Dropbox Sign
Connect Dropbox Sign to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Connect Dropbox Sign to collect cloud storage provider evidence with automated compliance tests, switched on per workspace.
| Category | Cloud Storage Provider |
| Connect with | API token |
| What a connection produces | Automated compliance tests |
| Dropbox Sign's guide | developers.hellosign.com |
Connect with an API token
-
In Dropbox Sign:
- Sign in to Dropbox Sign.
- Go to your API Settings page.
- Click Generate key and copy the API key.
Dropbox Sign's public documentation does not cover every step.
Dropbox Sign API key permissions cannot be restricted; Dropbox Sign says to use OAuth (team_access scope) for scoped access. The OAuth app and access-token steps for the alternative Access token field were not sourced. The fetched docs do not say which role is needed to list the whole team, whether the key is shown only once, or how to reach the API Settings page from the menus (the docs link to it directly).
Source: developers.hellosign.com, developers.hellosign.com, checked 2026-10-07.
The permissions Safeguard needs:
team_access. Dropbox Sign shows the full user list only to administrators, so this credential must belong to one. Safeguard only reads with it. -
On Compliance › Connectors, open Dropbox Sign, click Connect, choose API token and fill in:
Field What to enter API key Optional. Stored encrypted and never shown again. Or, instead: Access token (optional).
-
Click Connect with token.
Frameworks
Safeguard's automated tests read Dropbox Sign and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Automated tests | CC6.2, CC6.3 | 3 |
| ISO/IEC 27001 | Automated tests | A.5.16, A.5.18, A.6.5, A.8.2 | 3 |
| HIPAA Security Rule | Automated tests | 164.308(a)(3), 164.308(a)(4) | 3 |
| PCI DSS | Automated tests | 7.2.2, 7.2.4, 8.2.5 | 3 |
| NIST CSF 2.0 | Automated tests | PR.AA-01, PR.AA-05 | 3 |
These tests are switched on per workspace by the Safeguard team.
Related
- Cloud Storage Provider connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks