E-Signature

Dropbox Sign

Rest of world Report an error

Panel rating · 6 judges · How to read the stars

Category median

Sovereignty: not determined

0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.

by Dropbox, Inc. · sign.dropbox.com

An AI-assisted analysis of public evidence — not a hands-on test.

Every score, rationale and verdict on this page is AI-generated. Every claim cites the source it was read from. Nothing here is a human star review — and no score can be bought. How scores are made →

Method and versions

The Legal Counsel v1.0 · The HR Operations Lead v1.0 · The Revenue Operations Lead v1.0 · The Integration Engineer v1.0 · The Data Protection Officer v1.0 · The Skeptic v1.0 · rubric v1 · evaluated 15 Oct 2026

Report an error on this page Is this your product? →

Link to this page

HTML

<a href="https://whats-best.ai/software/e-signature/dropbox-sign"><img src="https://whats-best.ai/badge/e-signature/dropbox-sign.svg" alt="Dropbox Sign: AI-assisted analysis on whats-best.ai" height="66"></a>

Markdown

[![Dropbox Sign: AI-assisted analysis on whats-best.ai](https://whats-best.ai/badge/e-signature/dropbox-sign.svg)](https://whats-best.ai/software/e-signature/dropbox-sign)

Add ?theme=dark to the image address for dark backgrounds. The badge shows the category and the month of the latest evaluation, and EU-Made where that is the product’s provenance. It never shows a score.

Dropbox Sign at a glance

Vendor: Dropbox, Inc.
Headquarters: Not stated on the vendor’s pages as of 13 Oct 2026
Data hosting: Not stated on the vendor’s pages as of 13 Oct 2026
Free plan: Yes, per the vendor’s own page source, captured 13 Oct 2026
Panel verdict: The AI panel rates Dropbox Sign 2.5/5, the mean of 6 judges. Dropbox Sign, the e-signature service of Dropbox, Inc. how scores are made
As of: Vendor pages captured 1 Oct 2026 to 13 Oct 2026; evaluated by the panel 15 Oct 2026. all sources

Dropbox Sign alternatives, European ones first →

Read this page as one judge. Each weighs the same scores by what they care about.

The Legal Counsel

Weighted verdict

Decides which contracts may be signed electronically and at which level. Wants SES, AdES and QES named per plan and country, the qualified trust service provider linked to the EU Trust List, and an audit trail with timestamps that still validates when the contract is disputed in eight years.

Same scores as the panel view — this lens weights them the way this judge cares.

Scored by The Legal Counsel

Panel median The Legal Counsel This judge’s scores over the panel median. Each label opens its reasoning below.

Scores per criterion, in stars out of 5
Criterion	Panel median	The Legal Counsel
eIDAS levels & trust services	2.5 of 5	2.5 of 5
Signer identification	3 of 5	3 of 5
Signing workflow & signer experience	3 of 5	3 of 5
Evidence, validation & retention	2 of 5	2.5 of 5
Integrations & API	3.5 of 5	3.5 of 5
European sovereignty	1.5 of 5	1.5 of 5
Pricing transparency	1.5 of 5	2.5 of 5

eIDAS levels & trust services

How this is scored

Which signature levels the platform offers — simple, advanced, qualified, and qualified seals — through which qualified trust service provider on the EU Trust List, for which countries and legal regimes (eIDAS, ZertES), and on which plans.

0 — No signature level named; the platform calls its signature "legally binding" without saying which kind it is.

3 — Simple signatures by default with "advanced" or "qualified" mentioned as available, but no trust service provider named and no statement on which plan or country offers which level.

5 — SES, AdES and QES offered and labelled in the product, the qualified trust service provider named, and which documents need which level explained for at least Germany or the EU.

8 — Every level documented with the plans and countries it is available in, the QTSP's entry on the EU Trust List linked, QES under eIDAS (and ZertES where relevant) stated, qualified electronic seals for company documents, and the signature level printed in the signed document and audit trail.

