{ "data": { "similar": [ { "grade": "B", "json": "https://www.anchorterminal.com/tools/dropbox-sign.json", "name": "Dropbox Sign", "score": 68.9, "shared": [ "esign.send", "esign.templates", "esign.embed", "esign.status" ], "slug": "dropbox-sign" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/signnow.json", "name": "airSlate SignNow", "score": 68.5, "shared": [ "esign.send", "esign.templates", "esign.embed", "esign.status" ], "slug": "signnow" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/pandadoc.json", "name": "PandaDoc", "score": 63.1, "shared": [ "esign.send", "esign.templates", "esign.embed", "esign.status" ], "slug": "pandadoc" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/documenso.json", "name": "Documenso", "score": 62.8, "shared": [ "esign.send", "esign.templates", "esign.status", "esign.embed" ], "slug": "documenso" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/docusign.json", "name": "Docusign", "score": 62.5, "shared": [ "esign.send", "esign.templates", "esign.embed", "esign.status" ], "slug": "docusign" } ], "tool": { "slug": "adobe-acrobat-sign", "name": "Adobe Acrobat Sign", "vendor": "Adobe Inc.", "vendorUrl": "https://www.adobe.com/acrobat/business/sign.html", "kind": "http-api", "category": "e-signatures", "summary": "Adobe Acrobat Sign is an e-signature service. Its REST API v6 creates agreements from uploaded files or library templates, sends them for signature, returns signing URLs and audit trails, and reports status through webhooks.", "url": "https://www.anchorterminal.com/tools/adobe-acrobat-sign", "markdownUrl": "https://www.anchorterminal.com/tools/adobe-acrobat-sign.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/adobe-acrobat-sign.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/adobe-acrobat-sign.json", "repo": "https://github.com/adobe/acrobat-sign", "license": "Proprietary service under the Adobe General Terms of Use and, for enterprise customers, the Acrobat Sign product terms. The documentation and SDK repository on GitHub is MIT", "transports": [ "http" ], "remoteUrl": "https://api.na1.adobesign.com/api/rest/v6", "packages": [], "auth": "oauth", "authNotes": "Access is self-serve for a developer's own account. A person creates an Adobe ID, signs up for the free Developer Edition and creates an API application in the Acrobat Sign web UI, then completes an OAuth 2.0 authorisation code flow in a browser. Access tokens last one hour and refresh tokens expire after 60 days without use. Scopes are set per application and per token, each with a `:self`, `:group` or `:account` modifier. Only a group or account admin can grant the wider modifiers. PARTNER applications that reach other customers' accounts need Adobe's certification.", "pricing": "paid", "pricingNotes": "No public price for API use. Acrobat Sign Solutions, the product Adobe sells for API and enterprise e-signing, is by quote. Acrobat team plans with e-signatures are public at $16.99 to $29.99 a licence a month, and the pricing page doesn't say whether they include API access. An agent's owner can start without a contract on the free Developer Edition, where test documents carry a test label. Whether sign-up asks for a card isn't stated (checked 2026-10-08).", "priceSummary": "$16.99 / seat-mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the developer guide, the release notes or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 26, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://developer.adobe.com/acrobat-sign/", "capabilities": [ "esign.send", "esign.templates", "esign.embed", "esign.status" ], "tags": [ "hosted", "enterprise", "oauth", "webhooks", "closed-source", "sales-led", "free-tier", "status-page", "sla", "bug-bounty" ], "lastRelease": "2025-11-01", "graded": true, "anchor": { "graded": true, "score": 52.6, "grade": "D", "agentReady": false, "rank": 652, "ranked": true, "rankOf": 842, "categoryRank": 6, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 55, "maintenance": 10, "payments": 25, "reliability": 66, "schema": 54, "security": 66, "transparency": 70 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 66, "points": 13.2, "reason": "Graded as a hosted API. status.adobe.com is Adobe's status page and the Unified SLA names it for outage notices (20). The page is drawn by script and our reader saw no incident history, so the last 90 days are scored as unreadable (5). Numbers are published for `/search` (1,000 a minute, 2,500 an hour, 7,200 a day) and for identical GET calls (three a minute on Global, Enterprise and Developer tiers). Per-endpoint limits depend on the plan and aren't published (9 of 15). 429 responses carry `Retry-After` and a `retryAfter` field, the guide asks for exponential backoff, and `If-Match` ETags stop stale updates. No idempotency key was found for `POST /agreements` (12 of 15). The Unified SLA of 3 August 2026 commits to 99.9 per cent for Acrobat Sign Solutions for Enterprise, with credits of 5 to 25 per cent (10). REST v6 is generally available (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 54, "points": 8.78, "reason": "Graded on the REST v6 API. The live reference is a Swagger UI on secure.na1.adobesign.com, whose robots.txt disallows crawlers, so we didn't read it. The only downloadable contract found is a set of Swagger 1.2 files from August 2018 with 92 operations, and Adobe calls the SDKs built from it obsolete (12 of 25). developer.adobe.com/llms.txt returns 404 (0). The developer guide and a best practices page of 17 December 2025 state required scopes, valid state transitions and good and bad call patterns for each main endpoint (12 of 20). The 2018 files mark 231 of 489 parameters required and hold 99 enums (9 of 15). The guide has request and response examples and named error codes, with per-endpoint error lists in the reference we didn't read (10 of 15). The API is versioned in the path, and the release notes are dated by month, most recently November 2025 (11 of 15)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 55, "points": 8.94, "reason": "List calls take `pageSize` and return ETags for 304 responses. No field selection was found (13 of 25). Cursor pagination with `page.nextCursor`, a `/search` endpoint and a 500-agreement page cap (15 of 20). Errors are JSON with a stable code and message, such as `INVALID_API_ACCESS_POINT`, `THROTTLING_TOO_MANY_REQUESTS` and `RESOURCE_MODIFIED` (15 of 20). No idempotency key. `If-Match` protects updates and a `DRAFT` state lets a caller build an agreement before sending (8 of 20). A caller must first discover the account's shard, sending a file takes an upload call and then an agreement call, and Adobe marks every SDK deprecated (4 of 15)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 66, "points": 11.55, "reason": "OAuth 2.0 authorisation code grant with one-hour access tokens, refresh tokens that lapse after 60 days unused, a revoke endpoint and per-resource scopes with `:self`, `:group` and `:account` modifiers. PKCE wasn't found in the guide, and no secret in a URL query string was documented (26 of 30). Read scopes are separate from write and send scopes and only admins can grant the wider modifiers. Nothing requires confirmation before a send (13 of 20). The API returns form data and documents written by signers, and no prompt-injection guidance was found (3 of 15). Each agreement has an audit trail and an events endpoint. A log of API calls for the operator wasn't found (10 of 15). security.txt is PGP-signed and valid to 30 July 2027, and names PSIRT and a bug bounty on Intigriti. The certification list for Acrobat Sign sits behind a script-drawn filter and an NDA trust centre, so SOC 2 and ISO 27001 are unconfirmed (14 of 20)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 25, "points": 3.13, "reason": "Read with the hosted rubric. No x402, MPP or L402 found (0). Acrobat team plan prices are public, but the pricing page doesn't say they include API access, and Acrobat Sign Solutions is by quote with no per-transaction price. We scored between plan-only and contact sales (5). The Developer Edition is free with API access. The sign-up page says no commitments and doesn't mention a card, and we didn't run the form (20). A person must create an Adobe ID, register an application and approve OAuth in a browser (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 10, "points": 0.88, "reason": "The newest dated entry in the API release notes is November 2025, more than 180 days before this check, and the developer guide was last updated on 17 December 2025 (0). No dated API entries fall in the last 90 days (0). Closed service with release notes, a developer forum link and support. The GitHub repository has nine open issues and its last commit was 14 May 2026. We didn't test a support channel (5 of 15). Adobe's SDK page says its SDKs are obsolete, and a Postman workspace is the suggested replacement (3 of 15). The SDK code hasn't changed since August 2022 and the repository has no CI workflow (2 of 10). Product release notes on helpx.adobe.com answered 403 and went unread, so newer product changes may exist." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 70, "points": 6.13, "note": "editorial 59, provenance 81", "reason": "Closed service under the Adobe General Terms of Use of 3 October 2025 and the Acrobat Sign product terms of May 2023. The documentation repository is MIT (15). The privacy policy of 24 October 2025 keeps most personal information while the user is active and contract records for ten years. The product terms store customer content for the licence term, and the General Terms say content isn't used to train generative AI models, with content analytics on by default and an opt-out. The data processing agreement wasn't read (18 of 30). v5 and SOAP are marked deprecated without an end date. Classic webhooks were retired on a dated schedule in 2023, and the product terms promise only reasonable effort to give notice of changes (8 of 20). The sub-processor list of 28 September 2026 names each company with its locations, with OpenAI and Google among them (18 of 20)." } ], "assessment": { "date": "2026-10-08", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "List calls take `pageSize` and return ETags for 304 responses. No field selection was found (13 of 25). Cursor pagination with `page.nextCursor`, a `/search` endpoint and a 500-agreement page cap (15 of 20). Errors are JSON with a stable code and message, such as `INVALID_API_ACCESS_POINT`, `THROTTLING_TOO_MANY_REQUESTS` and `RESOURCE_MODIFIED` (15 of 20). No idempotency key. `If-Match` protects updates and a `DRAFT` state lets a caller build an agreement before sending (8 of 20). A caller must first discover the account's shard, sending a file takes an upload call and then an agreement call, and Adobe marks every SDK deprecated (4 of 15).", "maintenance": "The newest dated entry in the API release notes is November 2025, more than 180 days before this check, and the developer guide was last updated on 17 December 2025 (0). No dated API entries fall in the last 90 days (0). Closed service with release notes, a developer forum link and support. The GitHub repository has nine open issues and its last commit was 14 May 2026. We didn't test a support channel (5 of 15). Adobe's SDK page says its SDKs are obsolete, and a Postman workspace is the suggested replacement (3 of 15). The SDK code hasn't changed since August 2022 and the repository has no CI workflow (2 of 10). Product release notes on helpx.adobe.com answered 403 and went unread, so newer product changes may exist.", "payments": "Read with the hosted rubric. No x402, MPP or L402 found (0). Acrobat team plan prices are public, but the pricing page doesn't say they include API access, and Acrobat Sign Solutions is by quote with no per-transaction price. We scored between plan-only and contact sales (5). The Developer Edition is free with API access. The sign-up page says no commitments and doesn't mention a card, and we didn't run the form (20). A person must create an Adobe ID, register an application and approve OAuth in a browser (0).", "reliability": "Graded as a hosted API. status.adobe.com is Adobe's status page and the Unified SLA names it for outage notices (20). The page is drawn by script and our reader saw no incident history, so the last 90 days are scored as unreadable (5). Numbers are published for `/search` (1,000 a minute, 2,500 an hour, 7,200 a day) and for identical GET calls (three a minute on Global, Enterprise and Developer tiers). Per-endpoint limits depend on the plan and aren't published (9 of 15). 429 responses carry `Retry-After` and a `retryAfter` field, the guide asks for exponential backoff, and `If-Match` ETags stop stale updates. No idempotency key was found for `POST /agreements` (12 of 15). The Unified SLA of 3 August 2026 commits to 99.9 per cent for Acrobat Sign Solutions for Enterprise, with credits of 5 to 25 per cent (10). REST v6 is generally available (10).", "schema": "Graded on the REST v6 API. The live reference is a Swagger UI on secure.na1.adobesign.com, whose robots.txt disallows crawlers, so we didn't read it. The only downloadable contract found is a set of Swagger 1.2 files from August 2018 with 92 operations, and Adobe calls the SDKs built from it obsolete (12 of 25). developer.adobe.com/llms.txt returns 404 (0). The developer guide and a best practices page of 17 December 2025 state required scopes, valid state transitions and good and bad call patterns for each main endpoint (12 of 20). The 2018 files mark 231 of 489 parameters required and hold 99 enums (9 of 15). The guide has request and response examples and named error codes, with per-endpoint error lists in the reference we didn't read (10 of 15). The API is versioned in the path, and the release notes are dated by month, most recently November 2025 (11 of 15).", "security": "OAuth 2.0 authorisation code grant with one-hour access tokens, refresh tokens that lapse after 60 days unused, a revoke endpoint and per-resource scopes with `:self`, `:group` and `:account` modifiers. PKCE wasn't found in the guide, and no secret in a URL query string was documented (26 of 30). Read scopes are separate from write and send scopes and only admins can grant the wider modifiers. Nothing requires confirmation before a send (13 of 20). The API returns form data and documents written by signers, and no prompt-injection guidance was found (3 of 15). Each agreement has an audit trail and an events endpoint. A log of API calls for the operator wasn't found (10 of 15). security.txt is PGP-signed and valid to 30 July 2027, and names PSIRT and a bug bounty on Intigriti. The certification list for Acrobat Sign sits behind a script-drawn filter and an NDA trust centre, so SOC 2 and ISO 27001 are unconfirmed (14 of 20).", "transparency": "Closed service under the Adobe General Terms of Use of 3 October 2025 and the Acrobat Sign product terms of May 2023. The documentation repository is MIT (15). The privacy policy of 24 October 2025 keeps most personal information while the user is active and contract records for ten years. The product terms store customer content for the licence term, and the General Terms say content isn't used to train generative AI models, with content analytics on by default and an opt-out. The data processing agreement wasn't read (18 of 30). v5 and SOAP are marked deprecated without an end date. Classic webhooks were retired on a dated schedule in 2023, and the product terms promise only reasonable effort to give notice of changes (8 of 20). The sub-processor list of 28 September 2026 names each company with its locations, with OpenAI and Google among them (18 of 20)." }, "sources": [ { "what": "product page and team plan prices", "url": "https://www.adobe.com/acrobat/business/sign.html", "seen": "2026-10-08" }, { "what": "plans and pricing", "url": "https://www.adobe.com/acrobat/business/pricing-plans.html", "seen": "2026-10-08" }, { "what": "developer account page", "url": "https://www.adobe.com/acrobat/business/developer-form.html", "seen": "2026-10-08" }, { "what": "developer home", "url": "https://developer.adobe.com/acrobat-sign/", "seen": "2026-10-08" }, { "what": "developer guide overview", "url": "https://developer.adobe.com/acrobat-sign/docs/overview/developer_guide/", "seen": "2026-10-08" }, { "what": "API usage and throttling", "url": "https://developer.adobe.com/acrobat-sign/docs/overview/developer_guide/apiusage", "seen": "2026-10-08" }, { "what": "API release notes", "url": "https://developer.adobe.com/acrobat-sign/docs/overview/releasenotes/acrobatsignreleasenotes", "seen": "2026-10-08" }, { "what": "SDK