How to set up security settings

Configure your account's security and privacy settings to protect sensitive data and ensure regulatory compliance.

May 21, 2026

Manage login and password security

Setting strict login requirements helps prevent unauthorized access to your account and sensitive documents.

1. Go to Settings and select Security.

2. Toggle Enable high password strength to require users to create stronger, more secure passwords.

When this setting is enabled, passwords must:

• Be at least 12 characters long

3. Toggle Enable two-factor authentication (2FA) to require users to verify their identity using an authenticator app when signing in.

4. Click Save at the bottom of the page to apply your changes.

Important: Enabling this will force all users to change their passwords within seven days and every 90 days thereafter. This action cannot be undone once triggered.

Learn more: How to enable two-factor authentication

Control data access and sharing

You can restrict what users see within the platform to maintain internal privacy and data hygiene.

• Restrict access to other users' data: When you enable this, users can only see their own data. Managers can still see data for their specific team members, while Admins retain full visibility across the entity.

• Enable manual document link sharing: If you want to ensure documents are only sent through official channels, you can disable this to prevent users from generating manual share links.

• Restricted access to supplemental documents: Turning this on prevents users from creating private documents in the attachment library, ensuring all shared content is visible to the organization.

Configure data protection and consent

To comply with global privacy laws, you can manage how recipients interact with your documents and how their data is tracked.

1. Navigate to Settings > Data protection & GDPR.

2. Toggle Document access consent to require recipients to agree to your terms before they can view the document.

3. Enable Collect consent before enable tracking to give recipients the choice to opt out of analytics. If they opt out, they can still read the document, but you won't see their "page views" or "time spent" data.

Note: If a recipient refuses consent, they will be blocked from viewing the document entirely. Read more about GetAccept privacy policy.

Adjust certificate privacy settings

You can mask sensitive information on the final signature certificate to protect the privacy of your signers.

• Email signed document: This setting only applies to internal GetAccept users (the sender). When disabled, the sender will not receive the signed PDF via email.

• Hide personal information: This masks details like Social Security Numbers (SSN) used during eID signatures.

• Mask IP or Email addresses: You can choose to hide these specific identifiers from the audit log on the final PDF.

• Remove audit log: If necessary, you can remove the entire audit log from the certificate, though this is generally not recommended for legal traceability.

Set up automatic document removal

Keep your account clean and comply with data retention policies by setting up automated deletion rules.

1. Locate the Automatic document removal section.

2. Set the timeframe (in months) for Remove inactive documents to delete drafts or Send-outs that have no recent activity.

3. Set the timeframe for Remove signed documents if your company policy requires deleting completed contracts after a certain period.

4. Enter a notification email address under Notification before removal.

Important: GetAccept will email this address before deletion occurs. Once documents are removed, they cannot be recovered.