# Zoho Sign — E-Signature

Zoho Sign by Zoho Corporation Pvt. Ltd. holds a panel rating of 2/5 from 6 AI judges (category median 2.5/5), as of 2026-10-15. Provenance: Rest of world; sovereignty: not determined.

- Vendor: Zoho Corporation Pvt. Ltd. (https://www.zoho.com/de/sign/)
- Category: [E-Signature](https://whats-best.ai/software/e-signature.md)
- Provenance (editorial classification): Rest of world
- Canonical page: https://whats-best.ai/software/e-signature/zoho-sign
- Alternatives: https://whats-best.ai/software/e-signature/zoho-sign/alternatives ([markdown](https://whats-best.ai/software/e-signature/zoho-sign/alternatives.md))
- Data as of: 2026-10-20 · evaluated 2026-10-15 · oldest source captured 2026-10-13

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Zoho Corporation Pvt. Ltd.
- Headquarters: Not stated on the vendor’s pages as of 13 Oct 2026
- Data hosting: Default not stated; pages mention the EU [S1]
- Free plan: Yes, per the vendor’s own page [S1]

## The panel's verdict

Zoho Sign is an e-signature service from Zoho Corporation Pvt. Ltd. of Chennai, India. Its strongest area is signing workflow, scoring 6-7: templates, signing order, bulk send, reminders, SignForms self-service URLs and account-free signing on mobile and desktop apps are documented. Integration and API scores 4-6, the integration engineer alone at 6 for REST APIs, webhooks, web and mobile SDKs and an API-only plan. The weak areas are sovereignty at 1-2 and pricing transparency at 1-3: the contracting entity sits in Chennai, the homepage states data is stored in a data centre within the EU, and we found no public information on subprocessors or certifications; the pricing page publishes envelope limits but no monetary price. Signature levels at 3-4 and identity verification at 2-3 are capped by an unnamed trust service provider and unnamed identification methods. The judges split on pricing: those at 3 credited the published limits — five documents a month free, 25 envelopes per user per month on Standard, unlimited envelopes on Professional, a 14-day trial — while those at 1-2 found no price figure at all.

**Speaks for it:**
- Signing workflow scores 6-7, with templates, signing order, bulk send, reminders and SignForms self-service URLs documented
- Signers need no account or subscription to sign documents
- REST APIs, webhooks, web and mobile SDKs and a dedicated API-only plan are stated on the captured pages
- Envelope limits are published — five documents a month free, 25 envelopes per user per month on Standard, unlimited envelopes on Professional — alongside a 14-day trial
- The Enterprise tier lists qualified electronic signatures alongside 21 CFR Part 11 and EU GMP Annex 11 controls

**Held against it:**
- No monetary price appears on the captured pricing page, so the cost of a signing volume cannot be computed
- No trust service provider is named and no EU Trust List entry is linked on the captured pages
- No identification method, provider or country coverage for the identity check behind qualified signing appears
- The contracting entity is Zoho Corporation Pvt. Ltd. of Chennai, India, with no public information on subprocessors or certifications
- Audit-trail contents go undescribed, with no public information on long-term validation or a validation report

**Best for:**
- You send routine documents at volume and need templates, signing order, bulk send and reminders, with signers who need no account
- You want to embed signing in your own apps or websites through a REST API, webhooks and web and mobile SDKs
- Your team already works inside Zoho applications and wants documents signed there directly
- You collect signatures from many signers through a self-service URL

**Avoid if:**
- You need a monetary price for plans or a per-signature cost for qualified signing before committing to a volume
- You must map simple, advanced and qualified signature requirements to a purchasable plan and country before purchase
- Your signed records must prove themselves years later, with known audit-trail contents and long-term validation
- You must assess European control of the trust service and identification chain, including a subprocessor list

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price.

| Criterion | The Legal Counsel | The HR Operations Lead | The Revenue Operations Lead | The Integration Engineer | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| eIDAS levels & trust services | 1.5/5 | 2/5 | 2/5 | 1.5/5 | 1.5/5 | 2/5 |
| Signer identification | 1.5/5 | 1.5/5 | 1/5 | 1.5/5 | 1.5/5 | 1.5/5 |
| Signing workflow & signer experience | 3/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3/5 | 3/5 |
| Evidence, validation & retention | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Integrations & API | 2/5 | 2/5 | 2/5 | 3/5 | 2/5 | 2/5 |
| European sovereignty | 1/5 | 1/5 | 1/5 | 1/5 | 0.5/5 | 1/5 |
| Pricing transparency | 1/5 | 1.5/5 | 1.5/5 | 1/5 | 0.5/5 | 1/5 |
| **Weighted verdict** | **1.5/5** | **2/5** | **2/5** | **2.5/5** | **1.5/5** | **2/5** |

