Because PD will only accept user roles (and their emails) at the time of document creation, the email addresses are immediately tied to the document. Even when a document is shared via link, there are no restrictions on email sharing before the author is ready to share. If any PD user inadvertently selects ' send via email' at any point during their review process, the document is emailed to everyone with an assigned role. To lock this down, PandaDoc needs to allow users options to add user roles for email purposes after the approvals are completed. This is a very large concern, as we've had multiple incidents where confidential documents are shared.
Because PD will only accept user roles (and their emails) at the time of document creation, the email addresses are immediately tied to the document. Even when a document is shared via link, there are no restrictions on email sharing before the author is ready to share. If any PD user inadvertently selects ' send via email' at any point during their review process, the document is emailed to everyone with an assigned role. To lock this down, PandaDoc needs to allow users options to add user roles for email purposes after the approvals are completed. This is a very large concern, as we've had multiple incidents where confidential documents are shared.