Security and reliability
Your submissions are yours, and we treat them that way.
Form data is often the most sensitive thing an organization collects. Here is how it is protected, who can reach it, and what happens when you want it gone.

Security controls
Encryption everywhere
- TLS on every request to a form or the dashboard
- Submissions and uploaded files encrypted at rest
- Secrets and integration credentials stored separately from submission data
Access control
- Owner, admin, editor, and viewer roles
- Per form permissions so access stays narrow
- Single sign-on with SAML or OIDC, included in the plan
- Session controls and forced sign-out for removed staff
Accountability
- Audit log of views, edits, exports, and permission changes
- Submission history that keeps every version of a record
- Export log so you know what left the system and who took it
Data lifecycle
- Retention rules that purge submissions on your schedule
- Delete on request, applied to backups on our normal cycle
- Full export in CSV, Excel, and PDF at any time
Privacy posture
No tracking cookies. No selling data. No exceptions.
This website measures traffic without cookies and without storing IP addresses, which is why you never see a consent banner here. Your forms follow the same rule: we do not drop advertising cookies on the people filling them in, and we do not build profiles from their answers.
Submissions are never sold, never shared with advertisers, and never used to train models. We process them to run the service you pay for, and that is all.
Reliability
Forms that stay up when the traffic arrives.
- Forms are served from redundant infrastructure with automated failover
- Submissions are written before any integration runs, so a downstream outage never loses data
- Webhook and integration deliveries retry with a visible delivery log
- Automated backups with point in time recovery
- No submission throttling, because there is no submission meter
Need to run this past your security reviewer?
Ask us anything on the demo call, including how access, retention, and deletion work for your organization.