Migrate from Dropbox Sign to DocuSeal

Moving from Dropbox Sign to self-hosted DocuSeal means exporting completed requests, rebuilding templates in the field builder, rewiring API callbacks to webhooks and deciding whether Pro is needed. This page maps the work and its risks.

On this page

How migrating from Dropbox Sign to DocuSeal works in practice

Most organizations that leave Dropbox Sign for DocuSeal are responding to a renewal, a per-user licensing change, a data residency requirement or a wish to stop depending on one vendor. The move itself is mostly export of completed requests, rebuilding of templates in DocuSeal's field builder and rewiring of API callbacks into DocuSeal webhooks. The main licensing question is whether you need DocuSeal Pro, and that question is answered by features, not by the number of documents you send.

The work is usually done by the platform or IT team, with a named security owner who signs off on where signer data and audit records will live. Some organizations bring in an implementation partner for the template rebuild and the integration work, but the decisions about hosting, database choice and retention stay with the client. Effort depends mainly on how many templates exist, how many integrations call the Dropbox Sign API, and how much historical evidence must be preserved. Ask for those counts before you plan the schedule, because they matter more than any generic estimate.

Plan for the licensing gap early. DocuSeal's free on-premises edition has no SSO, no bulk send and no embedded signing. If your current workflows depend on any of those, the Pro license becomes a required line in your migration budget, and so does the per-completion fee for embedded signing as described on DocuSeal's pricing page. Confirm those features against your actual usage and the current pricing page, and treat the free edition as a fit only when none of them are on your list.

Which Dropbox Sign capabilities map cleanly to DocuSeal

This table maps the main Dropbox Sign capabilities to their closest DocuSeal equivalents and marks each as clean, needs rework or gap. Items that need the DocuSeal Pro license are marked as such, so you can budget for that license if your workflows depend on them. Confirm any Dropbox Sign feature missing from this table against your own account before cutover.

CapabilityDropbox SignDocuSealStatus
Signature requestsSend documents to signers, track status and retrieve completed filesSend documents for filling and signing, track submissions and download completed filesClean
Templates and PDF field builderReusable templates with signer roles and fieldsWYSIWYG PDF form field builder; templates must be rebuilt field by fieldNeeds rework
Signature verification and audit trailNon-editable audit trail attached to every requestPDF signature verification; confirm how the completion record compares with your audit trailNeeds rework
API and callbacksSignature request API with event callbacksAPI and webhooks; existing callback handlers must be re-pointed and re-testedNeeds rework
Team and user managementTeam members, roles and shared templatesUsers and access in the self-hosted instance; confirm roles and sharing against your needsNeeds rework
Single sign-on with SAMLEnterprise SSO for team sign-inSSO with SAML, included only in On-Premises ProClean with Pro license
Bulk sendSend one template to many recipientsBulk send from CSV or XLSX, unlimited on On-Premises ProClean with Pro license
Embedded signingSigning sessions embedded in your own applicationEmbedded signing, included only in On-Premises Pro, billed per completionClean with Pro license
White-label brandingBranded signing experience for your organizationCompany logo and white-label, included only in On-Premises ProClean with Pro license

What data and integrations move, and what must be rebuilt

Completed agreements and audit trails can be exported and kept as records, but templates, users, teams and integrations are recreated in DocuSeal rather than copied across. In-flight requests and signer credentials do not carry over, so each one must be re-sent or closed before cutover.

Completed requests as merged PDFs

Pull each completed request through the Dropbox Sign API and download it as a merged PDF or ZIP, using only the export paths Dropbox Sign documents. Store the files in your own repository with a manifest that maps each file to its request ID, signer list and completion date. Check a sample of exports by opening them and comparing page counts and signer names against the original requests before you rely on the archive.

Audit trails kept as separate records

Dropbox Sign states that a non-editable audit trail is attached to every signature request. Export each trail as its own record alongside the signed PDF, and store both under the same request ID so an auditor can match them. Do not assume a DocuSeal download reproduces the Dropbox Sign trail format. Confirm with your compliance lead which evidence the archive must hold before you delete anything.

