Safeguard Docs
Compliance ConnectorsSetup by categoryDigital Signature

Eversign

Connect Eversign to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.

Record your Eversign connection as digital signature evidence. Automated collection is not available for this provider yet.

CategoryDigital Signature
Connect withAPI token
What a connection producesConnection record

Connect with an API token

  1. In Eversign:

    1. Log in to Eversign (now Xodo Sign) and open the business you want to connect.
    2. Open the top left dropdown menu and select Developer.
    3. Copy the API access key shown there (each account has one unique access key).

    Where to find the other values:

    • Base URL (optional): The API base URL is https://api.eversign.com (HTTPS only).
    • Account / Org / Workspace (optional): The Business ID, shown on the same Developer page (top left dropdown menu) after logging in to that business; it is sent as business_id.

    Eversign is now Xodo Sign; the docs still use api.eversign.com. The access key is a single account-wide key passed as the access_key query parameter; there is no read-only or scoped key. The key is displayed on the Developer page (not a one-time display).

    Source: eversign.com, checked 2026-10-07.

  2. On Compliance › Connectors, open Eversign, click Connect, choose API token and fill in:

    FieldWhat to enter
    API token / Personal access tokenRequired. Stored encrypted and never shown again.
    Base URL (optional)—
    Account / Org / Workspace (optional)—
  3. Click Connect with token.

Frameworks

Eversign publishes no API for what these tests check, so its evidence is an attestation: connect it to record the connection, then attest the result. An accepted attestation counts toward each control below.

FrameworkEvidenceControlsTests
SOC2AttestationCC6.2, CC6.31
ISO/IEC 27001AttestationA.5.181
HIPAA Security RuleAttestation164.308(a)(3)1
PCI DSSAttestation7.2.41
NIST CSF 2.0AttestationPR.AA-051

These tests are switched on per workspace by the Safeguard team.

On this page