security Trust
Security at Formfyl.
Your forms, your respondents' data, and the infrastructure around them — protected at every layer.
Encryption everywhere
TLS 1.3 in transit, AES-256 at rest. Field-level encryption on Enterprise.
Compliance
SOC 2 Type II, GDPR, and HIPAA-ready BAA on Enterprise.
Access control
SAML SSO, SCIM provisioning, granular role-based access.
Data residency
Pick your region — us-east, eu-central, ap-south available.
Audit logs
Every edit, export, and admin action is logged and exportable.
Pen tested
Third-party penetration testing annually, report available under NDA.