Templates rebuilt in the field builder

Dropbox Sign templates do not move as objects. Recreate each one in DocuSeal's WYSIWYG PDF form field builder, placing signature, initial, date and text fields on the source PDF and naming recipient roles to match the old templates. Conditional fields and formulas are a Pro feature, so flag any template that depends on them before you start. Test each rebuilt template with a sample signer.

Users and teams recreated

Accounts, team membership and sender permissions do not transfer. Build a list of every Dropbox Sign user and team from your identity records, then create matching users in DocuSeal and assign the roles that the old team structure required. Decide who can send requests and who only reviews completions. If you plan SSO with SAML, note that it is a Pro feature and budget for that licence before go-live.

API callbacks replaced by webhooks

Callback URLs configured for Dropbox Sign events must be rewritten as DocuSeal webhooks and tested against your receiving service. Map each event your system depends on to the matching DocuSeal webhook event, and confirm the payload fields your code reads. Keep the old callback active until you have seen a complete round trip on the new endpoint, so no completion is missed during cutover.

In-flight requests and signer credentials

Requests still waiting for signatures do not transfer, and signer credentials or access links cannot be moved between platforms. Before cutover, list every open request, then either finish it in Dropbox Sign or re-send it from DocuSeal to the same signers. Tell signers which link is valid to avoid confusion. Close any requests you will not re-send, and record that decision in the migration log.

Migration sequence from inventory to decommission

This sequence moves Dropbox Sign requests, templates and API callers to DocuSeal in an order that keeps every legally relevant record retrievable at each stage. It ends only when old requests are closed, archives are verified and the Dropbox Sign account can be closed without losing evidence.

  1. Inventory requests, templates and integrations

    Your team lists every signature request still in progress, every template in use, and every application, script or automation that calls the Dropbox Sign API or receives its callbacks. Record the owner of each template, the signing roles it uses and any Dropbox Sign team or user that sends requests. The output is a written inventory list that separates completed requests, open requests, templates and integrations. You know this step is done when each item has an owner and a target action, either rebuild, retire or keep in place.

  2. Run a pilot with one template

    Pick one low-risk template and rebuild it in DocuSeal's field builder, then send a test request to internal signers and check the completed PDF and the verification of the signature. If the template needs bulk send from CSV or XLSX, conditional fields or embedded signing, confirm which of these are on the DocuSeal Pro list and whether your use needs a Pro trial or license before you rely on them. The output is a pilot sign-off record listing the template version, the test results and the edition used. Legal or compliance reviewers should approve the sign-off before any production use.

  3. Decide edition and licensing before scale

    Using the pilot results, decide whether the free on-premises edition covers your workflows or whether On-Premises Pro is needed for SSO with SAML, bulk send, white-label or embedded signing. Ask DocuSeal to confirm current per-user and per-completion terms in writing, since the researched pricing applies to the October 2026 read. The output is a short licensing decision that names the edition, the users covered and any completion-based charges. Procurement should record this decision alongside the deployment plan.

  4. Run both platforms in parallel

    New signature requests go to DocuSeal from an agreed date, while requests already sent from Dropbox Sign finish there, so no signer is asked to switch mid-document. Track open requests in both systems in one shared register and reminder any signer who has not completed. Confirm that completed documents in DocuSeal are stored on your own servers with the audit information your reviewers expect. The step is done when the Dropbox Sign list of open requests reaches zero or every remaining item has a documented owner.

  5. Cut over API callers and webhooks

    Map each Dropbox Sign callback to the matching DocuSeal webhook event and update each caller to create submissions through the DocuSeal API. Test every integration in a non-production DocuSeal instance, including failed delivery and retry handling, before pointing production traffic at it. Keep a cutover runbook that lists each caller, the change made, the test evidence and the rollback step. The step closes when every caller has produced at least one successful test and the runbook has an owner's sign-off.

  6. Verify the archive before decommissioning

    Export all completed requests through the Dropbox Sign API as merged PDFs or ZIPs, keep the non-editable audit trails as records, and build an archive index with request ID, template, signer count, completion date and file hash. Sample documents and check that each one opens and matches its index entry. Compliance should confirm which records must be retained, and legal counsel should confirm any records outside the ESIGN Act scope that need different handling. The output is a signed archive index and verification log.

