Security

How we protect your account, your forms, and your respondents’ data.

Hosting & data residency

FormHouse runs on our own infrastructure in the EU. Your data doesn’t leave the EU.

Encryption

All traffic is encrypted in transit (TLS). Data is encrypted at rest.

Access control

Sign-in is via Google OAuth or passwordless email magic links — we never store passwords. Workspace data is scoped so one account can never see another’s forms or submissions.

Anti-spam & abuse protection

Cloudflare Turnstile, honeypot fields, and rate limits run on every tier, including Free.

No AI training on your data

Form content and submissions are never used to train AI models.

Reporting a security issue

Found a vulnerability? Please email us via the Support page — we take reports seriously and respond quickly.