Security Overview

Platform security

• • All traffic is encrypted in transit using TLS 1.2 or higher.
• • Data stored in FormSheet infrastructure is encrypted at rest.
• • Production access is limited to authorised personnel with enforced MFA.
• • Secrets are stored using managed secret stores with regular rotation.

Operational practices

We monitor the platform 24/7 for reliability and suspicious activity. Changes to code and infrastructure require peer review, automated testing, and CI/CD checks. Disaster recovery plans are rehearsed to ensure business continuity.

Responsible disclosure

If you discover a vulnerability, please email security@formsheet.app with details. We will acknowledge the report within two business days and keep you updated on remediation progress.

Status and updates

Our team regularly reviews infrastructure, dependencies, and third-party integrations. Any material changes to our security posture are communicated via in-app messages or email.

Last updated: January 6, 2025