  7. Decommission Dropbox Sign

    Once the archive index is signed off and no open requests or live callbacks remain on Dropbox Sign, disable API keys, remove webhook endpoints, and cancel the subscription on your own schedule after confirming the terms with the vendor. Revoke user access, remove the integration secrets from your vaults, and confirm that the archive is accessible from your storage. The step is done when the decommission checklist is complete, the archive is readable without Dropbox Sign, and the retention owner has accepted responsibility for the records.

What drives migration cost and duration

This table lists the components that move a Dropbox Sign account to self-hosted DocuSeal, who is paid for each, and whether it is one-time or recurring. Read it as a checklist for scoping and for comparing written quotes. The main takeaway is that licensing is only one input, and the template count, callback count and archive volume usually decide the effort.

DriverWhy it changes cost or effortOne-time or recurringWhat to request in a quote
Template count and field complexityEach Dropbox Sign template must be rebuilt in DocuSeal's WYSIWYG PDF field builder. Conditional fields and formulas take more design and testing than plain fields.One-timeItemized template list with field types, roles and conditional logic, and a testing approach for each
Volume of completed requests to exportCompleted agreements are pulled through the API as merged PDFs or ZIPs. Large archives need more storage, more API calls and more verification that every file and audit trail arrived.One-time, plus storage that recursExport method, file count estimate, checksum verification and where the archive will be stored
API integrations and callbacksEach integration that sends requests or receives Dropbox Sign callbacks must be re-pointed to DocuSeal's API and webhooks and retested. Field mapping differences add work.One-timeList of integrations, the webhook events each one needs, and the test plan for each
Pro licensing for bulk send, SSO and embeddingThe free on-premises edition has no SSO, bulk send or embedded signing. On-Premises Pro costs $240 per user per year ($20 per user per month billed annually), per the DocuSeal pricing page. API and embedded signing on Pro adds $0.20 per completion.RecurringNamed seat count, expected monthly completions for API and embedded signing, and whether the quote covers the per-completion fee
SSO and identity integrationSAML SSO is a Pro feature. Connecting it to the organization's identity provider needs configuration, group mapping and access testing before cutover.One-time setup, then recurring licenseSAML configuration scope, identity provider used, and who owns ongoing user lifecycle
Hosting and database choiceDocuSeal runs on SQLite by default. PostgreSQL or MySQL, set through the DATABASE_URL variable, add database provisioning, backups and patching. Higher volume favors a managed or hardened database.One-time build, recurring infrastructure and operationsDatabase engine decision, backup and restore targets, hosting model and who operates the stack after handover
Legal review of archived recordsSome records fall outside the ESIGN Act, including wills, certain family law documents and court documents. Retention rules and which archived records need counsel review set the review effort.One-time review, plus retention obligations that recurRecord categories in scope, retention periods set by counsel, and whether the review is included or billed separately
Signature verification and evidenceDropbox Sign attaches a non-editable audit trail to each request. DocuSeal provides PDF signature verification, so the team must confirm how archived evidence is validated and stored.One-time validation, recurring evidence storageVerification steps for a sample of archived files and the format of retained evidence

What usually goes wrong and how to prevent it

Most failed signature migrations break at the edges: records that leave the old system incomplete, templates that look right but behave differently, and integrations that stop without an error. The cards below cover the failure points that recur in this move, each paired with a check to run before cutover.

Incomplete exports miss audit trails

Downloading completed PDFs through the Dropbox Sign API does not automatically preserve the non-editable audit trail that Dropbox Sign affixes to each signature request. Before cutover, list every team request, confirm each completed file and its audit record are stored together, and count the results against the Dropbox Sign console. Keep the audit trail as a separate record with the same request identifier so an auditor can trace each signature back to its certificate of completion.

Rebuilt templates render differently

A template recreated in DocuSeal's field builder can place fields, fonts or page breaks differently from the original, and a signer may then sign a document that does not match what was reviewed. For each template, generate a test submission from the old and new versions with identical data, compare the rendered PDFs page by page, and have the business owner approve the output. Retire the old template only after that sign-off is recorded.

