Feedback: Data Collection

  • Paul Jamieson
    Asked on October 17, 2022 at 11:57 AM

    Our business is concerned with jotforms access to our data during the transmission between form input to the database. What guarantee do we have that all of our data is not also collected by jotform?

  • Carlo JotForm Support
    Replied on October 17, 2022 at 12:22 PM

    Hello Paul,

    Thanks for contacting Jotform Support. Regardless of which plan you have, all of your forms are served across a protected 256-bit Secure Socket Layer (SSL) connection that uses a SHA256 Certificate. It's industry-standard protection. For encrypted forms, submissions are encrypted with high-grade RSA 2048 on our user's computers, and then transferred and stored securely on our servers.

    Jotform’s data servers are co-located in a cloud-based architecture with Google Cloud and Amazon Web Services (AWS). Google Cloud data centers are hosted in Iowa (USA). AWS data centers are located in Frankfurt, Germany (EU), and Virginia (USA). Hosting Jotform on these major cloud platforms also provides us with some extra benefits with the implementation of security-best practices in areas like hardware lifecycle management, physical security, and network infrastructure. Our servers are regularly updated and patched.

    If you’re a Jotform Enterprise user, you can choose the physical location of your dedicated cloud server and host your data in any part of the world. This is especially important for complying with data privacy rules and location requirements in places such as Australia, Canada, the UK, and EU. Only users and admins within your Enterprise account will be able to access your data server.

    We also have an article about Jotform Security Measures that you can check out.

    Reach out again if you have any other questions.