page", "url": "https://developer.adobe.com/acrobat-sign/docs/overview/sdks/", "seen": "2026-10-08" }, { "what": "webhooks and events", "url": "https://developer.adobe.com/acrobat-sign/docs/overview/acrobat_sign_events/", "seen": "2026-10-08" }, { "what": "docs and SDK repository (cloned, the source of the best practices, OAuth, getting started and migration pages and the 2018 Swagger files)", "url": "https://github.com/adobe/acrobat-sign", "seen": "2026-10-08" }, { "what": "robots.txt of the REST reference host", "url": "https://secure.na1.adobesign.com/robots.txt", "seen": "2026-10-08" }, { "what": "Adobe General Terms of Use", "url": "https://www.adobe.com/legal/terms.html", "seen": "2026-10-08" }, { "what": "Acrobat Sign product terms, PSLT 2023v2", "url": "https://www.adobe.com/cc-shared/assets/pdf/legal/terms/enterprise/pdfs/pslt-adobeacrobatsign-ww-2023v2.pdf", "seen": "2026-10-08" }, { "what": "service commitments index", "url": "https://www.adobe.com/legal/service-commitments.html", "seen": "2026-10-08" }, { "what": "Unified SLA, effective 3 August 2026", "url": "https://www.adobe.com/cc-shared/assets/pdf/legal/terms/enterprise/pdfs/sla-adobeon-demand-managedservices-20206aug3.pdf", "seen": "2026-10-08" }, { "what": "privacy policy", "url": "https://www.adobe.com/privacy/policy.html", "seen": "2026-10-08" }, { "what": "sub-processor list", "url": "https://www.adobe.com/privacy/sub-processors.html", "seen": "2026-10-08" }, { "what": "security.txt", "url": "https://www.adobe.com/.well-known/security.txt", "seen": "2026-10-08" }, { "what": "status page (script-drawn, no history read)", "url": "https://status.adobe.com/", "seen": "2026-10-08" }, { "what": "RDAP for adobe.com and adobesign.com", "url": "https://rdap.verisign.com/com/v1/domain/adobe.com", "seen": "2026-10-08" } ], "openQuestions": [ "unchecked: the REST v6 reference on secure.na1.adobesign.com. Its robots.txt disallows crawlers, so the current operation count, schemas and error lists were not read. We loaded the page once before reading robots.txt, saw only a Swagger UI shell, and used nothing from it", "unchecked: helpx.adobe.com answered 403 to every request, so the product release notes, transaction limits, system requirements and webhook IP ranges went unread", "unchecked: the incident history on status.adobe.com, which is drawn by script", "unchecked: certifications that apply to Acrobat Sign. The compliance list filters by script and the trust centre resources need an Adobe ID with a signed NDA", "unchecked: the data processing agreement and the enterprise General Terms", "Whether the team plans sold online include API access, and whether Developer Edition sign-up asks for a card, is not stated on the pages read", "The lead said SDKs. Adobe marks every SDK deprecated and obsolete", "The best practices page writes the base URI call as `/api/rest/v6/base_uris` and the migration guide and 2018 Swagger files as `/baseUris`. We made no API call to settle it", "`provenance.terms` points at the Adobe General Terms of Use. Enterprise customers contract under separate General Terms and the Acrobat Sign product terms, which is a PDF", "No MCP server for Acrobat Sign was found in the developer docs" ] }, "negative": 0, "verdict": "The REST API has OAuth 2.0 scopes that can be limited to one user, a group or the account, `Retry-After` on throttled calls and a free Developer Edition. Adobe calls its own SDKs obsolete, the newest dated API change is November 2025, and API plans are sold through sales with no public price.", "bestFor": "A company that already holds Acrobat Sign Solutions and wants an agent to send agreements, track them by webhook and fetch signed files and audit trails.", "strengths": [ "OAuth 2.0 scopes split read, write and send per resource, each limited to the authorising user, a group or the whole account", "Throttled calls return 429 with a `Retry-After` header and a `retryAfter` body field, and the guide asks for exponential backoff", "ETags give 304 on unchanged reads and `If-Match` on updates, so a stale write fails with 412 `RESOURCE_MODIFIED`", "Webhooks retry with doubling intervals for up to 72 hours and can call an endpoint secured with OAuth 2.0 or two-way SSL", "A free Developer Edition account includes API access, and a 99.9 per cent uptime SLA with credits covers the enterprise product" ], "weaknesses": [ "Adobe's SDK page says the C#, Java and JavaScript SDKs are obsolete and out of step with REST v6", "The newest dated entry in the API release notes is November 2025, eleven months before this check", "API plans (Acrobat Sign Solutions) are sold through sales. No per-transaction price is published", "Per-endpoint request limits depend on the service plan and aren't published. Only the `/search` and polling limits carry numbers", "No llms.txt, no MCP server and no current OpenAPI file were found. The downloadable Swagger files date from 2018" ], "agentNotes": [ "Call the base URI endpoint first and cache `api_access_point`. Each account lives on one shard such as `api.na1.adobesign.com`, and other hosts answer `INVALID_API_ACCESS_POINT`", "Request only the scopes the task needs, with the `:self` modifier. `:account` lets the token act for every user in the account", "On 429 wait the seconds in `Retry-After` or `retryAfter`. Retrying sooner resets the timer on accounts created after 20 May 2025", "Don't poll. An identical GET repeated past the plan's threshold returns 429. Subscribe to webhooks, or send `If-None-Match` with the ETag", "Create agreements in `DRAFT` state, check them, then move to `IN_PROCESS`. No idempotency key exists, so check before re-sending a failed `POST /agreements`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 52.6 } ], "editorialScores": { "ergonomics": 55, "maintenance": 10, "payments": 25, "reliability": 66, "schema": 54, "security": 66, "transparency": 59 }, "provenanceScore": 81 }, "connect": { "http": "GET /api/rest/v6/base_uris HTTP/1.1\nHost: api.na1.adobesign.com\nAuthorization: Bearer {accessToken}" }, "letme": { "capability": "https://letme.dev/esign.send", "tool": "https://letme.dev/adobe-acrobat-sign" }, "sameCompany": [ "adobe-firefly", "adobe-pdf-extract", "adobe-photoshop-api", "adobe-commerce" ], "notable": [ "The developer guide documents four throttling mechanisms and returns 429 with `Retry-After`. Accounts created after 20 May 2025 have the wait reset if they retry early (https://developer.adobe.com/acrobat-sign/docs/overview/developer_guide/apiusage)", "Since the October 2025 release every GET endpoint has a polling threshold on identical calls from the same user (https://developer.adobe.com/acrobat-sign/docs/overview/releasenotes/acrobatsignreleasenotes)", "Adobe's SDK page says the SDKs are obsolete and haven't been in step with the REST v6 APIs for a while (https://developer.adobe.com/acrobat-sign/docs/overview/sdks/)", "The free Developer Edition includes API access, and its test documents carry a test label (https://developer.adobe.com/acrobat-sign/docs/overview/developer_guide/)", "The Acrobat Sign product terms bar data mining and require a partner agreement before a customer embeds sending for its own customers (https://www.adobe.com/cc-shared/assets/pdf/legal/terms/enterprise/pdfs/pslt-adobeacrobatsign-ww-2023v2.pdf)", "The product terms count a transaction each time a document or set of related documents up to 100 pages or 10 MB is sent to an end user (same PDF)", "The robots.txt on secure.na1.adobesign.com, which hosts the REST v6 reference, disallows every path but `/public/login/` to crawlers other than Google and Bing (https://secure.na1.adobesign.com/robots.txt)", "The best practices page writes the base URI call as `/api/rest/v6/base_uris`, while the migration guide and the 2018 Swagger files write `/baseUris` (https://developer.adobe.com/acrobat-sign/docs/overview/developer_guide/best-practices)" ], "area": "business", "details": [ { "label": "API", "value": "REST v6 under `/api/rest/v6` on the account's shard, for example https://api.na1.adobesign.com. Resources include agreements, transient documents, library documents, widgets (web forms), MegaSign (bulk send), users, groups, workflows and webhooks. v5 and SOAP are deprecated but still answer" }, { "label": "Credentials", "value": "OAuth 2.0 authorisation code