Callbacks fail silently after cutover

Existing Dropbox Sign callbacks will stop reaching your systems once the traffic is pointed at DocuSeal, and no error appears in the old tool to flag it. Map every event your applications consume, create the matching DocuSeal webhook endpoints, and confirm each event type fires in a staging environment. Add monitoring that alerts when expected completion events stop arriving over a set period.

Pro purchase found mid-migration

Bulk send from CSV or XLSX, embedded signing and SSO with SAML are Pro features, while the free on-premises edition lacks them. Teams that discover this after moving a bulk campaign or an embedded flow face an unplanned license purchase and a delayed cutover. Inventory which Dropbox Sign features your team uses today, mark each one as free or Pro in DocuSeal, and get the On-Premises Pro price in writing before the project plan is fixed.

In-flight requests stranded at cutover

Signature requests that are sent but not yet completed will not move automatically, so a signer may receive a link to a system that no longer tracks the request. Freeze new sends on a fixed date, let open requests finish in Dropbox Sign or cancel and resend them in DocuSeal with a clear message to signers, and export the open list so nothing is lost. Record the count of open requests at freeze and at close.

Retention obligations for archived records

Exported agreements and audit trails may be subject to retention rules that run longer than the subscription, and some categories of records fall outside the ESIGN Act entirely, such as wills and certain family law or court documents. Ask your legal and records teams to define the retention period for each contract type before deleting anything from Dropbox Sign. Store the archive with access controls, and confirm that DocuSeal's document store is backed up under the same policy.

How the move differs by team size and starting point

A small team that sends most agreements by hand from the web interface usually has the simplest move. The work centers on exporting completed requests, rebuilding the handful of templates that get reused and setting up a single DocuSeal instance with an administrator who owns it. Because manual sending does not depend on the API, the free on-premises edition is often the starting point, but the team should confirm that the features it needs are in that edition, since the free edition does not include SSO, bulk send or embedded signing.

  • Scope: one instance, a small set of templates and a short list of signers.
  • Exports: pull completed agreements and keep the audit records as files before the Dropbox Sign account is closed.
  • Templates: rebuild only the templates still in use in the DocuSeal field builder rather than copying everything.
  • Access: decide who holds administrator rights and how staff log in without SSO.
  • Ownership: name one person responsible for backups, upgrades and the instance.

Before starting, confirm that the team does not depend on any bulk or embedded feature it has not noticed in its current workflow.

Questions buyers ask before moving from Dropbox Sign to DocuSeal

How much effort and cost does moving from Dropbox Sign to DocuSeal involve?

The main cost is staff time and infrastructure, not the software license. The DocuSeal on-premises Open Source edition is free to download under AGPLv3, so you pay for the server, database, backups, email delivery and the people who export data, rebuild templates and switch integrations. Recurring costs include hosting and maintenance, while export and template rebuilding are one-time. Effort rises with the number of templates, custom integrations and years of history you keep. Ask any provider for a quote that separates one-time migration work from ongoing support, and confirm current DocuSeal license prices on its pricing page before you compare totals.

How long does a Dropbox Sign to DocuSeal migration take?

The timeline depends on how much you need to move and how many systems call the API. The main drivers are the number of signature requests to export, the count of templates to rebuild in the field builder, the number of API callbacks to repoint to DocuSeal webhooks, and how long your team needs to test signing end to end. No duration is set by the product itself, so ask for a written schedule based on an inventory of your own account. A common approach is to run both systems in parallel for a period while new requests move to DocuSeal and in-flight ones finish on Dropbox Sign.

Can our internal team migrate from Dropbox Sign to DocuSeal without outside help?

A team with container and database experience and someone who owns the Dropbox Sign API integration can usually handle the core steps alone. Exporting completed requests, rebuilding simple templates and deploying the docuseal/docuseal Docker image are routine tasks. Help is more useful for regulated records, custom field logic, bulk send scripts, backup and restore testing, and hardening the server. DeployOpen plans, implements, integrates, hardens, backs up and documents self-hosted platforms in your own infrastructure under a fixed-scope written agreement, so you can split the work between your staff and an outside team.

What does the work need from our staff?