10 — Levels are an explicit product decision: the provider is or contracts a named QTSP with its conformity assessment published, level selection per document type or template, remote QES without a separate account, EUDI wallet support stated with a date, and the legal effect per level documented for the main EU markets.

Report an error

The Legal Counsel

Advanced and qualified signatures are labelled with countries and providers through the eID add-on on the API Premium plan — Danish Mit-ID for AES via InfoCert, Finnish and Belgian eID and EvroTrust for QES, and Swisscom stated as QES under ZertES — with InfoCert named as an EU qualified trust service provider. The default signature is only called 'legally binding under the ESIGN Act of 2000' with no level named. We found no public information on an EU Trust List link, qualified electronic seals, the signature level printed in the signed document and audit trail, or guidance on which document needs which level for Germany or the EU. 6 2

Report an error

Signer identification

How this is scored

How the signer is identified for each level: email and SMS codes, video ident, eID card (Online-Ausweis), bank ident or EUDI wallet — who performs it, in which countries it works, and what happens to the ID data afterwards.

0 — Email link only; no statement on how signers are authenticated.

3 — Email plus SMS or access code, with "ID verification" mentioned as an add-on but no methods, provider or countries named.

5 — Identification methods for AdES and QES listed by name (for example video ident, eID, bank ident), the identification provider named, and the countries or ID documents they accept stated.

8 — Methods documented per level and country, automated and agent-based ident distinguished, reuse of an identification for later signatures explained, retention and deletion of ID data stated, and the ident provider listed as subprocessor.

10 — Identification is transparent end to end: every method with its countries, assurance level and failure rate or completion guidance, EUDI wallet and national eID supported, ID data minimisation and retention committed, and the signer-facing privacy notice published.

Report an error

The Legal Counsel

Methods are named by level and country — Danish Mit-ID for AES, Finnish and Belgian eID and EvroTrust for QES, the latter accepting ID documents from a long list of countries — with InfoCert named as the personal-certificate issuer, and SMS verification with code entry and resend is documented for Standard and Premium API plans. The privacy policy promises deletion or anonymisation once no business need remains. We found no public information distinguishing automated from agent-based identification, on reuse of an identification for later signatures, on retention specific to ID data, or on the identification provider appearing on a subprocessor list. 6 7 3

Report an error

Signing workflow & signer experience

How this is scored

Getting a document out and back signed: templates and form fields, signing order and roles, bulk sending, reminders and delegation, signing without an account or app, mobile signing, and accessibility for signers.

0 — Single-recipient signing of an uploaded PDF; no templates, order or reminders.

3 — Multiple signers and basic templates, but no signing order, no bulk send, and signers must create an account.

5 — Templates with field placement, sequential and parallel signing order, automatic reminders and expiry, signing without an account on mobile, and a status overview for the sender.

8 — Roles and conditional fields, bulk sending, delegation and substitute signers, team and approval workflows, branded signer experience, signer languages listed, and signer accessibility addressed.

10 — The workflow is complete and documented: web forms and self-service signing links, mixed signature levels within one process, in-person and remote signing, a published accessibility conformance statement, and team administration with shared templates and audit of sender actions.

Report an error

The Legal Counsel

Templates with field placement, a gallery of over 40, signer roles, bulk sending with reminders targetable per signer, decline-to-sign, signer reassignment and variable signers on named plans, and account-free signing give a workable core workflow with a status view for senders. We found no public information on sequential and parallel signing order, automatic reminders and document expiry, conditional fields, a branded signer experience, signer languages or accessibility. 9 5 8 1

Report an error

Evidence, validation & retention

How this is scored

What proves a signature years later: the audit trail and certificate of completion, qualified timestamps, long-term validation (PAdES-LTV), validation reports, and how long signed documents and evidence are kept — and whether they can leave the platform.

0 — A signed PDF and nothing else; no audit trail, no statement on storage or deletion.

3 — An audit trail or completion certificate exists, but its contents, the timestamp source and the retention period are unstated.

