47 results found

1. Age Verification

   Alongside the current identity document verification, PandaDoc should also offer an optional Age Verification / Legal Age Check.

   Why this is needed

   In many use cases, it is not sufficient to verify only the authenticity of an ID document. We also need to confirm that the person is of legal age (18+), or in some cases meets the country-specific age requirement (e.g. 18, 21, etc.).

   Expected functionality

   Verify the ID document as usual (existing feature)

   Extract date of birth from the document

   Automatically validate whether the person meets the legal age threshold

   Ideally, allow country-specific age rules depending on the user’s location or selected jurisdiction

   Return a clear result such as:

   ✅ Age verified (legal age reached)

   ❌ Age not verified (underage)

   ⚠️ Age verification failed / data unreadable

   Benefits

   Helps customers meet legal and compliance requirements

   Reduces manual checks and risk of human error

   Enables use cases in regulated industries (adult content, alcohol, gambling, financial services, etc.)

   We believe this would significantly enhance PandaDoc’s verification capabilities and make the ID verification product more valuable for compliance-driven workflows.

   Thanks for considering this request!

   Alongside the current identity document verification, PandaDoc should also offer an optional Age Verification / Legal Age Check.

   Why this is needed

   In many use cases, it is not sufficient to verify only the authenticity of an ID document. We also need to confirm that the person is of legal age (18+), or in some cases meets the country-specific age requirement (e.g. 18, 21, etc.).

   Expected functionality

   Verify the ID document as usual (existing feature)

   Extract date of birth from the document

   Automatically validate whether the person meets the legal age threshold

   Ideally, allow country-specific age rules depending on the… more

   1 vote

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security & Compliance  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. Ability for a user to track up to their 10 last logins

   The ability for a user to track up to their 10 last logins on their end

   1 vote

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security & Compliance  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. Improve email forward security to prevent impersonation and other risks

   When you forward a signature email to another party, this new party can sign as you without anyone the wiser. I perceive this as a potential security breach.

   Steps to reproduce:
   As sender, prepare a document to be signed by signer1.
   Disable the signature forwarding toggle.
   Send by email.
   As recipient1, forward the email to recipient2 (email forward, NOT the button in the body of the email)
   As recipient2, open the document and observe that you are signing as recipient1.

   On the top of my head, automated email forwarding are particularly problematic in this case, among other security concerns. Also consider someone forwarding the email to share the document for others to see, oblivious to the fact that this sharing method enables signature impersonation.

   I understand forwarding an email is assumed a voluntary act on the part of recipient1, and I also understand the use of Recipient verification could be enforced if this phenomenon is suspected.
   
   But if possible at all, such email forwarding should void the unique signature link automatically, especially when the option signature forwarding is toggled off. This is especially counterintuitive (hence can participate in a false sense of security / blind spot).

   This behavior really sheds a different light on the attached certificate to downloaded pdfs; "✓Email verified". Well...

   When you forward a signature email to another party, this new party can sign as you without anyone the wiser. I perceive this as a potential security breach.

   Steps to reproduce:
   As sender, prepare a document to be signed by signer1.
   Disable the signature forwarding toggle.
   Send by email.
   As recipient1, forward the email to recipient2 (email forward, NOT the button in the body of the email)
   As recipient2, open the document and observe that you are signing as recipient1.

   On the top of my head, automated email forwarding are particularly problematic in this case, among other security concerns. Also… more

   1 vote

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security & Compliance  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. HIPAA compliant sign in for website (alternative to Forms)

   I need a HIPAA compliant online form that I can make in PandaDoc and embed into my website so patients can sign in. I can embed the forms I created but the form has an extra step that collects name and email address to view the document. This makes things very redundent

   1 vote

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security & Compliance  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Security: Admin will receive a notification if a member logs in outside the office
   1 vote

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security & Compliance  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. ability to sign for a user and break in when a document/ signature is forwarded

   ability to sign for a user and break in when a document/ signature is forwarded to another recipient

   1 vote

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security & Compliance  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   Valeryia Baranava responded

7. Disable local password for certain email domains

   I would like to enforce Google login for my company's users. Please provide settings where I can specify my company's email domain and specify that local passwords not be permitted for users with this email domain.

   This is a simpler configuration option than setting up Google as a SAML IdP.

   1 vote

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security & Compliance  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   Valeryia Baranava responded