What security measures does Paperform have in place?

Paperform follows industry best standards to keep your information safe, including SOC 2 and GDPR compliances. Please visit our Trust Centre at https://paperform.co/trust/ for more information.

Ongoing security is your responsibility

While Paperform systems are secure, the data you capture is only as safe as you handle it. Customers are responsible for the ongoing security and compliance of any data that is captured by their forms through Paperform services.

This may include opting to not use certain functionality like email summaries, or configuring additional security settings like bringing your own S3 bucket to enable private file uploads.

File uploads

Files uploaded to Paperform on forms are by default available via a unique URL. This URL gives access to the uploaded file to anyone who has it - so treat the security of this URL as you would the security of the file itself.

Customers who are capturing sensitive information can opt to bring their own S3 bucket to store files in, which can be configured to store files privately. This may impact the expected behavior of other features like accessing files via email, submission exports or integrations with third parties. To configure private uploads see more here.