When using a phone number for 2FA, where is the number stored within Adobe and for how long?

Report · Sep 17, 2021

Hi all,

Please could someone help with the following question:

'When using SMS for authorisation on Adobe sign, where will the mobile phone numbers be stored and for how long?'

I'm currently setting up Adobe Sign for my organisation, and I'm trying to make sure I have all compliance requirements covered. I've found everything I need for 21 CFR Part 11, where our data centre will be etc. However I can't find any information specific to how these phone numbers are stored.

We will be using the SMS method of signtaure authorisation for external users, so I need to make sure we can document clearly where their information will be stored in Adobe's system and for how long. I'm aware the number will be on the agreement for the life of that document, but does Adobe otherwise purge the number as soon as it's used?

Any help would be much appreciated!

Report · Sep 20, 2021

the phone number is par tof the Agreement meta data and Sign by default keeps this data forever in theory, Though you can setup retention policies to remove this data from Sign.