documenso-data-handling

# Documenso Data Handling ## Overview Best practices for handling documents, signatures, and PII in Documenso integrations. Covers downloading signed PDFs, data retention, GDPR compliance, and secure storage. Note: Documenso cloud stores documents in PostgreSQL by default; self-hosted gives you full control. ## Prerequisites - Understanding of data protection regulations (GDPR, CCPA) - Secure storage infrastructure (S3, GCS, or local encrypted storage) - Completed `documenso-install-auth` setup ## Document Lifecycle ``` DRAFT ──send()──→ PENDING ──all sign──→ COMPLETED │ ├──reject()──→ REJECTED └──cancel()──→ CANCELLED Data handling implications: - DRAFT: mutable, can delete freely - PENDING: immutable document, but status changes - COMPLETED: signed PDF available for download, archive - REJECTED/CANCELLED: cleanup candidate ``` ## Instructions ### Step 1: Download Signed Documents ```typescript import { Documenso } from "@documenso/sdk-typescript"; import { writeFile } from "node:fs/promises"; const client = new Documenso({ apiKey: process.env.DOCUMENSO_API_KEY! }); async function downloadSignedPdf(documentId: number, outputPath: string) { // Verify document is completed const doc = await client.documents.getV0(documentId); if (doc.status !== "COMPLETED") { throw new Error(`Document ${documentId} is ${doc.status}, not COMPLETED`); } // Download via v1 REST API (SDK may not expose dow...