPR) is a regulation introduced by the European Union to protect the privacy and personal data of its citizens. It sets out how personal data may be collected, processed and stored, and it emphasizes transparency, security and accountability on the part of the business.
The principles it is built on
- Lawfulness and transparency: personal data is processed on a valid legal basis.
- Purpose limitation: data is collected for a specific, stated purpose.
- Data minimisation: only the data that is actually needed for the stated purpose is collected.
- Accuracy: data must be correct and kept up to date, with wrong data fixed or deleted.
- Storage limitation: personal data is kept only as long as there is a reason to keep it.
- Integrity and confidentiality: appropriate technical and organisational measures keep data secure.
- Accountability: the organisation has to be able to demonstrate all of the above.
Your rights as a data subject
Anyone whose personal data is processed through DocuSeal can exercise the rights the GDPR grants them. Signers should direct requests to the account owner who sent the document, as the controller of that data.
- Access Ask what personal data is held about you and receive a copy of it.
- Rectification Have inaccurate or incomplete personal data corrected.
- Erasure Request deletion of your data where there is no overriding legal reason to retain it.
- Restriction Limit how your data is processed while a request or dispute is resolved.
- Portability Export your documents and data in a structured, machine-readable format.
- Objection Object to processing based on legitimate interests, including any profiling.
How DocuSeal complies
Protecting your privacy
We prioritize privacy and never share or transfer user data to third parties for marketing or analytics purposes. We collect only the data necessary for the digital signature process, ensuring that privacy remains our top priority at all times.
Servers in the EU
Documents, submissions and account data on docuseal.eu are stored on servers located within the European Union.
No data sharing
We never share or transfer user data to third parties for marketing or analytics purposes.
Do not track
Only the data required by the digital signature process is collected — no advertising trackers.
Encryption
Documents and personal data are encrypted in transit and at rest.
Deletion on request
Documents, submissions and accounts can be deleted permanently on request.
Full audit trail
Comprehensive logs record who accessed a document and when, which supports accountability.
Better performance for EU users
Hosting in the EU results in faster response times for users located in the EU, benefiting both your organization and your clients. It also keeps the legal question of international transfers off the table entirely.
Hosted in Ireland
Application servers, database and document storage all sit inside the European Union.
Lower latency
Shorter round trips mean documents load and sign faster for signers across Europe.
The same product
The EU Cloud runs the same core product, API and embedded signing widgets as docuseal.com.
Backups stay in the EU
Backups and audit logs are kept within the EU, never outside the Union.
Data processing and accountability
Data Processing Agreement
A DPA can be requested through the Trust Center and signed with DocuSeal before you start processing personal data.
Controller and processor
You remain the controller of the documents you send. DocuSeal acts as processor, on the terms set out in the DPA.
Sub-processors
The sub-processors used by the EU Cloud are listed in our GDPR privacy notice.
Breach notification
In the event of a personal data breach, affected customers are notified without undue delay, so you can meet your own reporting obligations.
GDPR questions, answered
Where exactly is my data stored?
On docuseal.eu, in Ireland. Documents, submissions, audit logs and backups all stay within the European Union.
Is docuseal.eu a separate account?
Yes. The EU Cloud is a separate instance with its own sign-up and its own database, so documents and submissions stay in their region.
Will you sign a DPA?
Yes. It can be requested through the Trust Center and signed electronically.
Can I delete data permanently?
Yes. Templates, submissions and whole accounts can be deleted. Requests from signers are passed to the account owner, who is the controller of that data.
Do you use tracking or analytics on signers?
No. Signer data is never used for marketing or analytics, and it is never sold or shared.
What if I need data on my own servers?
Run DocuSeal on-premises. The self-hosted build keeps every document inside your own infrastructure.
Start signing on the EU Cloud
Create an account on docuseal.eu and keep every document, signature and log inside the European Union. Free forever for individuals.