E-Signature
Zoho Sign
Rest of world Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Zoho Corporation Pvt. Ltd. · www.zoho.com
Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Zoho Sign at a glance
- Vendor
- Zoho Corporation Pvt. Ltd.
- Headquarters
- Not stated on the vendor’s pages as of 13 Oct 2026
- Data hosting
- Default not stated; pages mention the EU source, captured 13 Oct 2026
- Free plan
- Yes, per the vendor’s own page source, captured 13 Oct 2026
- Panel verdict
- The AI panel rates Zoho Sign 2/5, the mean of 6 judges. Zoho Sign is an e-signature service from Zoho Corporation Pvt. how scores are made
- As of
- Vendor pages captured 13 Oct 2026; evaluated by the panel 15 Oct 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Zoho Sign is an e-signature service from Zoho Corporation Pvt. Ltd. of Chennai, India. Its strongest area is signing workflow, scoring 6-7: templates, signing order, bulk send, reminders, SignForms self-service URLs and account-free signing on mobile and desktop apps are documented. Integration and API scores 4-6, the integration engineer alone at 6 for REST APIs, webhooks, web and mobile SDKs and an API-only plan. The weak areas are sovereignty at 1-2 and pricing transparency at 1-3: the contracting entity sits in Chennai, the homepage states data is stored in a data centre within the EU, and we found no public information on subprocessors or certifications; the pricing page publishes envelope limits but no monetary price. Signature levels at 3-4 and identity verification at 2-3 are capped by an unnamed trust service provider and unnamed identification methods. The judges split on pricing: those at 3 credited the published limits — five documents a month free, 25 envelopes per user per month on Standard, unlimited envelopes on Professional, a 14-day trial — while those at 1-2 found no price figure at all.
Speaks for it
- Signing workflow scores 6-7, with templates, signing order, bulk send, reminders and SignForms self-service URLs documented
- Signers need no account or subscription to sign documents
- REST APIs, webhooks, web and mobile SDKs and a dedicated API-only plan are stated on the captured pages
- Envelope limits are published — five documents a month free, 25 envelopes per user per month on Standard, unlimited envelopes on Professional — alongside a 14-day trial
- The Enterprise tier lists qualified electronic signatures alongside 21 CFR Part 11 and EU GMP Annex 11 controls
Held against it
- No monetary price appears on the captured pricing page, so the cost of a signing volume cannot be computed
- No trust service provider is named and no EU Trust List entry is linked on the captured pages
- No identification method, provider or country coverage for the identity check behind qualified signing appears
- The contracting entity is Zoho Corporation Pvt. Ltd. of Chennai, India, with no public information on subprocessors or certifications
- Audit-trail contents go undescribed, with no public information on long-term validation or a validation report
Best for
- You send routine documents at volume and need templates, signing order, bulk send and reminders, with signers who need no account
- You want to embed signing in your own apps or websites through a REST API, webhooks and web and mobile SDKs
- Your team already works inside Zoho applications and wants documents signed there directly
- You collect signatures from many signers through a self-service URL
Avoid if
- You need a monetary price for plans or a per-signature cost for qualified signing before committing to a volume
- You must map simple, advanced and qualified signature requirements to a purchasable plan and country before purchase
- Your signed records must prove themselves years later, with known audit-trail contents and long-term validation
- You must assess European control of the trust service and identification chain, including a subprocessor list
The scores
| Criterion | Panel median |
|---|---|
| eIDAS levels & trust services | 2 of 5 |
| Signer identification | 1.5 of 5 |
| Signing workflow & signer experience | 3.5 of 5 |
| Evidence, validation & retention | 2 of 5 |
| Integrations & API | 2 of 5 |
| European sovereignty | 1 of 5 |
| Pricing transparency | 1 of 5 |
eIDAS levels & trust services
Show reasoningHide reasoning
How this is scored
Which signature levels the platform offers — simple, advanced, qualified, and qualified seals — through which qualified trust service provider on the EU Trust List, for which countries and legal regimes (eIDAS, ZertES), and on which plans.
0 — No signature level named; the platform calls its signature "legally binding" without saying which kind it is.
3 — Simple signatures by default with "advanced" or "qualified" mentioned as available, but no trust service provider named and no statement on which plan or country offers which level.
5 — SES, AdES and QES offered and labelled in the product, the qualified trust service provider named, and which documents need which level explained for at least Germany or the EU.
