How do I keep signed records that satisfy an insurer or auditor?

This page may contain affiliate links from which Blur Studio earns commissions.

This request almost always lands at a bad time, a renewal deadline, a claim in progress, or a surprise compliance check, and the panic is usually less about whether you have the documents and more about whether what you have actually proves anything. A signed PDF sitting in an email thread doesn't automatically prove who signed it, when, or that nobody edited it afterward. That's the actual gap worth closing, not just "do I have the file." Making sure a signed contract cannot be edited covers how to prevent that.

What an insurer or auditor is really asking for

Strip away the formal language and most requests boil down to the same three things: who signed the document, exactly when and from where they signed it, and evidence that the content hasn't been altered since. A signature image pasted into a Word document proves none of this on its own. What you actually want is a record that ties a specific person, a specific timestamp, and an unchanged file together, which is exactly what an audit trail and a signing certificate are built to do.

It helps to ask yourself which of two situations you're actually in, because the right answer looks different for each. A renewal review is usually a sampling exercise, they want to see that a reasonable process exists and spot-check a handful of files. A claim dispute is narrower and higher stakes, they want everything tied to one specific document, down to the exact minute it was signed and whether anyone touched it after. If you're not sure which one you're facing, that's worth asking before you start pulling records, since it changes how much you need to assemble.

The no-tool way: paper, email or a phone call

If you only ever sign things on paper or over email, you can still satisfy this request, it just takes more digging. Pull the physical signed copy or the original email thread, note the date from the postmark or email header, and write up a short cover note explaining the process you follow. It works for a handful of documents a year. It falls apart once an auditor asks for a pattern across dozens of files, or the signer's email account has since been closed, or the paper copy has gone missing in a move. There's no automatic timestamp, IP record or tamper check behind any of it.

The software options, from simple to most capable

If you're already sending documents for signature through a tool, you likely already have most of what an auditor wants, you just need to know where to pull it from.

Adobe Acrobat Sign

Adobe Acrobat Sign is Adobe's own e-signature product, built into Acrobat subscriptions and tied closely to the PDF signature standards Adobe itself maintains, including the Adobe Approved Trust List that governs which digital certificates show as valid in Adobe Reader. It logs an audit trail on signed documents automatically. Adobe's pricing page showed me region-specific pricing rather than a clean US dollar figure when I checked, so confirm your actual monthly cost directly on Adobe's own pricing page rather than trusting a number repeated elsewhere. More on Adobe cost is in Adobe Acrobat Sign pricing and cheaper options.

DocuSign

DocuSign, one of the longest-running e-signature platforms, built a real-time audit trail into every tier I checked, including its Personal plan at $11 a month for 5 envelopes. Its Standard plan runs $30 a user a month with a yearly cap of 100 envelopes per user, and Business Pro runs $45 a user a month and adds identity verification and eWitness, a feature for recording a witness alongside the main signer. All of this is current as of this check; confirm live before you commit.

Zoho Sign

Zoho Sign, the e-signature product inside Zoho's wider business software suite, includes an audit trail on its Free plan, and adds witness signing and SMS delivery on its Standard and Professional tiers. Zoho's own pricing page didn't display dollar figures for those paid tiers when I checked, only noting a 20% discount for annual billing, so get an actual quote before assuming a number.

QuickSigner

QuickSigner is an electronic signature tool: you upload a document, place signature fields, and send a secure link that anyone can sign from a browser on any device, with no account required on their end. It records upload, viewing, signing, the signer's IP address and the time of each action, and generates a downloadable signing certificate alongside the sealed PDF, available both in your account and through its API. Pricing is free to start, with Business at $5 a user a month and Professional at $15 a user a month, both 20% cheaper billed annually. One thing I couldn't confirm anywhere on its site: how long it actually keeps your signed records on its own servers. That's not stated, which matters for the next section.

Step by step: pulling the record together

1. Ask exactly what they want and for how long. "Signed records" can mean the final PDF, the audit trail, the certificate, or all three, and "for how long" might mean the current policy year or the last seven years. Get this in writing before you start pulling files.
2. Download the signed copies and their records separately. Most tools let you export the signed PDF and the audit trail or certificate as separate files or as one combined document. Grab both if you can.
3. Store them in a folder you control, not just inside the e-signature tool's account. If that subscription lapses or the account gets deactivated, you don't want your only copy gone with it.
4. Check your industry's specific retention rules. Insurance record retention requirements vary by state and by line of coverage, often somewhere between three and seven years, but this is genuinely not something I can state as a flat rule that applies to your situation. Confirm it with your insurer, your broker, or a compliance advisor who knows your specific policy and jurisdiction. If the request is for old work orders specifically, see finding old signed work orders for insurance renewals.

When to skip relying on the tool alone

None of the four tools above states a retention period for your signed records on the pages I could read. That's the part people miss: the e-signature tool is where the signature happens, not necessarily where your proof lives forever. Treat the download, not the account, as your actual record. If an auditor ever asks you to produce something from three years ago and the only copy is sitting inside a tool you've since switched away from, that's a problem you created, not one the tool is obligated to prevent.

There's a second, quieter risk worth naming: a sealed PDF and its certificate prove the file wasn't altered after signing, but they don't prove the terms inside it were fair, legal, or even what both sides thought they were agreeing to. An auditor checking process compliance usually only cares about the first part. A court or a dispute later might care about the second part a great deal more, and that's a question for a lawyer looking at the actual contract, not something any signing tool's audit trail can settle on its own.

How I'd approach this

When I set this up for a client, I don't just wire up the signing tool and call it done. A contractor I'd model this on renews a general liability policy every January, and the insurer sometimes asks for the last two years of signed waivers and change orders during a renewal review. The fix isn't a fancier signing tool, it's a standing habit: the moment something gets signed, the sealed PDF and its certificate get dropped into a dated folder structure (by year, then by job) in storage you own, not just left to sit in the e-signature account. That one habit turns "let me go dig through a year of emails" into a five-minute export the next time someone asks. If you want that folder structure and the automation that files things into it built properly instead of done by hand every time, that's the kind of thing I build.