DOCU · 10-K filed 18 Mar 2026 · year to 31 Jan 2026

DocuSign

28 named things its latest annual report says its results depend on, each in the company's own words. 23 of them are also named by other companies we've read.

Read the filing on SEC.gov ↗

Customers

U.S. government

earns fromnamed as a risk

Sales to such entities are subject to a number of challenges and risks, including those related to our status as a service provider to U.S. local, state and federal governmental agencies.Risk factors (Item 1A)

Also named by ADI, AIR, APH, ASTS, ATI, AVAV, AWK, BA and 46 more

Suppliers

Microsoft Azure

depends onnamed as a risk

We operate co-location data centers in several locations, and we also leverage public cloud infrastructure for an increasing number of services, as we continue to migrate our production services from our data center hosting facilities to Microsoft Azure Cloud, a third-party cloud provider.Business (Item 1)

Also named by AIOT, AKAM, BLK, DDOG, DOCN, EXTR, FFIV, FTNT and 14 more

Partners and platforms

Microsoft

depends onnamed as a risk

Within our GTM strategy evolution, we are investing in deeper partner engagement across strategic technology partners like Microsoft, SAP, and Salesforce with whom we have both product integrations and co-selling relationships.Business (Item 1)

Also named by AAOI, AAON, AES, AJG, AMD, BLK, CDW, CEG and 13 more

SAP

depends onnamed as a risk

Also named by CTAS, GXO, IBM, KMB, NOW, PTC, RMNI

Salesforce

depends onnamed as a risk

Our products and solutions seamlessly integrate with hundreds of other software applications, including Salesforce, Microsoft, SAP, Google, ServiceNow, and Workday.Risk factors (Item 1A)

Also named by KVYO, NOW, PTC, RMNI

Google

depends on

We have partnerships with some of the world’s foremost technology providers including Salesforce, Microsoft, SAP, Google, ServiceNow, and Workday—that help us sell into a far greater number of accounts than we could do alone.Business (Item 1)

Also named by ABNB, AES, APP, BKNG, CSGP, CTSH, ETSY, EXPE and 14 more

Workday

depends on

Also named by CMG, FIVE, NOW, RMNI

ServiceNow

depends on

Also named by CIEN, RMNI

Ingram Micro

earns from

As part of our evolving go-to-market strategy, we have distribution partnerships with global industry leaders like Ingram Micro enabling us to reach a vast number of resellers, and providing them with operational efficiency and localized support.Business (Item 1)

Also named by CDW, FTNT

Deutsche Telekom

earns from

We also have partnerships with global solution providers such as Deutsche Telekom and others that have expertise in specific vertical and regional markets, enabling us to add further value directly to those markets.Business (Item 1)

Also named by TMUS

ChatGPT (OpenAI)

depends on

We announced that IAM will be available in ChatGPT, and can also be connected to Anthropic Claude, Gemini Enterprise, GitHub Copilot, Copilot Studio, and Agentforce, all by using the Model Context Protocol (“MCP”) server that’s currently in beta.Business (Item 1)

Also named by RHI

Competitors

Adobe

competes withnamed as a risk

Our primary global competitor for eSignature is currently Adobe, which offers an electronic signature solution known as Adobe Acrobat Sign.Business (Item 1)

Also named by KVYO

Places

International (non-U.S.) markets

earns from · 29%named as a risk

In each of the years ended January 31, 2026, 2025, and 2024 total revenue generated from customers outside the U.S. was 29%, 28%, and 26% of our total revenue.Risk factors (Item 1A)

Also named by ABNB, ADSK, BSX, CROX, CRWD, DXCM, EFX, FICO and 18 more

San Francisco Bay Area

operates innamed as a risk

We also require skilled product development, marketing, sales, finance and operations professionals, and we may not be successful in attracting and retaining the professionals we need, particularly in our principal U.S. locations in the San Francisco Bay Area and Seattle.Risk factors (Item 1A)

Also named by ADBE, ANET, ARE, DASH, QLYS, RMNI, SIRI, ZS

Hazards

Earthquake

operates innamed as a risk

A disruption or failure of these systems in the event of online attack, earthquake, fire, terrorist attack, public health crisis, power loss, telecommunications failure or other similar catastrophic event, including as a result of the effects of climate change, could cause system interruptions, delays in accessing our service, reputational harm and loss of critical data or could prevent us from providing our products and solutions to our customers.Risk factors (Item 1A)

Also named by A, ADBE, AEE, ARE, ARES, BLK, CDNA, CRC and 11 more

Regulators

French IT Security Agency (ANSSI)

subject to

Docusign France is listed as a qualified TSP in the Trusted List managed by the French IT Security Agency, ANSSI.Business (Item 1)

