Email senders · DocuSign

Do I need to add DocuSign to my SPF or DMARC record?

No.

Last read from the sources at the foot of this page.

Check my firm
01

Which address does DocuSign send from?

Official notifications will only come from @docusign.com or @docusign.net .

DocuSign says in its own documentation that this email comes from @docusign.com or @docusign.net. That is DocuSign's own domain, so the email is checked against DocuSign's records, not yours.

02

Why does my DMARC record not cover these emails?

Author Domain: The domain name of the apparent author, as extracted from the RFC5322.From field.

DMARC is read for the domain in the From address a reader sees. When that domain is DocuSign's, the check uses DocuSign's records.

So your policy, from p=none to p=reject, has no effect on these emails. There is nothing to add to your SPF record for them.

03

What should I watch for with DocuSign email?

A forged email can copy the look of a DocuSign message from any address. Read the address it came from, not the name shown, before you open a link or make a payment.

Sources

Where does this come from?

Related
05 · Check my firm

See what is open before anyone else does.

We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.

What we readPublic sources only
Who sees itYou alone
Delivery72 hours from confirmation
Meeting firstNone
Reading requestPrivate
Problem: Enter your firm's name.
Problem: Enter your name.
Problem: Enter a full address, like [email protected].
Problem: That does not look like a website. Try yourdomain.com.

A person reads every request. Your outside reading comes by email within 72 hours from [email protected]. Privacy