grant. Access tokens last one hour, refresh tokens expire after 60 days without use, and `POST /oauth/v2/revoke` revokes either. Scopes such as `agreement_read`, `agreement_write`, `agreement_send`, `library_read`, `widget_write`, `user_login` and `webhook_write` take a `:self`, `:group` or `:account` modifier" }, { "label": "Applications", "value": "Created in the Acrobat Sign web UI as CUSTOMER (own account) or PARTNER (other accounts). Partner applications need Adobe's certification for full access to other accounts" }, { "label": "Rate limits", "value": "Per user by minute, hour and day, set by service plan and not published. `/search` calls are limited to 1,000 a minute, 2,500 an hour and 7,200 a day. Identical GET calls are limited to three a minute on Global, Enterprise and Developer tiers and three in three minutes on others" }, { "label": "Throttling", "value": "429 with code `THROTTLING_TOO_MANY_REQUESTS` or `THROTTLING_HIGH_SYSTEM_LOAD`, a `Retry-After` header and `retryAfter` in the body. Document processing is also limited by participants, file size and pages" }, { "label": "Pagination", "value": "`pageSize` and `cursor` on list calls, with `page.nextCursor` in the response. `GET /agreements` allows at most 500 a page" }, { "label": "Concurrency", "value": "ETag on GET, 304 with `If-None-Match`, and `If-Match` required on PUT and DELETE, with 412 `RESOURCE_MODIFIED` on a stale write" }, { "label": "Webhooks", "value": "Created with `POST /webhooks` for an account, group, user or one resource. The endpoint must echo `X-AdobeSign-ClientId`. 5 seconds to respond, retries doubling from 30 seconds for up to 72 hours, then the webhook is disabled. Optional OAuth 2.0 and two-way SSL to the endpoint" }, { "label": "Signing", "value": "`GET /agreements/{agreementId}/signingUrls` returns signing URLs for embedded or in-person signing, and `POST /agreements/{agreementId}/views` returns embeddable views" }, { "label": "Audit", "value": "`GET /agreements/{agreementId}/auditTrail` returns the audit report for an agreement, and `/events` its history" }, { "label": "Uploads", "value": "`POST /transientDocuments` takes one file per call and keeps it seven days. Default file limit 10 MB" }, { "label": "SDKs", "value": "C#, Java and JavaScript SDKs and REST samples in adobe/acrobat-sign, MIT, all marked deprecated. Adobe points developers to the REST v6 reference and its Postman workspace" }, { "label": "Pricing", "value": "Developer Edition free. Acrobat team plans with e-signatures $16.99 to $29.99 a licence a month. Acrobat Sign Solutions, the product sold for API and enterprise use, by quote" }, { "label": "SLA", "value": "Unified SLA effective 3 August 2026 covers Acrobat Sign Solutions for Enterprise at 99.9 per cent monthly uptime, with credits of 5 to 25 per cent of monthly fees" }, { "label": "Sub-processors", "value": "List updated 28 September 2026. For Document Cloud and Acrobat Sign it names Microsoft, Akamai, Fastly, LexisNexis Risk Solutions, Mitek, Elastic, Brave Software, OpenAI, Google and Telesign, with locations" } ], "unitPrices": [ { "item": "Developer Edition", "unit": "month", "usd": 0, "note": "free account with API access, test documents labelled, per the developer guide on 2026-10-08" }, { "item": "Acrobat Standard for teams", "unit": "seat-month", "usd": 16.99, "note": "per licence, annual billed monthly, per the pricing page on 2026-10-08. API access not stated" }, { "item": "Acrobat Pro for teams", "unit": "seat-month", "usd": 23.99, "note": "per licence, annual billed monthly, per the pricing page on 2026-10-08. API access not stated" } ], "provenance": { "legalEntity": "Adobe Inc.", "domain": "adobe.com", "domainRegistered": "1986-11-17", "endpointOnVendorDomain": false, "terms": "https://www.adobe.com/legal/terms.html", "privacy": "https://www.adobe.com/privacy/policy.html", "statusPage": "https://status.adobe.com", "changelog": "https://developer.adobe.com/acrobat-sign/docs/overview/releasenotes/acrobatsignreleasenotes", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The Adobe General Terms of Use (effective 3 October 2025) cover Adobe's services and software and name Adobe Inc. for North America, Adobe Systems Software Ireland Limited elsewhere and Adobe KK for Japan.", "Enterprise customers contract under the Adobe General Terms for enterprise with the Acrobat Sign product terms (PSLT 2023v2, a PDF) and a sales order. The General Terms of Use are the document a developer or online buyer accepts.", "The Adobe Privacy Policy (last updated 24 October 2025) covers Document Cloud apps and services.", "The API answers on shards of adobesign.com, such as api.na1.adobesign.com, a second Adobe domain registered on 22 December 2011 per RDAP. Older examples use echosign.com.", "www.adobe.com/.well-known/security.txt is PGP-signed, expires on 30 July 2027 and names psirt@adobe.com and a bug bounty on Intigriti.", "RDAP for adobe.com gives a registration date of 1986-11-17." ], "score": 81, "checks": [ { "check": "Legal entity named", "value": "Adobe Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "adobe.com, registered 1986-11-17 (39 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "api.na1.adobesign.com is not on adobe.com", "points": 0, "max": 15, "state": "no" }, { "check": "Terms of service", "value": "published, but our reader couldn't read it", "points": 7, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 7 of the 8 things a reader expects", "points": 9.3, "max": 10, "state": "part" }, { "check": "Status page", "value": "status.adobe.com", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "valid", "points": 10, "max": 10, "state": "ok" } ], "policies": [ { "kind": "terms", "url": "https://www.adobe.com/legal/terms.html", "state": "unreadable", "reason": "the page has 3 words of text without a browser, so the document is drawn by script or sits elsewhere", "readAt": "2026-10-08", "points": 7, "max": 10 }, { "kind": "privacy", "url": "https://www.adobe.com/privacy/policy.html", "state": "read", "readAt": "2026-10-08", "statedDate": "2025-10-24", "words": 6546, "points": 9.3, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated: October 24, 2025", "says": "Last updated 2025-10-24" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "To help keep our databases current and to provide you the most relevant content and experiences, we may infer or generate information based on the information we collect or combine information provided by you with information from third party sources, in accordance with applicable law." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "When you register for an account and create an Adobe ID, we process and keep most personal information we process on your behalf for as long as you are an active user of our Services and Software." }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "We also disclose information with third parties we engage to process personal information on our behalf or when such sharing is required by law, or in certain other situations." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": false }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "Learn more about your rights and how you can exercise them." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "To exercise any of these rights (including deactivating your Adobe ID account), you can get in touch with us – or our data protection officer – using the details set out below.", "says": "Names a data protection officer" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "…these third parties restricting their access, use and disclosure of personal data in compliance with our Data Privacy Framework obligations, including the onward transfer provisions, and Adobe remains liable if they fail to meet those obligations and Adobe is responsible for the event giving rise to the damage).", "says": "Relies on the Data Privacy Framework" } ], "toKnow": [ { "key": "privacy.sells", "label": "Says it sells personal data or shares it for advertising", "found": true, "quote": "In some cases, in order to show you more relevant ads, we disclose with social media platforms and other advertising partners, information about actions you take on our websites and apps, such as which pages you visit and which ads you saw." } ], "notes": [ { "date": "2026-10-08", "text": "Insights from analytics on cloud content may inform Adobe marketing to the user, subject to opt-out rights.", "quote": "Insights from Content Analytics may be used to inform our marketing to you, subject to your opt-out rights regarding our marketing." }, { "date": "2026-10-08", "text": "Cloud content may be scanned automatically for illegal or abusive material, with human review when content is flagged or reported.", "quote": "Human review may occur when your Cloud Content is flagged or reported as illegal or abusive." }, { "date": "2026-10-08", "text": "Adobe may give personal information to a business when the user signs in with that business email domain or was invited by that business.", "quote": "If you are using an email address that is associated with a business domain (e.g., yourname@businessname.com) to access Adobe's Services and Software, or if you were invited to use the Services and Software by a business, we may provide your personal information to that business." } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/adobe-acrobat-sign.json", "live": { "slug": "adobe-acrobat-sign", "probe": { "target": "https://api.na1.adobesign.com/api/rest/v6", "method": "get", "lastAt": "2026-10-09T09:26:41.25131539Z", "lastOk": true, "lastStatus": 404, "lastMs": 280, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 266, "p95ms24h": 281, "samples24h": 20, "samples30d": 20, "days": [ { "date": "2026-10-09", "probes": 20, "ok": 20 } ] }, "vendorStatus": { "page": "https://status.adobe.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-09T07:57:34.442944052Z" }, "updatedAt": "2026-10-09T09:26:41.25131539Z" } }, "verify": { "accepts": "a page on adobe.com or one of its subdomains, or the README of github.com/adobe/acrobat-sign", "badgeUrl": "https://www.anchorterminal.com/badges/adobe-acrobat-sign.svg", "body": { "slug": "adobe-acrobat-sign", "url": "the page with the badge or the link" }, "docs": "https://www.anchorterminal.com/builders/#verify", "effect": "none, it never changes a grade, rank or review", "endpoint": "https://www.anchorterminal.com/api/v1/verify", "listingUrl": "https://www.anchorterminal.com/tools/adobe-acrobat-sign", "mcpTool": "verify_listing", "recheck": "weekly; two failed checks in a row and it lapses, a later pass restores it", "snippets": { "html": "\u003ca href=\"https://www.anchorterminal.com/tools/adobe-acrobat-sign\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/adobe-acrobat-sign.svg\" alt=\"Adobe Acrobat Sign on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e", "markdown": "[![Adobe Acrobat Sign on Anchor Terminal](https://www.anchorterminal.com/badges/adobe-acrobat-sign.svg)](https://www.anchorterminal.com/tools/adobe-acrobat-sign)", "link": "\u003ca href=\"https://www.anchorterminal.com/tools/adobe-acrobat-sign\"\u003eAdobe Acrobat Sign on Anchor Terminal\u003c/a\u003e" } } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/tools/adobe-acrobat-sign", "json": "https://www.anchorterminal.com/tools/adobe-acrobat-sign.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/tools/adobe-acrobat-sign.md", "slim": "https://www.anchorterminal.com/tools/adobe-acrobat-sign.min.md" }, "markdown": "## Overview\n\n**Grade D · 52.6/100 · rank #652 of 842 · #6 in Contracts, proposals \u0026 e-signatures · not agent-ready · confidence medium**\n\n\nMore from Adobe Inc., listed separately because each is its own product: [Adobe Firefly API](https://www.anchorterminal.com/tools/adobe-firefly.md) (Image generation), [Adobe PDF Services / PDF Extract API](https://www.anchorterminal.com/tools/adobe-pdf-extract.md) (Document parsing \u0026 extraction), [Adobe Photoshop API](https://www.anchorterminal.com/tools/adobe-photoshop-api.md) (Programmatic asset production), [Adobe Commerce (Magento)](https://www.anchorterminal.com/tools/adobe-commerce.md) (Commerce \u0026 checkout).\n\n## Assessment\n\nThe REST API has OAuth 2.0 scopes that can be limited to one user, a group or the account, `Retry-After` on throttled calls and a free Developer Edition. Adobe calls its own SDKs obsolete, the newest dated API change is November 2025, and API plans are sold through sales with no public price.\n\n## Facts\n\n| Field | Value |\n| --- | --- |\n| Vendor | Adobe Inc. (https://www.adobe.com/acrobat/business/sign.html) |\n| Kind | HTTP API |\n| Category | Contracts, proposals \u0026 e-signatures (https://www.anchorterminal.com/categories/e-signatures) |\n| Transport | HTTP |\n| Endpoint | `https://api.na1.adobesign.com/api/rest/v6` |\n| Auth | OAuth · Access is self-serve for a developer's own account. A person creates an Adobe ID, signs up for the free Developer Edition and creates an API application in the Acrobat Sign web UI, then completes an OAuth 2.0 authorisation code flow in a browser. Access tokens last one hour and refresh tokens expire after 60 days without use. Scopes are set per application and per token, each with a `:self`, `:group` or `:account` modifier. Only a group or account admin can grant the wider modifiers. PARTNER applications that reach other customers' accounts need Adobe's certification. |\n| Pricing | Paid ($16.99 / seat-mo) · No public price for API use. Acrobat Sign Solutions, the product Adobe sells for API and enterprise e-signing, is by quote. Acrobat team plans with e-signatures are public at $16.99 to $29.99 a licence a month, and the pricing page doesn't say whether they include API access. An agent's owner can start without a contract on the free Developer Edition, where test documents carry a test label. Whether sign-up asks for a card isn't stated (checked 2026-10-08). |\n| x402 | No · No x402, MPP or L402 in the developer guide, the release notes or the pricing page (checked 2026-10-08). |\n| Licence | Proprietary service under the Adobe General Terms of Use and, for enterprise customers, the Acrobat Sign product terms. The documentation and SDK repository on GitHub is MIT |\n| Source | https://github.com/adobe/acrobat-sign |\n| Docs | https://developer.adobe.com/acrobat-sign/ |\n| llms.txt | not found |\n| Last release | 2025-11-01 |\n| GitHub stars | 26 (as of 2026-10-08) |\n| API | REST v6 under `/api/rest/v6` on the account's shard, for example https://api.na1.adobesign.com. Resources include agreements, transient documents, library documents, widgets (web forms), MegaSign (bulk send), users, groups, workflows and webhooks. v5 and SOAP are deprecated but still answer |\n| Credentials | OAuth 2.0 authorisation code grant. Access tokens last one hour, refresh tokens expire after 60 days without use, and `POST /oauth/v2/revoke` revokes either. Scopes such as `agreement_read`, `agreement_write`, `agreement_send`, `library_read`, `widget_write`, `user_login` and `webhook_write` take a `:self`, `:group` or `:account` modifier |\n| Applications | Created in the Acrobat Sign web UI as CUSTOMER (own account) or PARTNER (other accounts). Partner applications need Adobe's certification for full access to other accounts |\n| Rate limits | Per user by minute, hour and day, set by service plan and not published. `/search` calls are limited to 1,000 a minute, 2,500 an hour and 7,200 a day. Identical GET calls are limited to three a minute on Global, Enterprise and Developer tiers and three in three minutes on others |\n| Throttling | 429 with code `THROTTLING_TOO_MANY_REQUESTS` or `THROTTLING_HIGH_SYSTEM_LOAD`, a `Retry-After` header and `retryAfter` in the body. Document processing is also limited by participants, file size and pages |\n| Pagination | `pageSize` and `cursor` on list calls, with `page.nextCursor` in the response. `GET /agreements` allows at most 500 a page |\n| Concurrency | ETag on GET, 304 with `If-None-Match`, and `If-Match` required on PUT and DELETE, with 412 `RESOURCE_MODIFIED` on a stale write |\n| Webhooks | Created with `POST /webhooks` for an account, group, user or one resource. The endpoint must echo `X-AdobeSign-ClientId`. 