8 — Every level documented with the plans and countries it is available in, the QTSP's entry on the EU Trust List linked, QES under eIDAS (and ZertES where relevant) stated, qualified electronic seals for company documents, and the signature level printed in the signed document and audit trail.
10 — Levels are an explicit product decision: the provider is or contracts a named QTSP with its conformity assessment published, level selection per document type or template, remote QES without a separate account, EUDI wallet support stated with a date, and the legal effect per level documented for the main EU markets.
The Legal Counsel
The pages name qualified electronic signatures with certificates issued by a qualified trust service provider and show QES controls under the enterprise tier, but no trust service provider is identified, the EU Trust List is not linked, and simple and advanced levels are never labelled as such. We found no public information on which countries or plans offer which level, so I cannot map our SES, AdES and QES requirements to a purchasable plan. 1 2
The HR Operations Lead
Qualified electronic signatures with certificates from a qualified trust service provider are named, and the pricing page ties QES to the enterprise compliance controls — which is the level my fixed-term contracts need. But no provider is named, the EU Trust List is not linked, and we found no public information on which countries or plans offer which level or how advanced and simple signatures are labelled, so I cannot tell what my new hires in each country are actually getting. 1 2
The Revenue Operations Lead
Qualified electronic signatures through a qualified trust service provider are named, QES controls sit on the enterprise tier and AATL-capable certificates on Standard, but the trust service provider itself is never named. I found no public information on which level applies in which country or plan beyond that, on simple versus advanced levels, or on qualified seals. 1 2
The Integration Engineer
Qualified electronic signatures are offered with certificates from a qualified trust service provider, but no provider is ever named and we found no public information on which plan or country offers which level, on simple or advanced levels being labelled in the product, on qualified seals, or on the signature level being printed in the signed document and audit trail. 1 2
The Data Protection Officer
Qualified electronic signatures from a qualified trust service provider and AATL-capable certificates are named as features, with 21 CFR Part 11 and EU GMP Annex 11 controls on the enterprise tier. We found no public information naming the trust service provider, linking its EU Trust List entry, stating ZertES coverage, or saying which plan or country delivers which signature level — the trust service chain stays anonymous, which is my first question before any signature is trusted. 1 2
The Skeptic
The homepage offers qualified signatures with certificates issued by a qualified trust service provider after identity verification, and the Enterprise plan lists QES alongside 21 CFR Part 11 and EU GMP Annex 11 controls, with AATL-capable certificates on Standard — but no trust service provider is ever named, no Trust List entry is linked, and the captured pages never separate simple, advanced and qualified into labelled levels or state which country's regime applies. That is a plan attribution beyond the bottom anchors, yet the unnamed QTSP keeps it well short of the mid anchor. 1 2
Signer identification
Show reasoningHide reasoning
How this is scored
How the signer is identified for each level: email and SMS codes, video ident, eID card (Online-Ausweis), bank ident or EUDI wallet — who performs it, in which countries it works, and what happens to the ID data afterwards.
0 — Email link only; no statement on how signers are authenticated.
3 — Email plus SMS or access code, with "ID verification" mentioned as an add-on but no methods, provider or countries named.
5 — Identification methods for AdES and QES listed by name (for example video ident, eID, bank ident), the identification provider named, and the countries or ID documents they accept stated.
8 — Methods documented per level and country, automated and agent-based ident distinguished, reuse of an identification for later signatures explained, retention and deletion of ID data stated, and the ident provider listed as subprocessor.
10 — Identification is transparent end to end: every method with its countries, assurance level and failure rate or completion guidance, EUDI wallet and national eID supported, ID data minimisation and retention committed, and the signer-facing privacy notice published.
