Security & data handling
Your forms carry other people's personal data and your clients' leads. Here is exactly how we treat both.
Data flow
A submission arrives at your form endpoint over TLS, is scored for spam, and is written to our primary database before any other processing happens. Notification emails and webhooks are dispatched after the write, with automatic retries — a delivery failure can delay a notification but can never lose a submission.
Encryption
All traffic is TLS 1.2+ — form endpoints, dashboard, and API. At rest, submission data lives in managed Postgres (Neon) with disk-level encryption. Webhook payloads can be verified via HMAC-SHA256 signatures using your per-form secret.
What we store — and don't
We store the form fields you send us, plus the submitter's IP address and user agent (kept for rate limiting and abuse prevention). We do not write submission payloads to application logs, do not sell data, and do not use submission content for advertising or training.
Payment card details never touch our servers — checkout and billing run entirely on Stripe.
Retention & deletion
Every form can set a retention window; submissions older than it are purged automatically. Individual submissions can be deleted from the dashboard instantly, and deleting a form or workspace cascades to all of its data. Full-account deletion completes within 30 days of request.
Subprocessors
Vercel (application hosting), Neon (Postgres), Postmark (transactional email), Stripe (billing), Cloudflare (Turnstile spam verification). Each processes only what its role requires. See the DPA for the current list and notice terms.
GDPR & Swiss FADP posture
For submission data, you (or your client) are the controller and FormDock is the processor. The dashboard gives you the tools to service access, export, and erasure requests directly. FormDock is operated from Switzerland; hosting is currently US-based under DPF/SCC transfer safeguards — we document this plainly so you can assess it. EU/Swiss data residency is on the roadmap.
Abuse & platform integrity
Per-form rate limits, layered spam filtering, and sending controls protect both your forms and our email reputation — which is what keeps notification deliverability high for everyone. Suspected relay abuse is suspended fast.
Reporting a vulnerability
Found something? Email security@formdock.app. We read every report, respond quickly, and credit responsible disclosure.