Masking Sensitive Information

Available on Enterprise Plus and API Platinum and above plans.

Many times requesters need to obtain sensitive information from their signers and want to be able to add an extra layer of security. Masked fields allow you as a sender to request this type of information without compromising high standards of security and privacy.

Masking the field

Masking a field within your document will hide this sensitive information and is easy to do. Once you place a text field on your document, in the right hand menu under 'Text options' toggle on 'Mask Typed Text'. Lastly in the 'Field Name' replace the default text with the name of the information you'll be requesting, for example employee ID, date of birth or address. Finish your editing and send your request as you normally would. 

The Signer Experience 

Once the signer has entered in their information, the entered text will be replaced by asterisks. If the signer wants to confirm the information or edit the field all they need to do is click back into the field and the text will reappear and can be edited (see below). 

The finalized PDF copy sent to all parties (the requester, the signers and any individuals who've been CC'd) will not show the sensitive data but will display the asterisks. The signers do not have any access to the data once the signature request has been submitted. 

Retrieving the Data 

All masked field information will be hidden, replaced by asterisks, on the preview of the signer page, the signer page unless being edited by the signer themselves, and the finalized PDF. To view the data navigate to the 'Documents' section in your account and locate the document you need. Hover over the dropdown menu to the far right of the title of the document and select 'Download as CSV'.

The CSV download will contain all of the data requested in the document as well as document ID, template ID, role of the signers (if using a template), time signed and x-y coordinates of the fields on the document. 

If on an API plan and signature request was sent via the API the response data will need to be retrieved by an API call [here is how to do so link], not through downloading the CSV within hellosign.com

Please Note: 

• When opening the CSV download within Excel all date formats, signed timestamp and signed date, will default to your Excel date format preset. This default format cannot be altered or modified by HelloSign.

• When opening the CSV download in any application other than Excel the signed timestamp format will appear as YYYY/MM/DD and the signed date format will populate in the same format as set in the signed document. 

Who Has Access

Org admins are able to download the CSV and they also have the ability to determine who else has access to these CSVs. Within the admin console under 'Documents and Templates' in 'Settings' there is a toggle to allow for the senders to have access. 

**Please Note: For API plans, this is only available in the embedded editor flows.