The Legal Counsel
Recipient authentication and SMS delivery of envelopes are listed, and the QES description says the signer's identity is checked before signing, but no identification method, provider or country coverage appears in the captures. For a qualified signature I need to know who performs the ident, with which assurance and in which jurisdictions. 1 2
The HR Operations Lead
The homepage says QES happens only after the signer's identity is verified, and standard features list recipient authentication and SMS delivery of envelopes, but that is all. We found no public information on the identification methods — video ident, eID, bank ident, wallet — who performs them, which countries or ID documents they accept, or what happens to the ID data afterwards; for applicants holding varied national IDs this is the question that decides whether a hire can sign in ten minutes. 1 2
The Revenue Operations Lead
The pages say recipient authentication exists and that qualified signing happens only after the signer's identity is verified, but no method is named anywhere. I found no public information on email or SMS codes, video or bank identification, who performs the check, which countries it works in, or what happens to the ID data. 1 2
The Integration Engineer
Recipient authentication and SMS delivery are listed and the qualified-signature description says the signer's identity is verified first, but we found no public information naming the identification methods, the provider performing them, the countries or ID documents accepted, or what happens to the ID data afterwards. 1 2
The Data Protection Officer
Recipient authentication is a listed feature, envelopes can be delivered by SMS, and the qualified-signature feature states the signer's identity is verified before certificates are issued. We found no public information on the identification methods (video ident, eID card, bank ident, EUDI wallet), the provider performing them, the countries or ID documents accepted, or what happens to the ID data afterwards — a signer hands identity data to a party nobody names. 1 2
The Skeptic
Standard lists recipient authentication and delivering envelopes by SMS, and the QES description says the signer's identity is checked first — but no method such as video ident, eID or bank ident, no identification provider and no countries appear on any captured page. We found no public information on what happens to ID data beyond the general six-plus-three-month deletion after termination. 1 2 3
Signing workflow & signer experience
Show reasoningHide reasoning
How this is scored
Getting a document out and back signed: templates and form fields, signing order and roles, bulk sending, reminders and delegation, signing without an account or app, mobile signing, and accessibility for signers.
0 — Single-recipient signing of an uploaded PDF; no templates, order or reminders.
3 — Multiple signers and basic templates, but no signing order, no bulk send, and signers must create an account.
5 — Templates with field placement, sequential and parallel signing order, automatic reminders and expiry, signing without an account on mobile, and a status overview for the sender.
8 — Roles and conditional fields, bulk sending, delegation and substitute signers, team and approval workflows, branded signer experience, signer languages listed, and signer accessibility addressed.
10 — The workflow is complete and documented: web forms and self-service signing links, mixed signature levels within one process, in-person and remote signing, a published accessibility conformance statement, and team administration with shared templates and audit of sender actions.
The Legal Counsel
Templates, signing order for multiple recipients, bulk sending, reminders, approval workflows, custom roles and branding are all documented, and signers need no account, with status tracking on every step. We found no public information on delegation or substitute signers, conditional fields, signer languages or accessibility, which keeps this below the top band. 1 2
The HR Operations Lead
Reusable templates, definable signing order, one-click bulk sending to multiple signers, reminders and notifications, self-service SignForms over a URL, mobile and desktop apps, and signers needing no account or subscription — that covers my contract volume well, with roles, permissions, approval workflows, custom branding and enterprise admin roles on top. We found no public information on conditional fields, delegation or substitute signers, signer languages, expiry or accessibility. 1 2 4
The Revenue Operations Lead
This is where quote turnaround lives, and the machinery I need is on the pages: reusable templates sales can work from, definable signing order, bulk send, automatic reminders, approval workflows with custom roles, status notifications, self-service signing links via URL, and signers who need no account or subscription. I found no public information on conditional fields, delegate or substitute signers, or signer accessibility. 1 2
The Integration Engineer
Reusable templates, signing order, bulk send, automatic reminders, status tracking and account-free signing on mobile and desktop apps are all documented, and custom roles, approval workflows, branding and self-service SignForms go further; we found no public information on delegation or substitute signers, conditional fields, signer languages or signer accessibility. 1 2
The Data Protection Officer
Reusable templates, definable signing order, bulk sending, reminders and notifications, status tracking, approval workflows, custom roles, branding and self-service SignForms links are all documented, and signers need no account or subscription, with mobile and desktop apps available. We found no public information on delegation or substitute signers, conditional fields, signer languages or signer accessibility. 1 2
The Skeptic
Templates, signing order, bulk send, self-service SignForm URLs, reminders and account-free signing with mobile and desktop apps are all evidenced, plus approval workflows, custom roles, bulk collection, branding and white-label on the paid tiers. We found no public information on delegation or substitute signers, conditional fields, or signer accessibility. 1 2
Evidence, validation & retention
Show reasoningHide reasoning
How this is scored
What proves a signature years later: the audit trail and certificate of completion, qualified timestamps, long-term validation (PAdES-LTV), validation reports, and how long signed documents and evidence are kept — and whether they can leave the platform.
0 — A signed PDF and nothing else; no audit trail, no statement on storage or deletion.
3 — An audit trail or completion certificate exists, but its contents, the timestamp source and the retention period are unstated.
