Encryption in transit
Traffic between your browser and FormFlow uses TLS (HTTPS). Database connections also require TLS.
Security
Your business data, protected by infrastructure built for scale.
FormFlow partners with specialized payments, banking, hosting, and database platforms — the same class of providers trusted by major companies worldwide — so invoices, books, and customer records stay behind modern security controls.
Who helps protect FormFlow
Specialists for payments, banks, hosting, and data.
We do not reinvent card networks or bank login. We use established platforms and add FormFlow’s own access controls on top.
Card payments
Sola Payments (Cardknox)
Plan billing and customer invoice cards go through Sola iFields. Full card numbers are tokenized for PCI-aware processing — FormFlow never stores raw card numbers on our servers.
Bank connections
Plaid
When you connect a bank, FormFlow uses Plaid — the same kind of banking infrastructure used by major financial apps. We do not store your bank password.
Application hosting
Vercel
The FormFlow app runs on Vercel’s global edge and cloud platform, with HTTPS by default and infrastructure used by many of the world’s largest software companies.
Database
Neon (Postgres)
Business records live in a managed Postgres database on Neon, with encrypted connections (TLS) between the app and the database.
Sign-in & access
Secure sessions
You sign in with a secured session. Admin and salesperson areas are role-gated. Sensitive money actions can require password confirmation. Login attempts are rate-limited to slow abuse.
Notifications
Encrypted email delivery
Transactional mail (receipts, invites, password resets, security notices) is sent over encrypted SMTP from FormFlow domain addresses — never inventing contacts from a visit alone.
How we operate
Security measures you can count on day to day.
Least privilege
Only admins create salespeople. Salespeople see their own invites and commissions. Customers see their own workspace — not someone else’s.
Honest connection status
A bank or payment connection is never marked live until it actually works. We do not fake “connected” badges.
No card vault on FormFlow
Card entry uses Sola’s hosted fields / tokens. FormFlow keeps payment identifiers needed for your ledger and receipts — not the full PAN.
Questions about privacy or security?
See the Privacy Policy, browse FAQs, or contact support.
No online service is perfectly risk-free. We design FormFlow so sensitive payment and bank credentials stay with specialized providers, and so access inside FormFlow stays limited to the right roles.