Download signNow app
4.7 / 5 rating on

Which Is Attached Hereto Form

Use a Which Is Attached Hereto template to make your document workflow more streamlined.

What Which Is Attached Hereto Form means

Which Is Attached Hereto Form is a document reference used when a contract, authorization, exhibit, or other record is identified as attached to the signed instrument. It does not identify one standardized federal filing or issuing agency. The parties should attach the precise document, describe it clearly, and preserve the same version with the executed record. In U.S. transactions, electronic execution may be supported by ESIGN, 15 U.S.C. ch. 96, and applicable state law, including UETA or New York ESRA, when intent, consent, attribution, and reproducible retention are established.

Who uses the attached form

Business transactions

Operations, procurement, and legal teams use the form when a contract, exhibit, authorization, or other document is incorporated by reference. The responsible sender should identify the attachment, route it to the correct signers, and preserve the signed version with its audit trail.

Regulated workflows

Healthcare, finance, construction, and professional-services teams use the form when attached records contain regulated or confidential information. They should apply role-based access, consumer disclosures when required, and the retention rule governing the underlying record.

Business types using attached forms

The right workflow depends on the attachment’s subject, signer relationship, confidentiality level, and applicable U.S. recordkeeping rule.

  • Solo attorneys and consultants can identify a specific exhibit or authorization, send it for signature, and retain the signed attachment without building a larger document operation.
  • Mid-sized legal, construction, and real-estate teams can standardize attachment naming, route signatures in order, and preserve audit evidence for contracts handled across offices and field locations.
  • Enterprise procurement and healthcare groups can connect attached records to controlled workflows, apply stronger authentication, and manage access and retention requirements across departments.

These tasks are executed by both individual contributors and centralized administrators depending on organizational policy and required controls.

How Which Is Attached Hereto Form works

The form process starts with the document identified as attached, then moves through field review, signer routing, electronic execution, and evidence preservation.

  • Upload document: Add the attached document to signNow.
  • Check fields: Auto-detect fields, then verify placement.
  • Send request: Send signature requests to named parties.
  • Archive record: Store the signed record and audit trail.
be ready to get more
Get legally-binding signatures now!
  • Best ROI. Our customers achieve an average 7x ROI within the first six months.
  • Scales with your use cases. From SMBs to mid-market, airSlate SignNow delivers results for businesses of all sizes.
  • Intuitive UI and API. Sign and send documents from your apps in minutes.

Audit-trail evidence for the attached form

signNow records the technical events surrounding this attached document so reviewers can connect signer identity, timing, document integrity, and completion evidence.

01

Authenticate signer:

Records the authentication method used by each signer.
02

Capture timestamp:

Captures signing time, IP address, and actions.
03

Hash document:

Links the completed document to its signing history.
04

Seal record:

Preserves evidence against later undetected changes.
05

Retrieve evidence:

Provides certificate and audit-trail export options.
06

Archive copy:

Supports retention in the organization’s records system.

Signer authentication and certificates

Digital certificates:

PKI-based certificate support

Certificate standard:

X.509 certificate identification

Two-factor authentication:

Two-factor signer verification

SMS OTP:

SMS one-time passcodes

ID verification:

Knowledge-based identity checks

Authentication record:

Signer event evidence

Recommended attached-form setup

Use an authentication, signature, evidence, retention, and encryption configuration that matches the attachment’s subject and signer risk.

SettingRecommendation
Authentication methodEmail link with SMS OTP
Signature typeTyped or drawn electronic signature
Audit trailExport certificate with signed PDF
Document retentionApply underlying record rule
EncryptionTLS 1.2/1.3 and AES-256 at rest

Best practices for the attached form

Clear field placement, verified signer identity, complete evidence export, and document-specific retention reduce disputes involving an attached form.

Verify the attached document before sending

Before sending, compare the attached document with the source approved by the responsible business or legal owner. Confirm that every required signature, date, acknowledgment, and attachment reference has a field, and remove obsolete drafts from the sending package.