5 — Audit trail with signer events, IP addresses and authentication method embedded in or attached to the signed PDF, timestamps applied, documents downloadable, and the retention period stated.
8 — PAdES signatures with long-term validation, qualified timestamps from a named provider, a validation tool or report, configurable retention and automatic deletion, and bulk export of documents with their evidence.
10 — Evidence outlives the subscription: LTV and archive timestamps documented, validation verifiable with independent tools such as the EU DSS validator, export to a DMS or archive with evidence intact, and post-termination access and deletion committed in the terms.
The Legal Counsel
An audit trail is listed, document timestamps and blockchain timestamps are named, and the privacy policy commits to deletion from the active database within six months of cancellation and from backups three months later. But the audit trail's contents, the timestamp authority behind it, and any long-term validation such as PAdES are not evidenced; a dispute in eight years would rest on proof I have not seen. 1 2 3
The HR Operations Lead
Audit trails, document timestamps, blockchain timestamps for public verification of signer accountability and automatic cloud backup are listed, and the privacy policy commits to deleting account data from the active database within six months of cancellation and from backups three months later. We found no public information on what the audit trail actually contains, on long-term validation or a named timestamp provider, on a validation report, or on how long signed documents are kept during the subscription — which matters for employment files that must prove themselves years later. 1 2 3
The Revenue Operations Lead
Audit trails, document timestamps and an additional blockchain timestamp are listed as features, and the privacy policy commits to deleting account data within six months of cancellation plus three more months from backups. I found no public information on what the audit trail records, who provides the timestamps, long-term validation, or how long signed documents and their evidence are kept. 1 2 3
The Integration Engineer
Audit trails, document timestamps and a blockchain timestamp are documented and documents import and export through cloud storage, but we found no public information on what the audit trail contains, where the timestamps come from, long-term validation or a validation report; the terms' six-months-plus-backups deletion after cancellation addresses account data rather than a commitment to keeping evidence, which is why I stop below the mid anchor for a platform I must archive from. 1 2 3
The Data Protection Officer
Audit trails, document timestamps, blockchain timestamps and cloud-storage import and export are stated, and the privacy policy commits to deleting account data from the active database within six months of termination and from backups three months later. We found no public information on the audit trail's contents — IP addresses, authentication method — on long-term validation such as PAdES-LTV, on a qualified timestamp from a named provider, or on configurable retention and bulk export of documents with their evidence. 1 2 3
The Skeptic
Audit trails ship even in the free tier, document timestamps and a blockchain timestamp are offered, documents can be exported, and the privacy policy commits to deleting account data within six months of termination plus three more for backups. The contents of the audit trail are never described, and we found no public information on long-term validation, a named qualified timestamp provider or a validation report. 1 2 3
Integrations & API
Show reasoningHide reasoning
How this is scored
Signing from inside the systems where contracts are made: a documented API with webhooks and a sandbox, embedded signing, and connectors for Microsoft 365, CRM, HR, DMS and ERP systems.
0 — No API and no integrations; everything happens in the vendor's web app.
3 — A few named integrations or a Zapier connector, and an API mentioned without public documentation.
5 — A documented REST API with webhooks and a sandbox, plus connectors for Microsoft 365 or Google Workspace and at least one CRM or HR system named.
8 — Embedded signing in the customer's own application, API access to every signature level, versioned API with rate limits published, SDKs, and connectors for named DMS, ERP or HR systems with their scope.
10 — Integration is a product: white-label and embedded flows documented, API parity with the web app, a status page with incident history, deprecation policy, and a marketplace of integrations with stated maintainers.