Plan for input from four groups: an infrastructure owner for hosting, backups and patching, a developer who maintains the Dropbox Sign API calls and webhook handlers, a business owner who approves template changes and signer wording, and a records or legal contact who decides how long exported agreements and audit trails must be retained. Each group needs a few hours of review at key points, and the developer effort grows with the number of integrations. Confirm who will sign off on the final export before Dropbox Sign access is removed.

Do we need DocuSeal Pro for our use case?

It depends on which features you use. According to the DocuSeal README, Pro adds company logo and white-label, conditional fields and formulas, bulk send from CSV or XLSX, and SSO with SAML. The DocuSeal pricing page lists On-Premises Pro at $240 per user per year ($20 per user per month billed annually), and says the free on-premises edition has no SSO, bulk send or embedded signing, while Pro adds unlimited bulk send, white-label and embedded signing at $0.20 per completion. If you only send individual requests from templates, the free edition may cover you. If you send batches or embed signing in your product, price Pro for those specific features before you commit.

Do audit trails carry over from Dropbox Sign to DocuSeal?

Dropbox Sign attaches a non-editable audit trail to every signature request, and that record stays with the Dropbox Sign account. Do not assume it will be imported into DocuSeal. The safe approach is to export each completed request and its audit trail while you still have access, store them in your own retention system, and keep them as records for the period your policy and any applicable law requires. DocuSeal includes PDF signature verification, which lets you check signed files it produces, but confirm with DocuSeal how its audit output is structured before you rely on it as evidence. Involve your legal or records team in this decision.

What happens to signature requests that are still in progress during the switch?

Requests that are open in Dropbox Sign will not move automatically to DocuSeal. Common approaches are to let existing requests finish in Dropbox Sign, re-send unsigned documents as new requests in DocuSeal after a clear cutoff date, or cancel and re-issue with the same signers. Each option has different signer experience and records implications. Choose a cutoff date, tell signers which system to expect, and confirm with your legal team that re-issued documents are acceptable for your transaction types. The ESIGN Act excludes some record types, such as wills and certain family law and court documents, so route those cases to counsel first.

What to confirm with DeployOpen before work starts

DeployOpen plans, implements and hands over a self-hosted DocuSeal inside your own infrastructure, whether that is your cloud account, a data center or an air-gapped network. Most engagements are fixed-scope, so the scope, deliverables and timelines are agreed in writing before any work starts. Before asking for a quote, confirm where the instance will run, which database it will use, and who on your side owns the signing domain, email sending and the certificates that DocuSeal's PDF signature verification depends on. Ask DeployOpen to state in the written scope which of these items it covers and which remain with your team.

Prepare a request and template inventory from your Dropbox Sign account before the scoping call. List active templates, the recipient roles and fields each one uses, and the number of requests sent per template over the last year. Pair that with an export of completed requests and their audit trails, as described in the export guide. This inventory is what DeployOpen needs to estimate template rebuilding and to decide which records move and which stay archived. Note any template that uses conditional logic or formulas, since those features sit in DocuSeal's Pro edition.

Prepare an integration list that names every system calling the Dropbox Sign API, the events each one reacts to, and the callback URLs it registers. Each entry should say whether the integration sends requests, embeds signing in an application, or only reads completed files. Then make the Pro decision explicitly. The free on-premises edition has no SSO, bulk send or embedded signing. If you need any of those, ask for a quote that includes On-Premises Pro, and confirm with DocuSeal whether a per-completion charge applies to your embedded volume. Without that decision, the written scope cannot be finished.

Official sources for the migration

Where is the official DocuSeal source code and license?

The official source is the DocuSeal GitHub repository, which is distributed under the AGPLv3 license with Section 7(b) additional terms. Read the license file in the repository before you deploy, because AGPL obligations apply if you modify the software and make it available to users over a network. Ask your legal team to confirm how the additional terms apply to your planned use, including any internal modifications such as custom templates, integrations or branding. The repository also documents the Docker image, the default SQLite database and the optional PostgreSQL or MySQL setup through DATABASE_URL, which are the first things your platform engineers will need to check.

Where do I find the DocuSeal release notes and version history?

The DocuSeal GitHub releases page lists each published version with its release notes. Check it before you pick the version to deploy and again before each upgrade, since release notes are where breaking changes, database migration steps and security fixes are normally announced. Pin the Docker image to a specific tag in your deployment instead of a floating tag, so that a restart does not pull a new version during the migration window. Confirm the upgrade path between your target version and any later release with your platform team, and test it against a copy of your database first.

