Privacy and security basics

Your workspace is yours alone

Each workspace lives at its own address and its data is kept separate from every other workspace. Members sign in on your workspace's own address, and a link to a form, response or file in another workspace simply doesn't work for you.

Files visitors upload

Uploaded files and signatures are stored privately. Only signed-in members of your workspace can download them, and they always download as files rather than opening in the browser.

What OurForms doesn't keep

• Statistics never use visitors' IP addresses or answers.
• Banned-word matches keep only the word, not what the visitor wrote.
• Saved progress ("save and finish later") stays in the visitor's own browser until they submit.

Protecting your forms from abuse

• Every answer is checked again when it arrives, so a tampered page can't send something your form doesn't allow.
• Repeated submissions from one visitor are slowed down, and obvious bots are quietly ignored.
• Banned words, passwords, response limits and "one response per person" give you more control. See Schedule and limits.

Good habits

• Give each person the lowest role they need — see Users and roles.
• Remove people who leave your team.
• Use a strong password that you don’t use anywhere else.