The Legal Counsel
A REST API with webhooks, web and mobile SDKs, an API-only plan and personalised domains with white-label options are documented. We found no public information on a sandbox, on API documentation scope for each signature level, or on any named connector beyond a generic statement about Zoho and third-party applications. 1 2
The HR Operations Lead
REST APIs for signing and management automation, webhooks, web and mobile SDKs, an API-only plan, white-label and personalised domain options, and integration into Zoho apps and unnamed third-party apps are stated. We found no public information on a sandbox, on named connectors for Microsoft 365, Google Workspace or any HR or CRM system I would push contracts from, or on rate limits and SDK documentation. 1 2
The Revenue Operations Lead
A REST API for signing automation, webhooks, web and mobile SDKs, white-label domains and even an API-only plan are named, which is the right shape for pushing contracts out of the CRM. But no individual connector is named — I found no public information on public API documentation, a sandbox, or connectors for Microsoft 365, CRM, HR or DMS systems. 1 2
The Integration Engineer
A REST API with webhooks, web and mobile SDKs, a dedicated API-only plan, signing directly from your own apps or websites and white-label options are documented, which is most of an embedding story; we found no public information on a sandbox, API versioning or rate limits, on whether qualified signatures are reachable through the API, and the integrations stay generic Zoho and third-party apps with no DMS, ERP, Microsoft 365 or Google Workspace connector named. 1 2 4
The Data Protection Officer
A REST API for signing and management automation, webhooks, web and mobile SDKs, a dedicated API-only plan and integrations with Zoho and third-party apps are listed, with white-label domain options in the enterprise tier. We found no public information on API documentation with a sandbox, rate limits or versioning, and no Microsoft 365, Google Workspace, CRM or HR connector is named on the captured pages. 1 2
The Skeptic
A REST API for signing automation, webhooks, web and mobile SDKs and a dedicated API-only plan are all stated, and there is a general promise of Zoho and third-party app integration. The third-party apps are never named individually, and we found no public information on a sandbox or connectors for Microsoft 365, Google Workspace or any CRM or HR system. 1 2
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity, the trust service provider and their owners are, where documents, audit trails and ID data are stored and processed, and who the subprocessors are. Independently sourced by the sovereignty pipeline.
0 — Non-EU contracting entity, no statement on where documents and signer data are stored, and subprocessors unnamed.
3 — An EU entity contracts, but documents or signer data are processed outside the EU by default without an explained safeguard, or the subprocessor list is absent.
5 — EU contracting entity and EU data storage stated, with a DPA, but the hosting, identification or trust service chain is non-EU-controlled without a stated safeguard.
8 — EU entity, documents, audit trails and ID data stored in named EU data centres, an EU qualified trust service provider, subprocessor list with locations published, and certifications (ISO 27001, ETSI conformity) published.
10 — Sovereign end to end and evidenced: European ownership, EU entity and EU QTSP, every processing location and subprocessor European, customer-selectable data residency, and certifications with their scope published.
The Legal Counsel
The German product page states that data is stored in a data centre within the EU, yet the contracting entity is Zoho Corporation Pvt. Ltd. of Chennai, India, and ownership, the identification and trust service chain, and the subprocessor list are all unknown to us. No certifications with their scope appear in the captures, so I cannot assess who would ultimately control our evidence. 1 3 4
The HR Operations Lead
The contracting entity is Zoho Corporation Pvt. Ltd. of Chennai, India, and the independently sourced attributes mark ownership, subprocessors and confirmed data residency as unknown, even though the German homepage states data is stored in an EU data centre. For employment files carrying personal data, we found no public information on a subprocessor list with locations, named EU data centres, certifications, or a European trust service provider in the chain. 1 3 4
The Revenue Operations Lead
The German product page states data is stored in a data centre within the EU and support runs from a European address, and the terms describe region assignment at signup with a possible local copy. But the listed vendor is Zoho Corporation Pvt. Ltd. of Chennai, India, and I found no public information on the contracting entity's jurisdiction, ownership, published certifications, or any subprocessor list. 1 2 4
The Integration Engineer
The contracting entity is Zoho Corporation Pvt. Ltd. in Chennai, India, and we found no public information on ownership structure, subprocessors or published certifications; the vendor's own pages do state EU data-centre storage with the region assigned at signup and a possible local copy, which is the main European element in the captured pages. 1 4
The Data Protection Officer
The contracting entity is Zoho Corporation Pvt. Ltd. of Chennai, India, and the independently sourced attributes record the entity jurisdiction, ownership and subprocessors as unknown. The captured homepage states data are stored in a data centre within the EU while the independently sourced residency attribute remains unconfirmed, and with no named qualified trust service provider, no subprocessor list and no published certifications, neither the trust service chain nor the identification chain can be assessed for European control. 1 3 4
The Skeptic
The contracting entity is Zoho Corporation Pvt. Ltd. of Chennai, India; the German site states data is stored in an EU data centre, but the region is assigned at signup and may migrate, and a local copy depends on a Zoho branch existing in the user's region. We found no public information on subprocessors, the trust service chain behind the qualified signatures, or certifications such as ISO 27001 or ETSI conformity. 1 4
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the cost of their signing volume from public pages alone — plan prices, envelope or document limits, the per-signature price of AdES and QES, identification fees, API pricing and overage.
