Skip to content

How FormsAI keeps data secure

Encryption, hashed passwords, private files, spam protection and the checks on every request.

Written by
Updated

Every plan
  • Everything is served over HTTPS, including custom domains.
  • Passwords are stored as salted hashes; sessions are HttpOnly cookies on the web and tokens in the Keychain in the apps.
  • Stripe keys and Google access are encrypted at rest (AES-256-GCM). API keys are stored only as hashes.
  • Every request for your data is checked against your account and your team role.
  • Uploaded files are private, served only to you and your team.
  • Webhooks are signed so your server can check they're genuine.
  • FormsAI runs on Cloudflare, with nightly backups.
  • Public forms are protected by Cloudflare Turnstile, a honeypot and rate limits.

Found a security problem? Email support@shaheercare.com and we'll respond quickly.

Related articles