5 seconds to respond, retries doubling from 30 seconds for up to 72 hours, then the webhook is disabled. Optional OAuth 2.0 and two-way SSL to the endpoint |\n| Signing | `GET /agreements/{agreementId}/signingUrls` returns signing URLs for embedded or in-person signing, and `POST /agreements/{agreementId}/views` returns embeddable views |\n| Audit | `GET /agreements/{agreementId}/auditTrail` returns the audit report for an agreement, and `/events` its history |\n| Uploads | `POST /transientDocuments` takes one file per call and keeps it seven days. Default file limit 10 MB |\n| SDKs | C#, Java and JavaScript SDKs and REST samples in adobe/acrobat-sign, MIT, all marked deprecated. Adobe points developers to the REST v6 reference and its Postman workspace |\n| Pricing | Developer Edition free. Acrobat team plans with e-signatures $16.99 to $29.99 a licence a month. Acrobat Sign Solutions, the product sold for API and enterprise use, by quote |\n| SLA | Unified SLA effective 3 August 2026 covers Acrobat Sign Solutions for Enterprise at 99.9 per cent monthly uptime, with credits of 5 to 25 per cent of monthly fees |\n| Sub-processors | List updated 28 September 2026. For Document Cloud and Acrobat Sign it names Microsoft, Akamai, Fastly, LexisNexis Risk Solutions, Mitek, Elastic, Brave Software, OpenAI, Google and Telesign, with locations |\n| Capabilities | esign.send, esign.templates, esign.embed, esign.status |\n| Tags | hosted, enterprise, oauth, webhooks, closed-source, sales-led, free-tier, status-page, sla, bug-bounty |\n| JSON | https://www.anchorterminal.com/api/v1/tools/adobe-acrobat-sign.json |\n\n## Score breakdown (methodology v0.4, October 2026 research run)\n\nAssessed 2026-10-08 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. \"This run\" is each category's share of the 100 points.\n\n| Category | Weight | This run | Score (0–100) | Points |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% | 20 | 66 | 13.2 |\n| Performance | 10% | pending | pending | n/a |\n| Schema \u0026 documentation | 13% | 16.2 | 54 | 8.8 |\n| Agent ergonomics | 13% | 16.2 | 55 | 8.9 |\n| Security \u0026 auth | 14% | 17.5 | 66 | 11.6 |\n| Payments \u0026 pricing | 10% | 12.5 | 25 | 3.1 |\n| Task success | 10% | pending | pending | n/a |\n| Maintenance \u0026 community | 7% | 8.8 | 10 | 0.9 |\n| Transparency \u0026 trust (editorial 59, provenance 81) | 7% | 8.8 | 70 | 6.1 |\n| Negative events | up to −15 | up to −15 | none recorded | 0 |\n| **Total** | | | | **52.6 → D** |\n\n### Why each score\n\n- Reliability 66: Graded as a hosted API. status.adobe.com is Adobe's status page and the Unified SLA names it for outage notices (20). The page is drawn by script and our reader saw no incident history, so the last 90 days are scored as unreadable (5). Numbers are published for `/search` (1,000 a minute, 2,500 an hour, 7,200 a day) and for identical GET calls (three a minute on Global, Enterprise and Developer tiers). Per-endpoint limits depend on the plan and aren't published (9 of 15). 429 responses carry `Retry-After` and a `retryAfter` field, the guide asks for exponential backoff, and `If-Match` ETags stop stale updates. No idempotency key was found for `POST /agreements` (12 of 15). The Unified SLA of 3 August 2026 commits to 99.9 per cent for Acrobat Sign Solutions for Enterprise, with credits of 5 to 25 per cent (10). REST v6 is generally available (10).\n- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.\n- Schema \u0026 documentation 54: Graded on the REST v6 API. The live reference is a Swagger UI on secure.na1.adobesign.com, whose robots.txt disallows crawlers, so we didn't read it. The only downloadable contract found is a set of Swagger 1.2 files from August 2018 with 92 operations, and Adobe calls the SDKs built from it obsolete (12 of 25). developer.adobe.com/llms.txt returns 404 (0). The developer guide and a best practices page of 17 December 2025 state required scopes, valid state transitions and good and bad call patterns for each main endpoint (12 of 20). The 2018 files mark 231 of 489 parameters required and hold 99 enums (9 of 15). The guide has request and response examples and named error codes, with per-endpoint error lists in the reference we didn't read (10 of 15). The API is versioned in the path, and the release notes are dated by month, most recently November 2025 (11 of 15).\n- Agent ergonomics 55: List calls take `pageSize` and return ETags for 304 responses. No field selection was found (13 of 25). Cursor pagination with `page.nextCursor`, a `/search` endpoint and a 500-agreement page cap (15 of 20). Errors are JSON with a stable code and message, such as `INVALID_API_ACCESS_POINT`, `THROTTLING_TOO_MANY_REQUESTS` and `RESOURCE_MODIFIED` (15 of 20). No idempotency key. `If-Match` protects updates and a `DRAFT` state lets a caller build an agreement before sending (8 of 20). A caller must first discover the account's shard, sending a file takes an upload call and then an agreement call, and Adobe marks every SDK deprecated (4 of 15).\n- Security \u0026 auth 66: OAuth 2.0 authorisation code grant with one-hour access tokens, refresh tokens that lapse after 60 days unused, a revoke endpoint and per-resource scopes with `:self`, `:group` and `:account` modifiers. PKCE wasn't found in the guide, and no secret in a URL query string was documented (26 of 30). Read scopes are separate from write and send scopes and only admins can grant the wider modifiers. Nothing requires confirmation before a send (13 of 20). The API returns form data and documents written by signers, and no prompt-injection guidance was found (3 of 15). Each agreement has an audit trail and an events endpoint. A log of API calls for the operator wasn't found (10 of 15). security.txt is PGP-signed and valid to 30 July 2027, and names PSIRT and a bug bounty on Intigriti. The certification list for Acrobat Sign sits behind a script-drawn filter and an NDA trust centre, so SOC 2 and ISO 27001 are unconfirmed (14 of 20).\n- Payments \u0026 pricing 25: Read with the hosted rubric. No x402, MPP or L402 found (0). Acrobat team plan prices are public, but the pricing page doesn't say they include API access, and Acrobat Sign Solutions is by quote with no per-transaction price. We scored between plan-only and contact sales (5). The Developer Edition is free with API access. The sign-up page says no commitments and doesn't mention a card, and we didn't run the form (20). A person must create an Adobe ID, register an application and approve OAuth in a browser (0).\n- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored.\n- Maintenance \u0026 community 10: The newest dated entry in the API release notes is November 2025, more than 180 days before this check, and the developer guide was last updated on 17 December 2025 (0). No dated API entries fall in the last 90 days (0). Closed service with release notes, a developer forum link and support. The GitHub repository has nine open issues and its last commit was 14 May 2026. We didn't test a support channel (5 of 15). Adobe's SDK page says its SDKs are obsolete, and a Postman workspace is the suggested replacement (3 of 15). The SDK code hasn't changed since August 2022 and the repository has no CI workflow (2 of 10). Product release notes on helpx.adobe.com answered 403 and went unread, so newer product changes may exist.\n- Transparency \u0026 trust 70: Closed service under the Adobe General Terms of Use of 3 October 2025 and the Acrobat Sign product terms of May 2023. The documentation repository is MIT (15). The privacy policy of 24 October 2025 keeps most personal information while the user is active and contract records for ten years. The product terms store customer content for the licence term, and the General Terms say content isn't used to train generative AI models, with content analytics on by default and an opt-out. The data processing agreement wasn't read (18 of 30). v5 and SOAP are marked deprecated without an end date. Classic webhooks were retired on a dated schedule in 2023, and the product terms promise only reasonable effort to give notice of changes (8 of 20). The sub-processor list of 28 September 2026 names each company with its locations, with OpenAI and Google among them (18 of 20).