Encrypted, end to end.
Every byte on the wire uses TLS 1.2 or greater. Your respondents are protected from the very first keystroke — no upgrade required.
Browser
Your respondent
NodumForms
Your workspace
TLS 1.2+ · End-to-end encrypted
Enterprise-grade security built into every plan — TLS encryption, hashed IPs, private file storage, and server-side enforcement on every API call.
Every byte on the wire uses TLS 1.2 or greater. Your respondents are protected from the very first keystroke — no upgrade required.
Uploads live in private buckets with no public URLs. Only authenticated calls from inside your workspace can ever reach them.
Raw IP addresses are never persisted. We hash on the way in — so what we hold isn't traceable back to your respondents.
Plan limits, permissions, and access controls all run on our servers. Client-side gating is cosmetic only.
Your form data is never used to train AI models, and never sold or shared with third parties. Ever.
Every form and its responses are private until you invite someone. Grant owners, editors, or view-only access per person — and revoke it any time.
Talk to securityEnterprise plans include SAML SSO with the identity provider your team already uses — Okta, Azure AD, Google, OneLogin. Provisioning and deprovisioning stay in sync.
See Enterprise plansSet workspace-wide retention windows for responses and uploads. Delete on demand, on a schedule, or never — your data, your call.
How retention worksOur security practices already follow SOC 2 Type 2 standards. We are working toward formal certification — and happy to share our current security posture with your team.
Request our security overviewA platform you can hand to your security team without a long checklist of caveats. Hashed IPs, server-side enforcement, no training on your data.
Read our security overviewGDPR- and CCPA-aligned, with consent prompts built in and retention controls at the workspace level. Working toward SOC 2 Type 2.
See compliance detailsCollect sensitive applications and surveys with confidence — private file storage, audit logs, and granular access controls keep the data tight.
See HR templatesStart on the free plan — every protection above is on by default. Talk to us when you’re ready for SSO, audit logs, and SOC 2.