5 — Audit trail with signer events, IP addresses and authentication method embedded in or attached to the signed PDF, timestamps applied, documents downloadable, and the retention period stated.

8 — PAdES signatures with long-term validation, qualified timestamps from a named provider, a validation tool or report, configurable retention and automatic deletion, and bulk export of documents with their evidence.

10 — Evidence outlives the subscription: LTV and archive timestamps documented, validation verifiable with independent tools such as the EU DSS validator, export to a DMS or archive with evidence intact, and post-termination access and deletion committed in the terms.

Report an error

The Legal Counsel

A non-editable audit trail is appended to every executed request, timestamping signer events and IP addresses from submission to completion, with a hash of the PDF for tamper comparison, an option to return it as a separate file, and vendor assistance to retrieve the transaction log behind it. Retention is stated only as 'as long as necessary' with no period given for signed documents or their evidence, though export and deletion requests are supported. We found no public information on qualified timestamps or long-term validation such as PAdES-LTV, so whether this evidence still validates when a contract is disputed years later is not evidenced. 11 2 3

Report an error

Integrations & API

How this is scored

Signing from inside the systems where contracts are made: a documented API with webhooks and a sandbox, embedded signing, and connectors for Microsoft 365, CRM, HR, DMS and ERP systems.

0 — No API and no integrations; everything happens in the vendor's web app.

3 — A few named integrations or a Zapier connector, and an API mentioned without public documentation.

5 — A documented REST API with webhooks and a sandbox, plus connectors for Microsoft 365 or Google Workspace and at least one CRM or HR system named.

8 — Embedded signing in the customer's own application, API access to every signature level, versioned API with rate limits published, SDKs, and connectors for named DMS, ERP or HR systems with their scope.

10 — Integration is a product: white-label and embedded flows documented, API parity with the web app, a status page with incident history, deprecation policy, and a marketplace of integrations with stated maintainers.

Report an error

The Legal Counsel

The API is documented with endpoints, walkthroughs, guides, events and callbacks, free test mode from any account, official SDKs and OAuth, and embedded signing runs in the customer's own application through an iFrame with text tags and a testing tool; the API also reaches SMS verification and the eID add-on. Named connectors cover Google Drive, Microsoft Word, HubSpot and Dropbox. We found no public information on a versioned API with published rate limits, or connectors for document-management, ERP or HR systems with their scope. 12 13 2 6 7

Report an error

European sovereignty

How this is scored

Who the contracting entity, the trust service provider and their owners are, where documents, audit trails and ID data are stored and processed, and who the subprocessors are. Independently sourced by the sovereignty pipeline.

0 — Non-EU contracting entity, no statement on where documents and signer data are stored, and subprocessors unnamed.

3 — An EU entity contracts, but documents or signer data are processed outside the EU by default without an explained safeguard, or the subprocessor list is absent.

5 — EU contracting entity and EU data storage stated, with a DPA, but the hosting, identification or trust service chain is non-EU-controlled without a stated safeguard.

8 — EU entity, documents, audit trails and ID data stored in named EU data centres, an EU qualified trust service provider, subprocessor list with locations published, and certifications (ISO 27001, ETSI conformity) published.

10 — Sovereign end to end and evidenced: European ownership, EU entity and EU QTSP, every processing location and subprocessor European, customer-selectable data residency, and certifications with their scope published.

Report an error

The Legal Counsel

EU customers contract with Dropbox International Unlimited Company in Dublin and the qualified trust chain runs through InfoCert and Swisscom, but data residency appears only as an unnamed tier feature and we found no public information on where documents, audit trails or ID data are stored and processed, on the subprocessor list, or on certifications such as ISO 27001. That leaves open who holds — and who could be compelled to produce — the evidence for a disputed contract. 3 2 6

Report an error

Pricing transparency

How this is scored

Whether a buyer can compute the cost of their signing volume from public pages alone — plan prices, envelope or document limits, the per-signature price of AdES and QES, identification fees, API pricing and overage.

