Every action during the document signing process is securely logged. Once a document is completed, this log is compiled into an Audit Trail and attached to the final PDF.
You can also access the Audit Trail for any completed document by going to Completed Documents and clicking Audit Trail from the actions menu.
About IP addresses in the audit log
You may see unfamiliar IP addresses in your audit log. Some email clients include virus scanners that automatically open links in emails to check for malware. If a scanner opens the signing link, it appears as a "document viewed" entry with the scanner's IP address — not the signer's.
Tip: To prevent unknown IP addresses in the Audit Trail, enable Signer Authentication. This restricts document access until the authentication code is entered, ensuring only the intended signer can open it.
Audit log event types
Document creation events
document created— A document was created.document sent— The document was sent to a signer (recorded once per signer).signer authentication— Signer authentication via SMS was enabled for a signer.
Signer-triggered events
document viewed— A signer opened the document.document signed— A signer completed their signature. If this was the last required signer, it is followed by "document completed."document declined— A signer declined to sign. An optional reason may be stored. This is followed by "document cancelled."signer bounced— Email delivery failed for a signer. This is followed by "document cancelled."signer removed— A signer was removed from an optional signer list. If all signers are removed, this is followed by "document cancelled."document forwarded— A signer forwarded the document to another person. Includes the new signer's name and email. Note: Forwarding is not available when 2FA is enabled.
Team member-triggered events
signer removed— A team member with sufficient permissions removed a signer.document revoked— The document was cancelled by the owner or a team member. This is followed by "document cancelled."
System-triggered events
document expired— The document was not completed within the expiry timeframe.
Document end-state events
document completed— All required signers have signed.document cancelled— The document was cancelled for any reason.