0 — No public prices at all; every plan is a sales conversation.
3 — Plan prices published, but envelope limits, QES and identification fees are unstated — the cost of a qualified signature is unknowable.
5 — Plans with envelope or document limits priced, but at least one commonly incurred cost (per-QES fee, video ident, API access, overage) is missing or "on request".
8 — Every plan and limit priced publicly, AdES and QES priced per signature, identification fees and overage stated, API pricing published, and contract term and notice period given.
10 — Complete cost computability: the cost of a given monthly volume per signature level derivable from public pages, volume tiers published, and every add-on and price-change term on a public page.
The Legal Counsel
The free tier's five documents per month, the standard tier's 25 envelopes per user per month and professional's unlimited envelopes are published, but no price figure in any currency appears on any captured page. The per-signature cost of a qualified signature, identification fees and overage are all unknowable from the public information we have. 1 2
The HR Operations Lead
Limits are refreshingly public — up to five documents a month on the free tier, 25 envelopes per user per month on Standard, unlimited envelopes and templates on Professional, with upgrade, downgrade and cancellation anytime. But we found no public information on monetary plan prices, the per-signature price of a qualified signature, identification fees, API pricing or overage — so the one number I need before sending a contract, the cost of a qualified signature, is not computable from these pages. 1 2
The Revenue Operations Lead
Envelope limits are public — five documents a month free, twenty-five envelopes per user per month on Standard, unlimited on Professional — with a fourteen-day trial and upgrade or downgrade at any time. I found no public information on the price of any plan, the per-signature cost of qualified signing, identification fees, overage, or the price of the API-only plan, so the cost of a qualified-signature volume cannot be computed. 1 2
The Integration Engineer
Plan structure and envelope limits are public — five documents a month free, twenty-five envelopes per user and month on standard, unlimited envelopes on professional — but we found no price figures in the captured pages and no public information on per-signature fees for qualified signatures, identification charges, API pricing or overage, so the cost of any real volume cannot be computed from what was captured. 1 2
The Data Protection Officer
The captured pricing page names the tiers and their envelope limits — five documents per month on the free tier, twenty-five envelopes per user per month on standard, unlimited envelopes on professional — but no monetary amount for any tier appears in the captured facts. We found no public information on per-signature fees for qualified signatures, identification fees, API pricing or overage; the terms do state the subscription can be upgraded, downgraded or cancelled at any time. 1 2 4
The Skeptic
The captured pricing page shows plan names and envelope counts — five documents a month free, twenty-five envelopes per user on Standard, unlimited on Professional — but not a single monetary price, and we found no public information on what a qualified signature costs, identification fees, API-only plan pricing, overage or contract terms beyond cancellation at any time. Without any price figure, the cost of a signing volume is not computable from these pages. 1 2
European sovereignty — proven facts
0 of 4 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined | — | uncited Report an error |
|---|---|---|---|
| Ownership | Not determined | — | uncited Report an error |
| Data residency | Not determined ⚠ unverified | — | uncited Report an error |
| Subprocessors | Not determined | — | uncited Report an error |
Questions about Zoho Sign
Is Zoho Sign European?
No. whats-best.ai classifies Zoho Sign as Rest of world.
Where does Zoho Sign store data?
The default storage location for customer data is not stated on the vendor’s pages as of 13 Oct 2026. The vendor’s pages mention the EU as hosting location, per the vendor’s page captured 13 Oct 2026.
Does Zoho Sign have a free plan?
Yes. Zoho Sign has a free plan, per the vendor’s page captured 13 Oct 2026.
What are the best alternatives to Zoho Sign?
As of 15 Oct 2026, the panel rates Penneo (2.5/5), Youtrust (Yousign) (2.5/5) and MOXIS (2.5/5) highest among the other 14 E-Signature products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Penneo (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Zoho Sign alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 13 Oct 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Data residency. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 7 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 5 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 3 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 compliance fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 1 data fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 1 subprocessors fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 1 sovereignty dimension could not be confirmed on the vendor’s own pages and is shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (4)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage www.zoho.com Checked 13 Oct 2026 Details →
- 2 Pricing page www.zoho.com Checked 13 Oct 2026 Details →
- 3 Privacy policy www.zoho.com Checked 13 Oct 2026 Details →
- 4 Terms of service www.zoho.com Checked 13 Oct 2026 Details →