\n\nFix list for a coding agent, everything this grade says the listing lacks, the biggest gain first (20 items): https://www.anchorterminal.com/fixes/adobe-acrobat-sign.md (JSON https://www.anchorterminal.com/fixes/adobe-acrobat-sign.json)\n\n### What we couldn't check\n\n- unchecked: the REST v6 reference on secure.na1.adobesign.com. Its robots.txt disallows crawlers, so the current operation count, schemas and error lists were not read. We loaded the page once before reading robots.txt, saw only a Swagger UI shell, and used nothing from it\n- unchecked: helpx.adobe.com answered 403 to every request, so the product release notes, transaction limits, system requirements and webhook IP ranges went unread\n- unchecked: the incident history on status.adobe.com, which is drawn by script\n- unchecked: certifications that apply to Acrobat Sign. The compliance list filters by script and the trust centre resources need an Adobe ID with a signed NDA\n- unchecked: the data processing agreement and the enterprise General Terms\n- Whether the team plans sold online include API access, and whether Developer Edition sign-up asks for a card, is not stated on the pages read\n- The lead said SDKs. Adobe marks every SDK deprecated and obsolete\n- The best practices page writes the base URI call as `/api/rest/v6/base_uris` and the migration guide and 2018 Swagger files as `/baseUris`. We made no API call to settle it\n- `provenance.terms` points at the Adobe General Terms of Use. Enterprise customers contract under separate General Terms and the Acrobat Sign product terms, which is a PDF\n- No MCP server for Acrobat Sign was found in the developer docs\n\n### Sources\n\n- product page and team plan prices: \u003chttps://www.adobe.com/acrobat/business/sign.html\u003e (seen 2026-10-08)\n- plans and pricing: \u003chttps://www.adobe.com/acrobat/business/pricing-plans.html\u003e (seen 2026-10-08)\n- developer account page: \u003chttps://www.adobe.com/acrobat/business/developer-form.html\u003e (seen 2026-10-08)\n- developer home: \u003chttps://developer.adobe.com/acrobat-sign/\u003e (seen 2026-10-08)\n- developer guide overview: \u003chttps://developer.adobe.com/acrobat-sign/docs/overview/developer_guide/\u003e (seen 2026-10-08)\n- API usage and throttling: \u003chttps://developer.adobe.com/acrobat-sign/docs/overview/developer_guide/apiusage\u003e (seen 2026-10-08)\n- API release notes: \u003chttps://developer.adobe.com/acrobat-sign/docs/overview/releasenotes/acrobatsignreleasenotes\u003e (seen 2026-10-08)\n- SDK page: \u003chttps://developer.adobe.com/acrobat-sign/docs/overview/sdks/\u003e (seen 2026-10-08)\n- webhooks and events: \u003chttps://developer.adobe.com/acrobat-sign/docs/overview/acrobat_sign_events/\u003e (seen 2026-10-08)\n- docs and SDK repository (cloned, the source of the best practices, OAuth, getting started and migration pages and the 2018 Swagger files): \u003chttps://github.com/adobe/acrobat-sign\u003e (seen 2026-10-08)\n- robots.txt of the REST reference host: \u003chttps://secure.na1.adobesign.com/robots.txt\u003e (seen 2026-10-08)\n- Adobe General Terms of Use: \u003chttps://www.adobe.com/legal/terms.html\u003e (seen 2026-10-08)\n- Acrobat Sign product terms, PSLT 2023v2: \u003chttps://www.adobe.com/cc-shared/assets/pdf/legal/terms/enterprise/pdfs/pslt-adobeacrobatsign-ww-2023v2.pdf\u003e (seen 2026-10-08)\n- service commitments index: \u003chttps://www.adobe.com/legal/service-commitments.html\u003e (seen 2026-10-08)\n- Unified SLA, effective 3 August 2026: \u003chttps://www.adobe.com/cc-shared/assets/pdf/legal/terms/enterprise/pdfs/sla-adobeon-demand-managedservices-20206aug3.pdf\u003e (seen 2026-10-08)\n- privacy policy: \u003chttps://www.adobe.com/privacy/policy.html\u003e (seen 2026-10-08)\n- sub-processor list: \u003chttps://www.adobe.com/privacy/sub-processors.html\u003e (seen 2026-10-08)\n- security.txt: \u003chttps://www.adobe.com/.well-known/security.txt\u003e (seen 2026-10-08)\n- status page (script-drawn, no history read): \u003chttps://status.adobe.com/\u003e (seen 2026-10-08)\n- RDAP for adobe.com and adobesign.com: \u003chttps://rdap.verisign.com/com/v1/domain/adobe.com\u003e (seen 2026-10-08)\n\n## Who's behind it (provenance 81/100, checked 2026-10-08)\n\n| Check | Finding | Points |\n| --- | --- | --- |\n| Legal entity named | Adobe Inc. | 20/20 |\n| Domain age | adobe.com, registered 1986-11-17 (39 years) | 15/15 |\n| Endpoint on the vendor's domain | api.na1.adobesign.com is not on adobe.com | 0/15 |\n| Terms of service | published, but our reader couldn't read it | 7/10 |\n| Privacy policy | read, states 7 of the 8 things a reader expects | 9.3/10 |\n| Status page | status.adobe.com | 10/10 |\n| Changelog | published | 10/10 |\n| security.txt | valid | 10/10 |\n\nThe Adobe General Terms of Use (effective 3 October 2025) cover Adobe's services and software and name Adobe Inc. for North America, Adobe Systems Software Ireland Limited elsewhere and Adobe KK for Japan.\n\nEnterprise customers contract under the Adobe General Terms for enterprise with the Acrobat Sign product terms (PSLT 2023v2, a PDF) and a sales order. The General Terms of Use are the document a developer or online buyer accepts.\n\nThe Adobe Privacy Policy (last updated 24 October 2025) covers Document Cloud apps and services.\n\nThe API answers on shards of adobesign.com, such as api.na1.adobesign.com, a second Adobe domain registered on 22 December 2011 per RDAP. Older examples use echosign.com.\n\nwww.adobe.com/.well-known/security.txt is PGP-signed, expires on 30 July 2027 and names psirt@adobe.com and a bug bounty on Intigriti.\n\nRDAP for adobe.com gives a registration date of 1986-11-17.\n\n### Terms and privacy, as read\n\nA reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.\n\n**Terms of service** (https://www.adobe.com/legal/terms.html), read 2026-10-08. Our reader couldn't read it (the page has 3 words of text without a browser, so the document is drawn by script or sits elsewhere).\n\n\n**Privacy policy** (https://www.adobe.com/privacy/policy.html), read 2026-10-08, dated 2025-10-24, states 7 of the 8 things a reader expects.\n\n- To know. Says it sells personal data or shares it for advertising. \"In some cases, in order to show you more relevant ads, we disclose with social media platforms and other advertising partners, information about actions you take on our websites and apps, such as which pages you visit and which ads you saw.\"\n- Gives the date it was last updated. Last updated 2025-10-24.\n- Not found in the text. Says whether personal data is sold or shared for advertising.\n- Gives a privacy contact. Names a data protection officer.\n- Says where data is transferred or stored. Relies on the Data Privacy Framework.\n- Also in the text (2026-10-08). Insights from analytics on cloud content may inform Adobe marketing to the user, subject to opt-out rights. \"Insights from Content Analytics may be used to inform our marketing to you, subject to your opt-out rights regarding our marketing.\"\n- Also in the text (2026-10-08). Cloud content may be scanned automatically for illegal or abusive material, with human review when content is flagged or reported. \"Human review may occur when your Cloud Content is flagged or reported as illegal or abusive.\"\n- Also in the text (2026-10-08). Adobe may give personal information to a business when the user signs in with that business email domain or was invited by that business. \"If you are using an email address that is associated with a business domain (e.g., yourname@businessname.com) to access Adobe's Services and Software, or if you were invited to use the Services and Software by a business, we may provide your personal information to that business.\"\n\n## Live (updated 2026-10-09 09:26 UTC)\n\n- Right now: up, HTTP 404, 280 ms, checked 2026-10-09 09:26 UTC (get on `https://api.na1.adobesign.com/api/rest/v6`)\n- Uptime 24h 100.0% (20 probes) · 30 days 100.0% (20 probes) · p50 266 ms · p95 281 ms\n- Vendor status page: unknown, no machine-readable status found\n- Always current: https://www.anchorterminal.com/api/v1/live/adobe-acrobat-sign.json\n\n## Probe metrics\n\nNot measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.