0 — No public prices at all; every plan is a sales conversation.

3 — Plan prices published, but envelope limits, QES and identification fees are unstated — the cost of a qualified signature is unknowable.

5 — Plans with envelope or document limits priced, but at least one commonly incurred cost (per-QES fee, video ident, API access, overage) is missing or "on request".

8 — Every plan and limit priced publicly, AdES and QES priced per signature, identification fees and overage stated, API pricing published, and contract term and notice period given.

10 — Complete cost computability: the cost of a given monthly volume per signature level derivable from public pages, volume tiers published, and every add-on and price-change term on a public page.

Report an error

The Legal Counsel

The pricing page sets out tiers with unlimited signature requests, a sender definition, auto-renewal and a link to API pricing, but the eID add-on that carries the advanced and qualified signatures is 'additional cost add-on, contact sales for details', with only a quota viewable under billing add-ons. The cost of a qualified or identified signature is therefore not computable from the public pages, and we found no public per-signature or identification figures. 2 6

Report an error

European sovereignty — proven facts

0 of 4 dimensions proven

Built only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.

Legal entity	Not determined	—	uncited Report an error
Ownership	Not determined	—	uncited Report an error
Data residency	Not determined ⚠ unverified	—	uncited Report an error
Subprocessors	Not determined	—	uncited Report an error

Questions about Dropbox Sign

Is Dropbox Sign European?

No. whats-best.ai classifies Dropbox Sign as Rest of world.

Where does Dropbox Sign store data?

Not stated on the vendor’s pages as of 13 Oct 2026.

Does Dropbox Sign have a free plan?

Yes. Dropbox Sign has a free plan, per the vendor’s page captured 13 Oct 2026.

What are the best alternatives to Dropbox Sign?

As of 15 Oct 2026, the panel rates Penneo (2.5/5), Youtrust (Yousign) (2.5/5) and MOXIS (2.5/5) highest among the other 14 E-Signature products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Penneo (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Dropbox Sign alternatives.

Where this could be wrong

Evidence ages. The oldest capture behind this page is from 1 Oct 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
Weak sourcing — Data residency. Not confirmed on the vendor’s own pages as captured.
AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.

What we left out

A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.

20 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
10 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
3 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
2 hosting facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
2 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
2 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
1 compliance fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
1 data fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
1 support fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
1 sovereignty dimension could not be confirmed on the vendor’s own pages and is shown as unknown. Know more? Tell us
6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us

Do you know more about Dropbox Sign? Tell us Report an error on this page

Sources (13)

The pages every claim on this page was read from — each one checked, dated, and kept verifiable.

1 Vendor homepage sign.dropbox.com Checked 13 Oct 2026 Details →
2 Pricing page sign.dropbox.com Checked 13 Oct 2026 Details →
3 Privacy policy sign.dropbox.com Checked 13 Oct 2026 Details →
4 Terms of service sign.dropbox.com Checked 13 Oct 2026 Details →
5 EIDAS levels & trust services — found from sitemap help.dropbox.com Checked 13 Oct 2026 Details →
6 Signer identification — found from sitemap help.dropbox.com Checked 13 Oct 2026 Details →
7 Signer identification — found from sitemap help.dropbox.com Checked 13 Oct 2026 Details →
8 Signing workflow & signer experience — found from sitemap help.dropbox.com Checked 13 Oct 2026 +1 earlier capture: 1 Oct 2026 Details →
9 Signing workflow & signer experience — found from sitemap sign.dropbox.com Checked 13 Oct 2026 Details →
10 Evidence, validation & retention — found from sitemap help.dropbox.com Checked 13 Oct 2026 Details →
11 Evidence, validation & retention — found from sitemap help.dropbox.com Checked 13 Oct 2026 Details →
12 Integrations & API — found from sitemap help.dropbox.com Checked 13 Oct 2026 Details →
13 Integrations & API — found from sitemap help.dropbox.com Checked 13 Oct 2026 Details →