Match signer identity to the transaction

Use signer names and email addresses tied to the transaction record, and require SMS or stronger authentication when identity risk warrants it. For consumer-facing transactions, document electronic consent under 15 U.S.C. §7001(c) before collecting signatures.

Export the completion evidence together

Export the completed PDF and certificate of completion immediately after all parties sign. Preserve the audit trail with the document, access restrictions, and version information so a reviewer can reproduce what was signed and when.

Assign retention by document subject

Apply a retention rule based on the document’s actual subject, not the phrase “attached hereto.” Tax, healthcare, employment, and regulated records can have different periods; obtain legal or records-management review before deletion or transfer.

Privacy pitfalls for the attached form

  • Personal identifiers in the attachment may be visible to every recipient, creating unnecessary disclosure when access is not limited to transaction participants.
  • A signer may complete the signature without receiving the ESIGN consumer disclosure, weakening evidence of electronic consent for a consumer-facing transaction.
  • An outdated attachment can be signed while the main document references a newer version, creating ambiguity about the parties’ actual agreement.
  • Shared links or broad folder permissions can expose the completed form and audit trail beyond the authorized business audience.

Documents requiring extra legal review

Real-estate deed

May require acknowledgment

Family-law document

May require witnesses

Will or codicil

Not covered by ESIGN

Notarized attachment

State rules may control

Retention periods for attached records

The phrase “attached hereto” does not set a retention period; apply the rule governing the underlying record and verify any longer state requirement.

01

3 years for federal tax records

IRC §6501(a) sets the federal assessment period for tax records; retain longer when the underlying transaction requires it.
02

6 years for major tax understatement

IRC §6501(a) allows 6 years when income is understated by 25% or more.
03

6 years for HIPAA records

45 CFR §164.530(j) requires covered-entity HIPAA records for six years.
04

6 years for broker-dealer records

17 CFR §240.17a-4 requires six years for specified broker-dealer books and records.
05

3 years for FLSA payroll records

29 CFR §516.5 requires three years for basic FLSA payroll records.

Which Is Attached Hereto Form troubleshooting

Resolve field, authentication, consent, audit-trail, plan, and retention questions before distributing the completed Which Is Attached Hereto Form.

Upload the source document and use signNow’s field-detection tools to place signature, date, and acknowledgment fields before sending. The Business plan includes templates and audit trails, while ESIGN and UETA support electronic records when intent, consent, attribution, and reproducible retention are established.

A typed or drawn signature can satisfy ESIGN and UETA when the signer intends to sign and the completed record remains reproducible. For stronger attribution, signNow can add SMS authentication, two-factor authentication, or advanced signer authentication available with Enterprise features.

If the document contains consumer-facing records, provide the ESIGN Act disclosure required by 15 U.S.C. §7001(c), including paper-record rights, electronic-access capability, and consent-withdrawal procedures. signNow’s audit trail preserves signing events, but it does not replace the disclosure.

Use signNow’s audit trail to review signer identity evidence, timestamps, IP information, and document history. Export the completed record and certificate of completion, then retain them under the applicable contract, tax, healthcare, or state-record policy.

Business is $8/user/month when billed annually and includes audit trails, templates, and mobile apps. Business Premium is $15/user/month annually and adds bulk send, kiosk mode, payments, and quick invite links. Paid plans include unlimited users, but subscription plans include annual invite limits.

signNow lists HIPAA compliance with a business associate agreement requirement. Enable the appropriate agreement and access controls before routing protected health information; HIPAA’s six-year record requirement under 45 CFR §164.530(j) applies to covered records, not every attached document.

ROI at a Glance

Key performance indicators that demonstrate SignNow's proven track record.

28M+Documents signed
13+Years in business
4.6/5Average G2 rating

BE READY TO GET MORE

Get this form now!

If you believe that this page should be taken down, please follow our DMCA take-down process.