Our commitment
to security

forms.app is secure by design and private by nature. See the technical measures we take and learn how we keep your data safe and secure.

Trusted by powerful brands around the globe

cocacola
redbull
starbucks
nike
samsung
mercedes
sony
loreal
renault

Certifications and compliances

For us, security is a must, and privacy is a right. So, we meet industry-leading security standards and apply privacy practices all the time. Here are our certifications and compliances: GDPR Compliance, CCPA Compliance, ISO/IEC 27001, ISO/IEC 27701, PCI DSS, OWASP

Where does forms.app store data?

forms.app uses Google Cloud Platform for all its instances, and it scales automatically without any downtime when needed. Our servers are located in Belgium, EU (europe-west1-b).

Spam protection

forms.app offers visible and invisible human verification options through CAPTCHA, as well as field validations to prevent spam submissions.

Account security at forms.app

forms.app provides the necessary tools to keep your account safe all the time. You can set up two-factor authentication, manage user permissions to decide who has access to your forms with different levels, and back up your data whenever needed.

Privacy of your forms

You have the full control of your forms. Easily change the access level, share them only with specific people, schedule your forms to go live and close within a certain time, set geo-location restrictions, and disable them without losing data.

Infrastructure and network security

Our network security measures protect your network and data from breaches, intrusions, and other threats. We use basic filtering provided by CloudFlare to protect your data and network from any potential Denial of Service attacks. Servers are hardened with minimal access permissions and can only be accessed by employees via a 2048-bit encrypted VPN using private keys. In addition to third-party security services, we continuously monitor the system for suspicious activity, ensuring a secure infrastructure for all devices, users, and applications.

Disaster recovery

forms.app backs up data in real-time across multiple servers hosted by our service provider, Google Cloud. In case of any emergency, data will always be safe and will be retrieved.

Employee security

forms.app signs confidentiality agreements with the employees and contractors. Also, all employees and contractors have a common way to report incidents, and they undergo at least one annual training on security awareness.

Bug bounty program

forms.app takes security seriously, and the team continually tests the security across services. forms.app also has a bug bounty program for security experts out there. Reach out to us by filling out our form to report vulnerabilities.

Additional resources

If you would like to learn more about our security practices, see our privacy policy, or sign a DPA, visit our legal pages.