This guide provides general operational information for Canadian organizations. It is not legal advice, and it does not determine whether a specific document or process is legally appropriate.
Contain the relevant access
For an exposed active signer link, resend its invitation to replace it or cancel the request. For the wrong recipient or document, cancel or replace the request and review the new send carefully.
Secure a workspace account
Change a compromised password and review account access. Enable an authenticator if appropriate. Use your organization’s mailbox-security process too, because account magic links depend on access to that mailbox.
Preserve relevant records
Record the agreement identifier, affected people, timeline and actions taken. Workspace roles do not automatically grant access to another creator’s private content, so do not broaden access merely to investigate.
Follow the organization’s response process
Use the organization’s privacy/security escalation process, retain necessary evidence and seek qualified advice when needed. Contact support for a product-access or recovery problem.
A practical next step
Test the workflow with a non-sensitive document and your own test recipient. Check the current Help centre for step-by-step instructions and screenshots before using it for a real agreement.