Skip to navigation

App Center publishing guidelines

View as Markdown

Note: These guidelines will be refined over time to provide more accurate information, and Docusign reserves the right to change them at any time.

Publishing extension apps to the App Center requires approval from Docusign. Follow these guidelines to have a smoother approval process.

Technical and functional considerations

Error-free functionality

Conduct thorough testing of your extension app and address any errors to ensure that your app functions correctly. Focus on edge cases and abnormalities to ensure your app can handle all circumstances. If there are things that are not yet supported, please let us know as part of your submission process for the App Center.

Security

  • Please use secure HTTPS (TLS 1.2 or higher) protocol for all API calls made by your app.
  • Avoid including secrets such as passwords in your extension app manifest or when entering in the form for your extension app, beyond what is absolutely necessary to get your app working. Please consult our app manifest reference for details about where it’s acceptable to have secrets. You can provide secrets in the envelope you send Docusign to test your app; our envelopes are a secure method to send secret information.
  • Consider using security scanning tools to scan your code for any vulnerabilities.

Performance

Your app users expect a quick response from your app without extended wait times. Docusign encourages you to reduce the response time of your app to enhance user experience.

Scalability

Your app should be able to handle an increasing number of requests simultaneously without impacting its performance. Docusign recommends that you do load testing to ensure that your app can handle the potential of being used by millions of users.

Reliability

Your app users rely on your app to function consistently. Ensure that your app maintains availability under varying conditions. Perform thorough testing to identify and address potential points of failure to enhance overall reliability, ensuring uninterrupted service for users.

Business considerations

The following business requirements are critical for public extension apps. For private extension apps, we recommend following the same guidelines so that your customers’ account administrators can better understand the purpose and value of your app.

Extension app description

The app’s description should be appropriate and provide an easy-to-understand description of what your extension app does. Do not use technical jargon. Remember that this description should be meaningful for both technical and non-technical Docusign customers who want to use your app. Your app description should also not be confusing or misleading or make false statements about what your app can or cannot do. Your description should be in English and free of typographical errors. (Note: Support for localization of your app’s information is not yet available.)

Company information

Your extension app should use appropriate branding and naming that represent your organization and do not mislead customers about who provided the app. This information should include the company’s email address, website, and phone number. Please note that end customers of your app will use this information to contact you for support. Therefore, make sure this information is accurate.

Screenshots

You can provide up to four screenshots to show your app’s features and use cases. It is essential to capture high-quality screenshots during your app testing phase, ensuring they accurately reflect your app’s current appearance and features. If you modify your app’s code, remember to update the screenshots if needed. It is critical to ensure that the information in your screenshots does not include any proprietary, private, or copyrighted material, and is appropriate for public viewing.

Extension app icon

Ensure that your app icon provides a good representation of your app and does not violate any copyright laws. Do not use other company’s branding information in your extension app icon.

Use of brand assets

Please check the Docusign Brand website for any use of Docusign brand assets such as the Docusign logo.

Updating a live app

If you’re publishing a new version of a Live app, the new version has to be approved separately by Docusign. This list of publishing guidelines also applies to subsequent versions of the app. For versions other than the initial 1.0 version, you also must provide a changelog (either via the form or using the app’s manifest). This changelog has to explain clearly to customers what changes were made in the app since the last published version.

All developers publishing apps on the Docusign App Center must abide by applicable laws and the Terms and conditions. In addition, you must publish your app’s legal terms and privacy policy on your Docusign App Center landing page.

Next Steps