Box Sign, but it appears that cases set to "Get a Copy" are not logged in the User Activity Report. From an administrative standpoint, this is a problem, and we would like to see the report improved so that it can be logged.

Setting a copy to one's private email address or to the email address of a colluding third party is dangerous from a security standpoint because it allows the information to be retrieved from the box without being logged.

Box Sign's signature log is not a solution to the problem, as it can be erased with authorization.