### The judges

- **The Legal Counsel** (v1.0): Decides which contracts may be signed electronically and at which level. Wants SES, AdES and QES named per plan and country, the qualified trust service provider linked to the EU Trust List, and an audit trail with timestamps that still validates when the contract is disputed in eight years.
- **The HR Operations Lead** (v1.0): Sends two hundred employment contracts a year, many of them fixed-term and so under written form. Wants QES that a new hire can complete on a phone in ten minutes, identification that accepts the IDs applicants actually hold, bulk sending from templates, and a price per qualified signature known before the contract is signed.
- **The Revenue Operations Lead** (v1.0): Measures how long a quote takes to come back signed and where it stalls. Wants signing from inside the CRM, templates sales cannot break, reminders and signing order that run themselves, and a signer experience that needs no account, no app and no explanation.
- **The Integration Engineer** (v1.0): Embeds signing into the company's own portal and archives the result in the DMS. Wants a versioned API with webhooks and a sandbox, every signature level reachable through the API rather than only in the web app, and signed documents exported with their evidence intact.
- **The Data Protection Officer** (v1.0): Knows every signer who holds an ID card up to a camera hands biometric and identity data to a provider they never chose. Asks who performs the identification, where documents and ID data are stored, how long the audit trail keeps IP addresses, and who the subprocessors in the trust service chain are.
- **The Skeptic** (v1.0): Knows "legally binding" usually means a simple signature. Reads for the level the default plan actually signs at, the QTSP the provider does not operate itself, the per-QES and ident fees on top of the plan, the envelope limit, and "eIDAS-compliant" from a provider that names no trust service at all.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Ownership | Not determined | — | — |
| Data residency | Not determined | — | — |
| Subprocessors | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Certifications: Zoho states it is certified for industry standards described on a linked page [S3]
- DPA available: yes · request via form [S3]
- GDPR addendum request: yes [S3]
- No ad data sales: Zoho states it has never sold user information for advertising purposes or earned money from third-party ads [S3]
- Privacy policy: yes [S4]

**Data**
- Egr rights extension: Zoho grants EEA data subject rights (access, rectification, deletion, restriction, portability, objection, complaint) to all users regardless of location [S3]
- Export trial: trial data · yes [S4]
- No credit card storage: no [S3]
- Ownership: yes · yes [S4]
- Service data deletion: 6 · 3 [S3]
- Third party cookies disabled: yes [S3]

**Hosting**
- Data residency: EU [S1]
- Local copy: when Zoho group entity has branch in user's region · yes [S4]
- Region assignment: assigned by user region/country at signup, may migrate · yes [S4]

**Integrations**
- Data export deletion: yes · yes · yes [S3]
- Enterprise API: yes · web · mobile · yes [S2]
- Federated auth: LinkedIn · Microsoft · Google [S3]
- Rest API: REST-API für Signier- und Managementautomatisierung [S1]
- Third party apps: Integration in Zoho- und Drittanbieter-Apps [S1]

**Legal**
- Account recovery email: legal@zohocorp.com · admin account recovery process [S4]
- Children min age: 16 [S3]
- Contract email: legal@zohocorp.com [S4]
- Governing law: Governing law and jurisdiction based on customer's billing address (paying customers) or state/country otherwise [S4]
- No personal info sale: no [S3]
- Privacy policy updated: 2022-03-02 [S3]
- Suspension appeal: 30 · 30 [S4]
- Termination refund: yes [S4]
- Terms change notice: 30 · yes [S4]
- Terms updated: Terms of Service updated 02 March 2022 [S4]

**Pricing**
- Auto renewal: yes · 7 [S4]
- Credits: EUR · 500 · 0.1 [S2]
- Currency options: EUR · GBP [S2]
- Discount: 20 [S2]
- Free tier details: single user · 5 [S2]
- Free trial: Data lost after trial unless paid plan purchased or data exported · yes [S4]
- Oem isv: contact required · yes [S2]
- Price change: yes · yes [S4]
- Sub1y creditcard only: credit card only for subscriptions under one year [S4]
- Taxes: yes · yes [S4]
- VAT: yes [S2]
- Volume discount: yes [S2]

