SignAndGoGood security habits for sending documents.
Most document mix-ups are not dramatic. They are an agreement sent to the wrong Sarah, a template edited by someone who should not have, or a fake signing email that looks close enough to the real one. A handful of habits, set up once, removes most of that risk.
Protect the accounts that send
Turn on two-step sign-in for every person in your workspace who sends documents. It adds a code on top of the password, so a leaked password alone is not enough to get in. Ask new team members to switch it on in their first week, before they send anything.
One login covers SignAndGo, ShareAndGo and BookAndGo, so protecting that one account protects all three.
Give people the access they need, no more
Workspace admins decide who can do what. Keep the admin group small, and review it when someone changes role or leaves. Templates are shared with the workspace by default; mark a template private if it holds terms that only you should send, such as a senior staff agreement.
Check before you press send
Read every email address back before sending, especially when two clients share a name. Check the signer order, because sending to the wrong person first means they see a document meant for someone else. A colleague as an approver at the start is a cheap second pair of eyes for sensitive packs.
- Email addresses read back, letter by letter, for new signers.
- Signer order matches who should see it first.
- Approver added for sensitive documents.
- Only the documents meant for this signer are in the envelope.
Teach clients to spot a fake
Scammers send convincing imitation signing emails. Tell clients in advance that a real request from you names your business, carries your message, and asks for no password to view the document, because signers need no account. If an email asks them to log in to see a document, they should call you.
Use the record you already have
The audit trail logs every view and signature with names, email addresses, times and IP addresses, and each signed document carries a verification ID. If something looks odd, those are the first places to check. A view from an unfamiliar IP address on a sensitive document is worth a quick phone call to the signer to confirm it was them.
When a staff member leaves, review the envelopes they sent that are still outstanding and make sure someone else is watching them, so a half-signed agreement is not left without an owner.
Common questions
- Can I require two-step sign-in?
- Each person can turn on two-step sign-in for their account. Ask your team to switch it on.
- Can a template be kept private?
- Yes. Templates are shared with the workspace unless you mark them private.
- Do signers ever need a password?
- No. Signers open the document from their email link without an account.