Cornell's E-signature service (Adobe Sign) is not approved for PCI (collecting credit card numbers), for health data (HIPAA), human subjects data, or export-controlled data.

Adobe Sign forms can be used to collect and store Level 1 personal data (names, addresses, SSNs), financial data, and FERPA data. 

• Don't download data from Adobe Sign into systems that are not approved for that data.
• Don't download sensitive data to unsecured personal computers.
• Don't send sensitive data via email.