Skip to main content 홈 크리에이터 comeonoliver skillshub documenso-data-handling
documenso-data-handling Handle document data, signatures, and PII in Documenso integrations.
Use when managing document lifecycle, handling signed PDFs,
or implementing data retention policies.
Trigger with phrases like "documenso data", "signed document",
"document retention", "documenso PII", "download signed pdf".
설치로 이동 Skills Marketplace 커뮤니티가 만든 AI 스킬을 발견하고 탐색하세요.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
직접 명령은 검토 Prompt를 거치지 않습니다. 실행하기 전에 소스를 확인하세요.
npx skills add https://github.com/ComeOnOliver/skillshub --skill documenso-data-handling명령은 한 줄로 유지됩니다. 복사하기 전에 가로로 스크롤해 전체 내용을 확인하세요.
로컬 사본을 원하시나요? SkillsMP에서 현재 제공할 수 있는 파일을 다운로드하세요.
Zip 다운로드 다운로드 중... 이 저장소의 다른 Skills Review product and feature risk before an AI coding agent starts implementation.
Use Xquik for X data and confirmation-gated X actions: tweet search, user lookup, follower export, media download, monitors, webhooks, MCP, and SDK workflows.
Canton Network open-source ecosystem guide covering DAML SDK, Canton runtime, and Splice applications. Use when working with Canton Network, DAML smart contracts, or building decentralized applications.
name documenso-data-handling description Handle document data, signatures, and PII in Documenso integrations.
Use when managing document lifecycle, handling signed PDFs,
or implementing data retention policies.
Trigger with phrases like "documenso data", "signed document",
"document retention", "documenso PII", "download signed pdf".
allowed-tools Read, Write, Edit version 1.0.0 license MIT author Jeremy Longshore <jeremy@intentsolutions.io> compatible-with claude-code, codex, openclaw tags ["saas","documenso","documenso-data"]
Documenso Data Handling
Overview
Best practices for handling documents, signatures, and PII in Documenso integrations. Covers downloading signed PDFs, data retention, GDPR compliance, and secure storage. Note: Documenso cloud stores documents in PostgreSQL by default; self-hosted gives you full control.
Prerequisites
Understanding of data protection regulations (GDPR, CCPA)
Secure storage infrastructure (S3, GCS, or local encrypted storage)
Completed documenso-install-auth setup
Document Lifecycle
DRAFT ──send()──→ PENDING ──all sign──→ COMPLETED
│
├──reject()──→ REJECTED
└──cancel()──→ CANCELLED
Data handling implications:
- DRAFT: mutable, can delete freely
- PENDING: immutable document, but status changes
- COMPLETED: signed PDF available for download, archive
- REJECTED/CANCELLED: cleanup candidate
Instructions
Step 1: Download Signed Documents
import { Documenso } from "@documenso/sdk-typescript" ;
import { writeFile } from "node:fs/promises" ;
const client = new Documenso ({ apiKey : process.env .DOCUMENSO_API_KEY ! });
async function downloadSignedPdf (documentId : number , outputPath : string ) {
const doc = await client.documents .getV0 (documentId);
if (doc.status !== "COMPLETED" ) {
throw new Error ( );
}
res = (
,
{ : { : } }
);
(!res. ) ( );
buffer = . ( res. ());
(outputPath, buffer);
. ( );
}
`Document ${documentId} is ${doc.status} , not COMPLETED`
const
await
fetch
`https://app.documenso.com/api/v1/documents/${documentId} /download`
headers
Authorization
`Bearer ${process.env.DOCUMENSO_API_KEY} `
if
ok
throw
new
Error
`Download failed: ${res.status} `
const
Buffer
from
await
arrayBuffer
await
writeFile
console
log
`Saved signed PDF: ${outputPath} (${buffer.length} bytes)`
Step 2: PII Handling
interface RecipientPII {
email : string ;
name : string ;
role : string ;
signingStatus : string ;
}
function sanitizeForLogging (payload : any ): any {
const sanitized = { ...payload };
if (sanitized.recipients ) {
sanitized.recipients = sanitized.recipients .map ((r : any ) => ({
...r,
email : r.email .replace (/^(.{2}).*(@.*)$/ , "$1***$2" ),
name : "[REDACTED]" ,
}));
}
