Enterprise-Grade Form Infrastructure Security
Encrypted transport, isolated PostgreSQL storage, and domain control
How does Form2Lead handle enterprise-grade form infrastructure security?
Yes, with verifiable limits: Form2Lead enforces TLS 1.3 on all submission endpoints with no submitter cookies or analytics, stores payloads as organization-scoped rows in Neon Postgres with AES-256 disk encryption (keys held by the provider), uses opaque endpoint IDs that never expose your email in HTML, and hard-deletes expired submissions daily (Free 7 days, Basic 14, Starter 30, Growth 120). No end-to-end encryption or SOC 2 is claimed.
Capability Overview
Privacy-first form data handling: TLS 1.3 in transit, AES-256 encrypted storage, opaque endpoints, plan-defined auto-deletion, and disclosed sub-processors.
Key Benefits & Developer Controls
- ✔TLS 1.3 enforced on every submission endpoint — ingestion sets no cookies and runs no submitter analytics.
- ✔AES-256 disk encryption at rest (Neon managed Postgres, keys held by the infrastructure provider — stated honestly) with organization-scoped rows readable only via your authenticated dashboard.
- ✔Opaque random endpoint IDs: your email never appears in page HTML, unlike FormSubmit which exposes your@email.com in the form action.
- ✔Automatic hard-deletion on a daily schedule — Free 7 days, Basic 14 days, Starter 30 days, Growth 120 days — with attached file objects deleted first.
- ✔Owner delete hides submissions immediately from inbox, counts, and CSV export, with permanent purge plus files within 30 days.
- ✔Email alerts are optional per form — dashboard/webhook-only forms never create an email copy — and CSV export is self-serve on every plan including $0 Free.
- ✔Plainly disclosed sub-processors only: Resend (email, when configured), Neon (storage), Upstash Redis (IP counters, never content), Razorpay (billing), PostHog (dashboard analytics). No data sales, no ads, no AI training on submissions.
Frequently Asked Questions
Is it safe to trust Form2Lead with confidential form data?
Form2Lead minimizes collection (TLS 1.3, no submitter cookies or analytics), scopes reads (organization-scoped rows, authenticated dashboard only, opaque endpoint IDs), and deletes on a schedule (hard-deleted daily after Free 7 / Basic 14 / Starter 30 / Growth 120 days). What it does not claim matters too: no end-to-end encryption and no SOC 2/ISO certification.
Where is my form data stored?
In Neon managed Postgres with AES-256 disk encryption (keys held by the infrastructure provider), as organization-scoped rows readable only through your authenticated dashboard. Endpoint IDs are opaque random strings and your email never appears in page HTML — unlike FormSubmit, which puts your@email.com in the form action.
How long are submissions kept, and what happens when I delete one?
Retention is plan-defined: Free 7 days, Basic 14 days, Starter 30 days, Growth 120 days. Expired rows are hard-deleted by an automated daily janitor with file objects deleted first; provider backups rotate on their own schedule. Owner deletes hide immediately from inbox, counts, and CSV export, and are permanently purged with files within 30 days.
Do I have to receive submissions by email?
No. Email alerts are optional per form — a form with no notification email is dashboard/webhook-only, so no email copy ever exists. CSV export is self-serve on every plan including the $0 Free plan.
Who else touches my form data?
Only the disclosed sub-processors: Resend (email delivery, only when a form has email configured), Neon (Postgres + object storage), Upstash Redis (IP rate-limit counters only — never submission content), Razorpay (billing), and PostHog (product analytics). Form2Lead does not sell data, runs no ads, and trains no AI on submissions. Reports go to security@form2lead.com per /.well-known/security.txt (RFC 9116).
How do I stop other websites from using my form endpoint?
Allowed-domains locking enforces CORS on every submission, so browser-based posts from unlisted origins are rejected. The endpoint key visible in your page source is only useful to the origins you approve.
Start Using Enterprise-Grade Form Infrastructure Security
Set up your form endpoint in under 60 seconds with zero backend code.