\n\n## Prices\n\n| Item | Price | Unit | Note |\n| --- | --- | --- | --- |\n| Developer Edition | free | per month (plan) | free account with API access, test documents labelled, per the developer guide on 2026-10-08 |\n| Acrobat Standard for teams | $16.99 | per seat per month | per licence, annual billed monthly, per the pricing page on 2026-10-08. API access not stated |\n| Acrobat Pro for teams | $23.99 | per seat per month | per licence, annual billed monthly, per the pricing page on 2026-10-08. API access not stated |\n\nAcross all listings: https://www.anchorterminal.com/prices/index.md\n\n## Strengths\n\n- OAuth 2.0 scopes split read, write and send per resource, each limited to the authorising user, a group or the whole account\n- Throttled calls return 429 with a `Retry-After` header and a `retryAfter` body field, and the guide asks for exponential backoff\n- ETags give 304 on unchanged reads and `If-Match` on updates, so a stale write fails with 412 `RESOURCE_MODIFIED`\n- Webhooks retry with doubling intervals for up to 72 hours and can call an endpoint secured with OAuth 2.0 or two-way SSL\n- A free Developer Edition account includes API access, and a 99.9 per cent uptime SLA with credits covers the enterprise product\n\n## Weaknesses\n\n- Adobe's SDK page says the C#, Java and JavaScript SDKs are obsolete and out of step with REST v6\n- The newest dated entry in the API release notes is November 2025, eleven months before this check\n- API plans (Acrobat Sign Solutions) are sold through sales. No per-transaction price is published\n- Per-endpoint request limits depend on the service plan and aren't published. Only the `/search` and polling limits carry numbers\n- No llms.txt, no MCP server and no current OpenAPI file were found. The downloadable Swagger files date from 2018\n\n## Before you call it (notes for agents)\n\n1. Call the base URI endpoint first and cache `api_access_point`. Each account lives on one shard such as `api.na1.adobesign.com`, and other hosts answer `INVALID_API_ACCESS_POINT`\n2. Request only the scopes the task needs, with the `:self` modifier. `:account` lets the token act for every user in the account\n3. On 429 wait the seconds in `Retry-After` or `retryAfter`. Retrying sooner resets the timer on accounts created after 20 May 2025\n4. Don't poll. An identical GET repeated past the plan's threshold returns 429. Subscribe to webhooks, or send `If-None-Match` with the ETag\n5. Create agreements in `DRAFT` state, check them, then move to `IN_PROCESS`. No idempotency key exists, so check before re-sending a failed `POST /agreements`\n\n## Connect\n\nFirst request:\n\n```bash\nGET /api/rest/v6/base_uris HTTP/1.1\nHost: api.na1.adobesign.com\nAuthorization: Bearer {accessToken}\n```\n\nThrough letme (picks today, calling later): https://letme.dev/adobe-acrobat-sign. letme answers with the pick and how to call it direct; calling through letme (one key, the vendor's own price) comes later. How it works: https://www.anchorterminal.com/letme/index.md\n\n## Similar tools\n\nRanked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.\n\n| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |\n| --- | --- | --- | --- | --- | --- | --- |\n| Dropbox Sign | B | 68.9 | 191 | esign.send, esign.templates, esign.embed, esign.status | no | https://www.anchorterminal.com/tools/dropbox-sign.md |\n| airSlate SignNow | B | 68.5 | 201 | esign.send, esign.templates, esign.embed, esign.status | no | https://www.anchorterminal.com/tools/signnow.md |\n| PandaDoc | B | 63.1 | 368 | esign.send, esign.templates, esign.embed, esign.status | no | https://www.anchorterminal.com/tools/pandadoc.md |\n| Documenso | B | 62.8 | 377 | esign.send, esign.templates, esign.status, esign.embed | no | https://www.anchorterminal.com/tools/documenso.md |\n| Docusign | B | 62.5 | 388 | esign.send, esign.templates, esign.embed, esign.status | no | https://www.anchorterminal.com/tools/docusign.md |\n\n## Panel reviews (0)\n\nReviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .\n\nDesk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md\n\n## Notable\n\n- The developer guide documents four throttling mechanisms and returns 429 with `Retry-After`. Accounts created after 20 May 2025 have the wait reset if they retry early (source: \u003chttps://developer.adobe.com/acrobat-sign/docs/overview/developer_guide/apiusage\u003e)\n- Since the October 2025 release every GET endpoint has a polling threshold on identical calls from the same user (source: \u003chttps://developer.adobe.com/acrobat-sign/docs/overview/releasenotes/acrobatsignreleasenotes\u003e)\n- Adobe's SDK page says the SDKs are obsolete and haven't been in step with the REST v6 APIs for a while (source: \u003chttps://developer.adobe.com/acrobat-sign/docs/overview/sdks/\u003e)\n- The free Developer Edition includes API access, and its test documents carry a test label (source: \u003chttps://developer.adobe.com/acrobat-sign/docs/overview/developer_guide/\u003e)\n- The Acrobat Sign product terms bar data mining and require a partner agreement before a customer embeds sending for its own customers (source: \u003chttps://www.adobe.com/cc-shared/assets/pdf/legal/terms/enterprise/pdfs/pslt-adobeacrobatsign-ww-2023v2.pdf\u003e)\n- The product terms count a transaction each time a document or set of related documents up to 100 pages or 10 MB is sent to an end user (same PDF)\n- The robots.txt on secure.na1.adobesign.com, which hosts the REST v6 reference, disallows every path but `/public/login/` to crawlers other than Google and Bing (source: \u003chttps://secure.na1.adobesign.com/robots.txt\u003e)\n- The best practices page writes the base URI call as `/api/rest/v6/base_uris`, while the migration guide and the 2018 Swagger files write `/baseUris` (source: \u003chttps://developer.adobe.com/acrobat-sign/docs/overview/developer_guide/best-practices\u003e)\n\n## Compare\n\n- [Adobe Acrobat Sign vs Documenso](https://www.anchorterminal.com/compare/adobe-acrobat-sign-vs-documenso.md): D 52.6 vs B 62.8\n- [Adobe Acrobat Sign vs Docusign](https://www.anchorterminal.com/compare/adobe-acrobat-sign-vs-docusign.md): D 52.6 vs B 62.5\n- [Adobe Acrobat Sign vs Dropbox Sign](https://www.anchorterminal.com/compare/adobe-acrobat-sign-vs-dropbox-sign.md): D 52.6 vs B 68.9\n- [Adobe Acrobat Sign vs PandaDoc](https://www.anchorterminal.com/compare/adobe-acrobat-sign-vs-pandadoc.md): D 52.6 vs B 63.1\n- [Adobe Acrobat Sign vs airSlate SignNow](https://www.anchorterminal.com/compare/adobe-acrobat-sign-vs-signnow.md): D 52.6 vs B 68.5\n\n## Verify this listing\n\nFor the vendor. The badge or a plain link to this page verifies the listing, from a page on adobe.com or one of its subdomains, or the README of github.com/adobe/acrobat-sign. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{\"slug\": \"adobe-acrobat-sign\", \"url\": \"…\"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify\n\nHTML badge:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/adobe-acrobat-sign\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/adobe-acrobat-sign.svg\" alt=\"Adobe Acrobat Sign on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e\n```\n\nMarkdown badge, for a README:\n\n```markdown\n[![Adobe Acrobat Sign on Anchor Terminal](https://www.anchorterminal.com/badges/adobe-acrobat-sign.svg)](https://www.anchorterminal.com/tools/adobe-acrobat-sign)\n```\n\nPlain link:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/adobe-acrobat-sign\"\u003eAdobe Acrobat Sign on Anchor Terminal\u003c/a\u003e\n```\n\n## Share this listing\n\nFor the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Adobe Acrobat Sign is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.\n\n- Dark: https://www.anchorterminal.com/assets/share/adobe-acrobat-sign-dark.png\n- Light: https://www.anchorterminal.com/assets/share/adobe-acrobat-sign-light.png\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-09", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Terminal", "url": "https://www.anchorterminal.com/tools/" }, { "name": "Contracts, proposals \u0026 e-signatures", "url": "https://www.anchorterminal.com/categories/e-signatures" }, { "name": "Adobe Acrobat Sign", "url": "" } ], "description": "Adobe Acrobat Sign is an e-signature service. Its REST API v6 creates agreements from uploaded files or library templates, sends them for signature, returns signing URLs and audit trails, and reports status through webhooks.", "facts": [ "rank #652 of 842", "OAuth auth", "0 desk reviews" ], "h1": "Adobe Acrobat Sign", "image": "https://www.anchorterminal.com/assets/og/tools-adobe-acrobat-sign.png", "path": "/tools/adobe-acrobat-sign", "published": "2026-10-01", "section": "tools", "title": "Adobe Acrobat Sign review for AI agents, grade D (52.6/100)", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/tools/adobe-acrobat-sign" }, "tokens": { "markdown": 7700, "slim": 2030 }, "version": 1 }