Laws and programs

EU General Data Protection Regulation (GDPR)

subject to · fines up to the greater of €20 million (£17.5 million) or 4% of global turnovernamed as a risk

Such penalties, which under GDPR may include fines up to the greater of €20 million (£17.5 million) or 4% of global turnover, are in addition to any civil litigation claims by customers and data subjects.Risk factors (Item 1A)

Also named by ACN, ADSK, AIG, ALK, AMG, ANET, APG, AXON and 61 more

OECD global minimum tax (Pillar Two)

subject to · 15%named as a risk

A number of countries have enacted legislation to implement the OECD’s 15% global minimum tax regime.Risk factors (Item 1A)

Also named by AAPL, APP, ARW, AXP, BAC, BALL, CB, CBRE and 15 more

California Consumer Privacy Act (CCPA)

subject tonamed as a risk

For example, California has enacted the California Consumer Privacy Act (as amended, the “CCPA”), that subjects businesses to new regulations promulgated through a recently created enforcement agency called the California Privacy Protection Agency.Risk factors (Item 1A)

Also named by AAP, AIOT, AKAM, ALL, APP, AYI, BAC, BBSI and 69 more

U.S. Export Administration Regulations

subject tonamed as a risk

Our products and solutions are subject to U.S. export controls, including the Export Administration Regulations and economic sanctions administered by the Office of Foreign Assets Control, and we incorporate encryption technology into certain products and solutions.Risk factors (Item 1A)

Also named by ADI, ALAB, AMD, APP, ARW, AVGO, CARR, CDRE and 40 more

EU Artificial Intelligence Act

subject tonamed as a risk

example, the EU Artificial Intelligence Act prohibits certain AI applications and systems with unacceptable risk and imposes additional requirements on the use of other high-risk or limited-risk AI applications or systems, which may require the implementation of additional quality assurance controls and measures to be reviewed and approved by regulatory submissions of our products.Risk factors (Item 1A)

Also named by ABNB, ADP, AIOT, AKAM, ALAB, AMG, APP, AVAV and 24 more

HIPAA

subject tonamed as a risk

We may function as a HIPAA business associate for certain of our customers and, as such, are subject to applicable privacy and data security requirements.Risk factors (Item 1A)

Also named by AFL, BAX, BBSI, CI, DHR, DOC, DOCN, DXCM and 19 more

Federal Acquisition Regulation

subject tonamed as a risk

We sell to public sector customers primarily through third-party resellers and distributors, who contract directly with government customers and are subject to complex laws, executive orders, regulations and contractual requirements applicable to government contractors, including Federal Acquisition Regulations, and the Defense Federal Acquisition Regulations in the U.S. and public procurement, anti-corruption, trade and competition laws.Risk factors (Item 1A)

Also named by ACN, AIR, ALSN, ASTS, AXON, BWXT, CACI, CDRE and 12 more

FedRAMP

subject tonamed as a risk

For example, some of our customers rely on government authorizations we maintain, such as FedRAMP in the U.S, or certifications such as our qualification as a Trust Service Provider under eIDAS in the EU to help satisfy their own legal and regulatory compliance requirements.Risk factors (Item 1A)

Also named by ADSK, CRWD, DDOG, FTNT, GTLB, MSTR, NET, OKTA and 9 more

ESIGN Act

subject tonamed as a risk

We are particularly reliant on the UETA and the ESIGN Act, which together have solidified the legal landscape in the U.S. for use of electronic signatures and records by providing that electronic signatures and records carry the same weight and have the same legal effect as paper documents and wet ink signatures.Risk factors (Item 1A)

Uniform Electronic Transactions Act (UETA)

subject tonamed as a risk

EU eIDAS Regulation

subject tonamed as a risk

The EU’s eIDAS, and ongoing regulatory and standards developments, including eIDAS 2.0 amendments, which may impose additional requirements on trust services and qualified providers in the EU.Risk factors (Item 1A)

FDA 21 CFR Part 11

subject to

Industry-specific Docusign offerings include: Real Estate for eSignature, which allows brokers, agents and customers to manage the entire real estate transaction digitally; U.S. Federal, State and Local Government through a Federal Risk and Authorization Management Program (“FedRAMP”) Impact Level Moderate environment for eSignature and CLM products, and dedicated data centers and system boundaries that offer heightened security; and Health and Life Sciences with eSignature modules enabling compliance with the U.S. Food and Drug Administration’s 21 CFR Part 11 regulations.Business (Item 1)