Powerful Enterprise-level Security for Every Form

Automatic Session Timeout

123FormBuilder performs daily, real-time data backups, so your form data is securely replicated and stored on AWS. We keep your data for 30 days. If you choose to delete it, we’ll no longer store it in our system. Your data belongs to you, and only you. But, if you delete any data by accident, upon request, we can recover it for you within 30 days. At your request, we can also transfer forms from one account to another and recover any CSV file of any form you own.

User Multi-Factor Authentication

Add the Multifactor Authentication (MFA) as an additional step to your login process to double-check the user’s identity, minimizing the risk of identity theft and ensuring only authorized access.

Password Protection

With a robust password policy in place, 123FormBuilder requires all users to create a strong password that needs to check a series of requirements before being accepted. If you have a HIPAA account, you need to change your password every 90 days. And while this is a requirement for HIPAA accounts, we recommend to all of our clients to change their password every 90 days for extra protection.

To prevent any hacking attempts or brute force attacks, the system allows five login attempts before locking the user out until further notice from 123FormBuilder’s team, which is immediately notified.

Data Residency in the US and Europe

123FormBuilder is hosted on AWS (Amazon Web Services) with data centers across the US (North Virginia) and EU (Frankfurt), ensuring the platform’s geographical redundancy. By relying on AWS’s strict security protocols, we store your data on highly guarded servers while complying with the local laws and regulations to ensure complete protection of your data privacy. For example, if your data resides in the EU, you’ll find that we are also fully GPDR compliant.

Based on your location or preference (for our Enterprise plans), you can choose where you want to store your data. And it will never leave the EU or US without your permission.

Daily scans, AES encryption, and thorough 24/7 monitoring for potential threats and unauthorized activities are just some of the measures that keep all data encrypted and protected in multiple AWS data centers across the world.

The Single Sign-On (SSO) option streamlines your 123FormBuilder login using a single set of credentials. We integrate with major OpenID Connect and SAML identity providers, such as Microsoft Azure and Google.

SSO simplifies user interactions with your forms, eliminating multiple logins and enhancing security. With precise access controls, you stay informed about form data interactions. This singular access point improves customer experience, boosts security, and reduces IT costs. SSO is exclusively available in our Enterprise plans.

Custom Roles & Permissions

In 123FormBuilder Enterprise, customize user roles and permissions to encourage collaboration while maintaining form security. Define roles with specific access levels for forms, folders, and users. Easily manage access by granting, restricting, or revoking permissions. Admin users have full access, including creating users and granting detailed permissions. Standard users can view, edit, or create forms without configuring account settings or managing other users.

123FormBuilder provides a comprehensive audit trail for your account and forms, offering control over every activity. Monitor events like logins, form deletions, field edits, new user additions, and submissions. Track activities per user, form, and the entire account.

For HIPAA compliance, this tamper-proof log is crucial. Easily identify actions such as user logins, accessed data, and form edits. The automatic activity log enhances security, ensuring traceability and transparency for your system. Access your data anytime for complete peace of mind.

SLA (Service Level Agreement)

123FormBuilder offers SLAs to Enterprise customers. We’re keeping our system up and running with a guaranteed uptime of 99,99% while you count on a reliable tool with uninterrupted work. Along with the guaranteed software uptime, we’re committed to ensuring that we deliver on the response times, support availability, and the high-quality service requirements agreed upon in your SLA. You can always check 123FormBuilder’s operational status at this link.

We conduct periodic audits on our infrastructure through vulnerability scans and Pen Tests (performed by an authorized third-party security vendor) to evaluate our system’s integrity. Our team promptly fixes any discovered vulnerability, providing you with the highest security standards at all levels.

Employee Security & Training

All 123FormBuilder employees go through mandatory security training specific to their role. They learn about the company’s security policies, our compliance regulations (HIPAA, GDPR, etc.), data privacy best practices, how to spot and report security threats and vulnerabilities, and much more. We train our employees regularly, so every team member is aware of the latest security measures, building a strong security culture in our organization.

Additionally, we use Single Sign-On to login into all 123FormBuilder tools and rely on Multifactor Authentication (MFA) as an extra security protocol that ensures our platform’s protection against cyber-attacks and other threats.

Sender Policy Framework (SPF) and Domain Keys Identified Mail(DKIM) are fundamental components of email authentication and help protect email senders and recipients from spam, spoofing, and phishing.
SPF enables email senders to specify which IP addresses are allowed to send mail for a specific domain. DKIM offers the encryption key and digital signature to confirm that an email message was not falsified or changed.
We’ve included them as add-ons in our Enterprise plans, to ensure stellar user experience and brand reputation, in addition to safeguarding your company.