# DocuSeal — Acquisition Brief
# Cold Bore Ballistics LLC — Internal Reference
# Classification: Confidential
# Last Updated: 2026-06-08

This brief summarizes the DocuSeal e-signature deployment for a buyer's technical due diligence review.

---

## What It Is

DocuSeal is CBB's self-hosted e-signature platform for legally binding document signing. It handles NDAs, contractor agreements, vendor agreements, and any other documents requiring countersignature. Signed documents are automatically archived to OneDrive via an Azure Logic App using Microsoft Graph.

## Architecture Summary

DocuSeal runs as an **Azure Container App** (`ca-docuseal-prod`) in a VNet-injected Container App Environment (`cae-cbb-prod`) — not on the VM. It is fully serverless, scales to zero when idle, and is reproduced entirely from Terraform. Signed PDFs are written to Azure Blob Storage and automatically moved to OneDrive for Business (`Legal_and_Trademarks/Signed_Agreements/`) via a Terraform-managed **Azure Logic App** (`logic-docuseal-onedrive-prod`) that authenticates to Microsoft Graph using a system-assigned managed identity — no licensed user account required. No third-party SaaS signing service is used — CBB controls the platform and all document data.

## Cost

Negligible. DocuSeal OSS is free (AGPL-3.0). The deployment uses existing Azure infrastructure. The Logic App (Consumption plan) adds ~$0.01–0.05/month at CBB's signing volume. No Power Automate license or dedicated service account required.

## Vendor Risk

Low. DocuSeal is open-source — CBB is not dependent on a vendor's continued operation or pricing. A buyer can continue running the existing deployment, switch to a different e-signature platform, or migrate to their own enterprise tooling without any contract lock-in. All signed documents are owned and stored by CBB in Azure Blob Storage and OneDrive — they are not held by a third party.

## Document Archive

All signed agreements are in:
- **OneDrive:** `CBB_Corporate/03_-_Confidential/Legal_and_Trademarks/Signed_Agreements/`
- **Azure Blob Storage:** `stcbbprod/docuseal-docs` (raw archive; OneDrive is the working copy)

## Operational Dependency

DocuSeal runs as a Container App independent of the VM. It has no dependency on `vm-infra-prod` remaining available. The Container App Environment is VNet-injected so it reaches the private PostgreSQL server (`psql-cbb-prod`) and Azure Blob Storage without any public exposure. The Rebuild Guide documents the full rebuild process — no tribal knowledge required.

---

*Cross-references: DocuSeal_Architecture_Reference.md, DocuSeal_Rebuild_Guide.md.*

---

## Document Control

| Field | Value |
|---|---|
| **Document owner** | `jschwefel@coldboreballisticsllc.com` |
| **Classification** | Confidential (03_-_Confidential/) |
| **Location** | `OneDrive/CBB_Corporate/03_-_Confidential/Infrastructure/DocuSeal/DocuSeal_Acquisition_Brief.md` |
| **Cross-references** | `DocuSeal_Architecture_Reference.md`; `DocuSeal_Rebuild_Guide.md` |
| **Created** | 2026-06-07 |
| **Last updated** | 2026-06-07 |
| **Next full review due** | 2027-06-07 |

---

## Revision Control Block

| Rev | Date | Changed By | Reviewed By | Approved By | Summary |
|-----|------|------------|-------------|-------------|---------|
| 0.9 | 2026-06-07 | jschwefel | — | — | Initial release |
| 1.0 | 2026-06-08 | jschwefel | — | — | Update to reflect Logic App replacing Power Automate; update cost statement |
