Data Security
How FormOS approaches submissions, connected storage, and access control.
Connected storage model
FormOS routes public file uploads to the form owner's connected Google Drive or Dropbox account. Public submitters cannot choose the destination.
Submissions and signatures
Submission answers, signatures, initials, office-use fields, and completed status are stored so the form owner can review and finalize each workflow.
Activity timeline
Important submission events are recorded for owners, including creation, uploads, signatures, office updates, PDF generation, and email delivery status.
Secure access
Dashboard, submission, integration, and admin pages are protected by authentication and ownership checks. Super Admin views do not expose uploaded file links by default.
File exposure
FormOS does not create public Dropbox share links and does not expose storage provider tokens. Google Drive and Dropbox access remains server-side.