This PowerPoint presentation was given to the audience at API Days Paris on 2016-12-13 by DocuSign's Larry Kluger, Sr Product Manager, API Strategy. In this presentation, Larry discusses the strategy for using the DocuSign eSignature API, the technology and DocuSign platform, security, webhooks, and more.

1. Reaching Agreement: eSignature API strategies
Larry Kluger, Sr Product Manager, API Strategy
larry.kluger@docusign.com
@larrykluger
DOCUSIGN CONFIDENTIAL

2. Agreements are
at the heart of
business.
And a signature
shows your
acceptance of
the agreement.
reynermedia

3. The first
signature:
Showing
authorship.
Sumer, 3100 BCE

4. In what year did
US courts first
hold that an
electronic
signature was
binding?
Before 1900? 1900-1949? 1950-1979? After 1980?

5. First electronic signature court case, 1869:
“It makes no difference whether [the
telegraph] operator writes … the [contract]
acceptance … with a steel pen an inch long,
… or [with a] pen [attached to a] copper
wire a thousand miles long.
In either case the thought is communicated
… by the use of the finger resting upon the
pen; nor does it make any difference that in
one case … ink is used, while in the other
case a more subtle fluid, known as
electricity [is used].”
[Howley v. Whipple, 48 N.H. 487]

6. 147 years later:
2016 eIDAS regulations
Legal framework for
eSignatures across the EU

7. 100 Million users
in 188 countries
Every day:
130K new users join DocuSign
Imagine What You Can Do
.

8. 100 Million users
in 188 countries
Every day:
130K new users join DocuSign
Imagine What You Can Do
and be the hero.

9. eSignatures for the World:
 Basic electronic signatures
 Advanced electronic
signatures: Digital
Signatures
 Qualified electronic
signatures
Beyond Signatures:
 Authentication
 Workflow
 Payments & more to come

10. DocuSign is an API
company:
“the API is the
product–and
developers are the
customers”
>58% of
DocuSign’s transactions
are via the API
500%API transaction growth this
year

11. API experience and
issues
>3000
API integrations
with customers and
partners

12. Issue: Start with a Carrier-Grade Platform
0 min
scheduled
downtime
> 99.99%
uptime
Thousands
of drives, tens
of PBs of storage
100s of Gbps
of network
bandwidth
150TB+
of flash storage
powering our
OLTP system
950K+
daily
transactions
3K+ HTTP
requests/sec

13. Issue: Bank-level
Security
To whom does
InfoSec report?
IT / Engineering?
Legal?
Show a security
badge

14. DocuSign Bank Grade Security Architecture
DocuSign.net – Platform and Application
Trusted
Participants
Private
Envelopes
Encrypted
Documents
Legal & Binding
Signatures
Authenticity
• Multi-facet
Signature
verification
• Powerful
Authentication
Confidentiality
• AES 256
application
• Key
Management &
Encryption
Program
Non-
Repudiation
• Digital audit
trail
• Digital
checksums
• ESIGN
warranted
Integrity
• Tamper evident
documents
• X.509 signed
final docs
DocuSign, Inc. – Business and Operations
People
• Dedicated Staff
• CISO, CLO, CTO
• Industry voices
• Hiring policy
• Formal
Certification
Process
• 20+ internal
security policies
• Incident
• Management
• GRC Program
• Security Council
Physically & Logically separate networks, dual firewalls, audited controls
Signers
• 256 bit SSL
• 11 Auth. Methods
• Unalterable signer info
capture
Integrations
• Secure API connections
• Go Live Program
256bit SSL
Secure Data in Motion
Data Centers
DisasterRecoveryandBusinessContinuity
Near
Real-Time
Replication
Only fully ISO27001
certified eSTM vendor
Carrier Grade
Availability
• Continuously
available
• <30 minute RTO and
<10 second RPO
• 99.99% since 2008
• Advanced
monitoring & alerts

15. What do API Developers want?

16. First: who is using your API?
Or better, who is the customer?
Developers come in many
flavors…

17. Table stakes:
 DevCenter
 Hello World
 Recipes
 Sample Apps
 Reference Docs
 Community

18. Internationalization
 Automatic language
detection
 Sign in 43 languages
 Send in 13 languages

19. “Apex” developers
IDE integration
SDKs
APIs
Most developers
would prefer to
not use your API.
(Sorry.)

20. We’re “all in” on Swagger
DocuSign Swagger file – 13 Mbytes
Automatically generated:
 SDKs: C#, Java, Node.JS, PHP, Objective-C
 API Reference documentation
 API Explorer
 Custom Postman collection
 … and more to come

21. Larry Kluger
Larry.kluger@docusign.com
@larrykluger