return sanitized;
}
console .log ("Webhook received:" , JSON .stringify (sanitizeForLogging (payload)));
Step 3: Data Retention Policy
import { Documenso } from "@documenso/sdk-typescript" ;
interface RetentionPolicy {
draftMaxAgeDays : number ;
completedArchiveDays : number ;
retainCompletedDays : number ;
}
const POLICY : RetentionPolicy = {
draftMaxAgeDays : 30 ,
completedArchiveDays : 7 ,
retainCompletedDays : 365 ,
};
async function enforceRetention (client : Documenso ) {
const { documents } = await client.documents .findV0 ({ page : 1 , perPage : 100 });
const now = Date .now ();
for (const doc of documents) {
const ageDays = (now - new Date (doc.createdAt ).getTime ()) / (1000 * 60 * 60 * 24 );
if (doc.status === "DRAFT" && ageDays > POLICY .draftMaxAgeDays ) {
await client.documents .deleteV0 (doc.id );
console .log (`Deleted abandoned draft: ${doc.title} (${ageDays.toFixed(0 )} days old)` );
}
if (doc.status === "COMPLETED" && ageDays > POLICY .completedArchiveDays ) {
await archiveToS3 (doc.id , doc.title );
console .log (`Archived: ${doc.title} ` );
}
}
}
Step 4: GDPR Data Subject Requests
async function handleDataSubjectRequest (
client : Documenso ,
type : "access" | "erasure" ,
subjectEmail : string
) {
const { documents } = await client.documents .findV0 ({ page : 1 , perPage : 100 });
const subjectDocs = documents.filter ((doc : any ) =>
doc.recipients ?.some ((r : any ) => r.email === subjectEmail)
);
if (type === "access" ) {
return {
documentsCount : subjectDocs.length ,
documents : subjectDocs.map ((d : any ) => ({
title : d.title ,
status : d.status ,
createdAt : d.createdAt ,
role : d.recipients .find ((r : any ) => r.email === subjectEmail)?.role ,
})),
};
}
if (type === "erasure" ) {
const deletable = subjectDocs.filter ((d : any ) => d.status === "DRAFT" );
for (const doc of deletable) {
await client.documents .deleteV0 (doc.id );
}
return {
deleted : deletable.length ,
retained : subjectDocs.length - deletable.length ,
retainedReason : "Completed documents retained for legal compliance" ,
};
}
}
Step 5: Secure Storage for Downloaded PDFs import { S3Client, PutObjectCommand } from "@aws-sdk/client-s3" ;
import crypto from "crypto" ;
const s3 = new S3Client ({ region : "us-east-1" });
async function archiveToS3 (documentId : number , title : string ) {
const res = await fetch (
`https://app.documenso.com/api/v1/documents/${documentId} /download` ,
{ headers : { Authorization : `Bearer ${process.env.DOCUMENSO_API_KEY} ` } }
);
const buffer = Buffer .from (await res.arrayBuffer ());
const key = `signed-documents/${documentId} -${Date .now()} .pdf` ;
await s3.send (new PutObjectCommand ({
Bucket : process.env .ARCHIVE_BUCKET !,
Key : key,
Body : buffer,
ContentType : "application/pdf" ,
ServerSideEncryption : "aws:kms" ,
Metadata : {
documentId : String (documentId),
title,
archivedAt : new Date ().toISOString (),
checksum : crypto.createHash ("sha256" ).update (buffer).digest ("hex" ),
},
}));
console .log (`Archived to s3://${process.env.ARCHIVE_BUCKET} /${key} ` );
}
Data Classification Data Type Classification Retention Handling Signed PDF Legal record Per regulation (often 7+ years) Encrypted archive Recipient email/name PII Duration of business relationship Sanitize in logs API keys Secret Active use only Secret manager, never logged Webhook payloads Contains PII 30 days max Anonymize after processing Audit trail Compliance record Per regulation Immutable storage
Error Handling Data Issue Cause Solution Download failed Document not COMPLETED Check status before download Storage permission denied Wrong bucket policy Verify IAM permissions GDPR request incomplete Pagination not handled Iterate all pages of documents Retention job failed API error during deletion Retry with backoff, log failures
Resources
Next Steps For enterprise RBAC, see documenso-enterprise-rbac.