SECURITY & COMPLIANCE
Boring where it matters.
The parts of the product nobody screenshots — handled the way your IT team would want them handled. Here’s exactly what that means, in plain terms.
CONTROLS
What’s in place today.
GDPR erasure
Right-to-erasure is a workflow in the product, not a support ticket. Remove a person's submissions and the files attached to them, on request, without emailing us.
Audit log
Who did what, and when. Every admin action — form changes, exports, member and permission changes — is recorded and reviewable.
Org roles & permissions
Access is scoped per member and per form, not all-or-nothing. Give someone the forms they need and nothing else.
Encryption at rest & in transit
Submissions and uploaded files are encrypted at rest, and every connection to FormNest is served over TLS.
MongoDB Atlas + Cloudflare R2
Responses live in managed, replicated MongoDB Atlas; uploaded files live in Cloudflare R2. Both are managed services with their own durability and backup guarantees.
Data residency
Choose the region your submissions are stored in. Available on Enterprise, where residency and related controls are part of the plan.
INFRASTRUCTURE
Where your data lives.
No home-grown storage. Responses and files sit on managed services built for exactly this, encrypted at rest and moved only over encrypted connections.
- Form responses
- MongoDB Atlas · replicated
- Uploaded files
- Cloudflare R2
- In transit
- TLS on every connection
- At rest
- Encrypted
YOUR DATA
It stays yours.
The responses your forms collect belong to you. You can export them as CSV whenever you want them somewhere else, and erase a person’s data on request through the product — the same right-to-erasure workflow, no ticket required.
Our data-processing terms spell out how we handle submissions on your behalf. You can read them in the Data Processing Addendum, alongside the Privacy Policy.
Questions from a security or IT team?
Reviewing FormNest for your organisation, or need data residency and the Enterprise controls? Get in touch and we’ll walk through it.