Security & Trust Center
Enterprise-grade security for your form submissions.
Formtruck protects your customer data with end-to-end encryption, multi-layered spam defense, and global compliance standards.
GDPR CompliantSOC 2 Type II ReadyCCPA ReadyTLS 1.3 Encrypted99.99% Uptime SLA
Our Security Pillars
How we protect your data at every step of the submission pipeline.
Encryption Everywhere
All data is encrypted in transit using TLS 1.3 with strict HSTS, and encrypted at rest using AES-256 key management.
Multi-Tenant Isolation
Workspace submissions, uploaded files, and API secrets are strictly partitioned with row-level security and tenant isolation policies.
Automated Spam Defense
AI spam classifiers, honeypot traps, and token-bucket rate limiters neutralize malicious bot traffic before it reaches your inbox.
Data Processing Agreement (DPA)
We offer a pre-signed Data Processing Agreement (DPA) incorporating European Standard Contractual Clauses (SCCs) for GDPR compliance.