**Product**
- AI usage: yes · yes [S3]
- API only plan: yes [S2]
- Beta services: yes · yes [S4]
- Blockchain timestamp: Blockchain-Zeitstempel [S1]
- Bulk send: Sammelsendung an mehrere Unterzeichner [S1]
- Communications: yes · no [S4]
- Custom branding: Benutzerdefiniertes Branding mit Logos und E-Mails [S1]
- Enterprise admins: yes [S4]
- Enterprise compliance: yes · 21 CFR Part 11 · EU GMP Annex 11 [S2]
- Enterprise features: Gesammelt senden und signieren · SignForms · Persönliche Signatur · Zahlungserfassung [S2]
- Enterprise tech: Blockchain-Zeitstempel · Automatisches Cloudbackup · APIs und Webhooks · Web- und mobile SDKs · Personalisierte Domänen- und White-Label-Optionen [S2]
- Envelope definition: Ein Umschlag ist ein individueller Workflow oder eine individuelle Anfrage für digitale Signaturen. [S2]
- Flexible subscription: yes [S2]
- Free features: Signatur-Workflows · Erinnerungen und Benachrichtigungen · Mit Zoho DSC signieren · Auditpfade · Cloud-Speicher Import und Export · Mobile und Desktop-Apps [S2]
- Free tier: yes · 5 [S1]
- No third party tracking: no [S4]
- Ownership of service data: yes [S3]
- Professional features: Unbegrenzte Umschläge · Unbegrenzte Vorlagen · Branding und Personalisierung · Anlagen der Unterzeichner · Mehrsprachiger Support · Berichte [S2]
- Qualified signatures: Qualifizierte elektronische Signaturen (QTSP) [S1]
- Reusable templates: Wiederverwendbare Vorlagen [S1]
- Signers no account: no [S2]
- Signforms: SignForms Selfservice-Signierung über URL [S1]
- Signing order: Signaturreihenfolge für mehrere Empfänger definierbar [S1]
- Standard features: Genehmigungsworkflows · Umschläge per SMS bereitstellen · AATL-fähige Zertifikate · Empfängerauthentifizierung · Dokumentenzeitstempel · Benutzerdefinierte Rollen und Berechtigungen · Technischer Premium-Support · 25 [S2]
- Status tracking: Statusverfolgung mit Benachrichtigungen [S1]
- Third party integrations: yes · yes [S4]
- Trial: 14 · yes [S1]
- Trial free transition: yes · free plan [S2]

**Support**
- Premium: Standard [S2]
- Standard email: Standard · email [S2]

## Questions

### Is Zoho Sign European?

No. whats-best.ai classifies Zoho Sign as Rest of world.

### Where does Zoho Sign store data?

The default storage location for customer data is not stated on the vendor’s pages as of 13 Oct 2026. The vendor’s pages mention the EU as hosting location, per [the vendor’s page captured 13 Oct 2026](https://whats-best.ai/evidence/6752).

### Does Zoho Sign have a free plan?

Yes. Zoho Sign has a free plan, per [the vendor’s page captured 13 Oct 2026](https://whats-best.ai/evidence/6752).

### What are the best alternatives to Zoho Sign?

As of 15 Oct 2026, the panel rates [Penneo (2.5/5)](https://whats-best.ai/software/e-signature/penneo), [Youtrust (Yousign) (2.5/5)](https://whats-best.ai/software/e-signature/youtrust) and [MOXIS (2.5/5)](https://whats-best.ai/software/e-signature/moxis) highest among the other 14 E-Signature products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Penneo](https://whats-best.ai/software/e-signature/penneo) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Zoho Sign alternatives](https://whats-best.ai/software/e-signature/zoho-sign/alternatives).

## What this page leaves out

- 7 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 5 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 compliance fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 data fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 subprocessors fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 sovereignty dimension could not be confirmed on the vendor’s own pages and is shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://www.zoho.com/de/sign/ (checked 2026-10-13)
- [S2] Pricing page: https://www.zoho.com/de/sign/pricing.html (checked 2026-10-13)
- [S3] Privacy policy: https://www.zoho.com/de/privacy.html (checked 2026-10-13)
- [S4] Terms of service: https://www.zoho.com/de/terms.html (checked 2026-10-13)

---

Cite as: whats-best.ai, "Zoho Sign — E-Signature", AI panel analysis, as of 2026-10-20. https://whats-best.ai/software/e-signature/zoho-sign

Corrections: https://whats-best.ai/correct/644?target=page