Security

Report exposed data

If you believe a workspace, a signed form, a signature, or a signing link was seen by someone who should not have it, email the operator.

cmansilla@upstateipvoice.com

Include what you saw, when you saw it, and the workspace or the signing link if you have it. Do not send the signed PDF again unless we ask for it.

What happens next

1. We confirm we received the report on the same day, and no later than one business day.
2. We look at which workspace and which forms were involved, and whether the files were still sealed.
3. If customer data was exposed, we email that workspace owner. A first notice goes out within 72 hours of confirming the exposure. Health-information notices are not delayed past 60 days after discovery.
4. We keep a written record of the incident, including a decision that notice was not required.

Stored PDFs, names, emails, phone numbers, and signature images are encrypted with AES-256. The site is served over HTTPS. This page is the way to report a problem. It is not a statement that the service meets HIPAA.