Least privilege
Forms write as an application user you create, with a security role that can create the rows your forms need and nothing else.
Security and privacy
Built so there is less to protect.
The safest data is data that was never kept. Where something has to be kept, it is kept as little and as briefly as possible.
Secrets in Key Vault
Client secrets and sign-ins are kept in Azure Key Vault and never written to the database, a log or a screen.
Checked on the server
Every answer is validated against the published form on the server, whatever the browser claims. A choice the form never offered is refused.
Bots stay out
A hidden honeypot, a signed timing check and a limit per visitor. No captcha, so real customers are never slowed down.
Nothing leaks to the page
The public form never reveals which tables it writes to, its fixed values or who receives the email.
Your websites only
Limit each form to your own domains, so nobody can put your form on somebody else's website.
Where it runs
In the EU, in Azure
The service, the database and the keys run in Microsoft Azure's West Europe region. Answers written to Dynamics 365 go straight to your own environment.
- Encrypted in transit and at rest
- Keys and tokens in Azure Key Vault
- Stored copies deleted after the days you choose
- A delivery log that never keeps what was sent
Accessibility
Forms everyone can fill in
Forms are tested against WCAG 2.2 AA: keyboard, screen readers, zoom and contrast.
- Every field labelled, every error announced
- Signatures can be typed instead of drawn
- Works at 320 pixels wide without scrolling sideways
- Respects reduced motion