37 results found
-
Ability for SSO group-based provisioning to also apply to existing users on future logins
Currently, SSO group-based provisioning in PandaDoc only applies during the initial user creation at first login and does not update group assignments on subsequent logins for existing users. We would like to request the ability for SSO group-based provisioning to also apply to existing users on future logins, so that group membership and related access can be dynamically updated based on IdP group changes.
This enhancement would ensure that user access remains aligned with identity provider group assignments over time, reduce manual administrative updates, and improve overall access management accuracy and security.
6 votes -
Certificate of Signature must show the attachments of the document signed
The Certificate of Signature should also indicate whether the document signed by the recipient included any attachments at the time of signing. If attachments were present, the certificate must display the attachment's name and relevant details.
This ensures full transparency for the recipient, confirming that any attachments were part of the original document from the start — and were not added after the signing was completed. This protects the recipient from unknowingly signing a document that may have had files appended without their knowledge.2 votes -
2 votes
-
Flatten the Certificate Signature
Flatten the certificate signature so there is no option to copy the signature from the certificate
2 votes -
Age Verification
Alongside the current identity document verification, PandaDoc should also offer an optional Age Verification / Legal Age Check.
Why this is needed
In many use cases, it is not sufficient to verify only the authenticity of an ID document. We also need to confirm that the person is of legal age (18+), or in some cases meets the country-specific age requirement (e.g. 18, 21, etc.).
Expected functionality
Verify the ID document as usual (existing feature)
Extract date of birth from the document
Automatically validate whether the person meets the legal age threshold
Ideally, allow country-specific age rules depending on the…
1 vote -
ID check for Forms
Ability to enable ID Check (recipient verification) on forms and make it required
3 votes -
Configure the expiration period of user's sessions
Currently, the length of the PandaDoc session is 14 days. The customer requests the option to configure a custom session expiration period to increase security.
6 votes -
Data Export Notification
The user will receive a notification if there are data being exported in the account.
2 votes -
Restrict access to the documents by using Grant access button
The client's feedback:
We’ve reviewed the setting you mentioned regarding access requests, and we understand that disabling it can prevent users from requesting access. However, this does not address the core issue we reported.
To clarify again: when a user requests access to a document and we receive the email notification, simply clicking on the document link in the email (not the “Grant Access” button) automatically grants the requester guest access to our account. This is happening without any explicit approval or confirmation from our side.
This behavior represents a significant security flaw, as access should only be granted when…
2 votesHi,
Thank you for taking the time to leave your request. We have great news – the feature you requested is already available. For more information, please check the video below!
-
Setting google the only option when trying to log in
When trying to log in, I want Pandadoc to just provide Google as the option and discard the other options because this is what required by our IT
2 votes -
QES: verify signature certificate without Adobe Acrobat
Ability to see the certification without the need of Acrobat
3 votes -
SSO (Single Sign-On) session timeout
It would be best to have a concept used to define how long a user can remain authenticated in an SSO environment before they are required to authenticate. This are mainly used for productivity reports
2 votes -
System for Cross-domain Identity Management (SCIM) via Entra ID (formerly Azure)
System for Cross-domain Identity Management (SCIM) via Entra ID (formerly Azure)
3 votesHi,
Thank you for taking the time to leave your request. We have great news – the feature you requested is already available. For more information, please click the link below!
-
ISO 27001 Certification
ISO 27001 Certification
2 votes -
Setup 2FA for all users at once
Option to setup 2FA for all users at once
16 votes -
Block non-US IP addresses from signing a document.
Some of the documents that we need signed are being signed in other countries outside of the US.
For our business compliance, we cannot allow this. We can only have signatures done in the USA.
4 votes -
Improve email forward security to prevent impersonation and other risks
When you forward a signature email to another party, this new party can sign as you without anyone the wiser. I perceive this as a potential security breach.
Steps to reproduce:
As sender, prepare a document to be signed by signer1.
Disable the signature forwarding toggle.
Send by email.
As recipient1, forward the email to recipient2 (email forward, NOT the button in the body of the email)
As recipient2, open the document and observe that you are signing as recipient1.On the top of my head, automated email forwarding are particularly problematic in this case, among other security concerns. Also…
2 votes -
4 votes
Hi,
Thank you for taking the time to leave your request. We have great news – the feature you requested is already available. For more information, please click the link below!
-
Customize signature certificate design
Option to add approval info to the signature certificate, for example, "Read and approved"
54 votesThe status of this suggestion is currently unchanged. Please check back for updates.
-
14 votes