Where can I check what DocuSeal Pro costs and what it includes?

The DocuSeal pricing page is the official reference for current plans. As read in October 2026, it lists On-Premises Open Source as free and On-Premises Pro at $240 per user per year, which is $20 per user per month billed annually. The same page lists embedded signing and API usage at $0.20 per completion on the Pro on-premises edition. Prices change, so confirm the figures with DocuSeal before you budget, and ask for the terms in writing. Pricing pages describe the vendor's offer, not your total cost, so add your own hosting, storage, backup and staff time to the comparison.

Which Pro features do I need for a Dropbox Sign migration?

Check your current Dropbox Sign usage against the features that DocuSeal reserves for its Pro edition. According to the DocuSeal GitHub repository, Pro features include company logo and white-label, conditional fields and formulas, bulk send from CSV or XLSX, and SSO with SAML. The free on-premises edition does not include SSO, bulk send or embedded signing. If your team sends batches from a spreadsheet, or your product embeds signing inside an application, plan for Pro from the start. Document the features your business processes depend on today, then map each one to a plan before you sign anything.

Where is the Dropbox Sign statement about audit trails and legal validity?

The Dropbox Sign pricing page states that its eSignatures are legally binding under the ESIGN Act of 2000 and that a non-editable audit trail is affixed to every signature request. Keep a copy of that page as part of your records, along with the dates you accessed it, because it describes what your current vendor has promised for past agreements. Note that this statement does not transfer to DocuSeal. Your legal and compliance team should decide how completed agreements and their audit evidence will be retained after the move, and confirm that the exported records remain usable for your obligations.

Should I trust a third-party guide over the official DocuSeal documentation?

Use third-party guides for ideas, but base decisions on the vendor's repository, release notes and pricing page. Third-party articles often describe older versions, outdated plan names or features that have moved between editions. When a guide and the official source disagree, follow the official source and ask the vendor to confirm the difference in writing. Keep a dated copy of the sources you relied on, since product pages change. This habit also helps when an auditor or internal reviewer asks how you selected the software and its edition.

What should I confirm with DocuSeal before a production rollout?

Confirm the license terms that apply to your use, the edition that includes each feature you need, the current pricing for your user count and expected completions, and the upgrade policy for self-hosted installs. Ask whether per-completion charges apply to embedded signing on the on-premises Pro edition and how they are counted. Verify these answers against the repository and pricing page on the day you commit, and record the names of the people who confirmed them. If a point is not documented publicly, request a written answer before you rely on it in a budget or contract.

How DeployOpen scopes, runs and supports the migration

DeployOpen is a Chainscore Labs company that plans, implements, customizes, integrates, hardens, backs up, upgrades, documents and supports self-hosted open-source platforms inside your own infrastructure. For a move from Dropbox Sign to DocuSeal, we agree the scope, deliverables and timeline in writing before work starts, so your team knows what moves, what stays and what it must check.

How we scope

  • Inventory of signature requests, templates, team members and API integrations that need to move
  • Decision on which DocuSeal edition fits each need, including whether Pro licenses are required
  • Written record of what the migration covers, what it excludes and who signs off each deliverable

How we build

  • DocuSeal deployed from the docuseal/docuseal Docker image on infrastructure you control, with SQLite or PostgreSQL or MySQL chosen during scoping
  • Templates rebuilt in the field builder, with recipient roles and signing fields checked against originals
  • Scripted export of completed agreements and audit records through the Dropbox Sign API, with API callbacks moved to DocuSeal webhooks

How we hand over

  • Runbook covering deployment, configuration, backups, upgrades and webhook setup in your environment
  • Test records showing sample completed documents, signature verification results and webhook delivery
  • Archive index mapping each exported agreement and audit trail to its original Dropbox Sign request

How we support

  • Engagements are fixed-scope, and the scope document defines what support is included at handover
  • Ongoing support, upgrades and continuous testing are available as a retainer
  • Ask your DeployOpen contact to confirm the retainer terms, response expectations and upgrade process in writing

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.