Encryption in transit

Data is encrypted in transit using industry standard Transport Layer Security (TLS).

Encryption at rest

Data is encrypted at rest using industry standard AES encryption (AES-256).

Roles and permissions

Decide who can view, edit, and manage each form and the responses it collects.

Backups

Automatic encrypted database backups, retained for 30 days.

Data export

Export your data at any time in open and standardized formats.

Secure payments

All payments are securely processed via a certified PCI Level 1 Service Provider.

Built on best-in-class infrastructure.

We run FormGrid on infrastructure from established providers rather than rolling our own, because the boring, well-audited option is the right one for your data. Our providers maintain recognized security certifications, including ISO 27001, ISO 27018, and SOC 2.

You can see everyone we work with, and what they do, on our subprocessors page.

GDPR.

We're committed to compliance with the EU General Data Protection Regulation (GDPR) and have implemented a wide range of technical and organisational measures. You can read exactly what we collect and why in our privacy policy.

Any security questions?

Get in touch and you'll hear back from the people who build and run FormGrid, not a ticket queue. We're happy to help.