FormenticSecurity summary
October 2026
October 2026
Security summary
Formentic builds forms and pages that run on your own Salesforce Marketing Cloud. Your customers’ answers are saved by code on your own Cloud Page, straight into your own Data Extensions. They never pass through Formentic and Formentic never stores them.
No dependency on FormenticLive forms run entirely on your own Cloud Pages and don’t connect to Formentic. They keep working if Formentic is unavailable, and after you stop using it.
What goes where
| What | Where it’s kept | Who controls it |
|---|---|---|
| Your customers’ answers | Your Data Extensions in your Marketing Cloud | You (Salesforce hosts it) |
| Test screenshots | Your Content Builder, Formentic › 01 Forms › Test screenshots | You |
| Form designs, settings and your team’s logins | Formentic, London, United Kingdom | Formentic, for you |
| Your Marketing Cloud keys | Formentic, encrypted at rest | Formentic, for you |
Access to your Marketing Cloud
- Your own installed package, server-to-server, made by your admin
- Four permissions only: Data Extensions, Saved Content, Documents and Images, and Email (Read and Write)
- Formentic works only in the Formentic folders it creates, and in the sends of its own emails when you ask
- Revoke it any time by deleting the package
How Formentic is run
- Encrypted in transit (TLS 1.2 or higher) and keys encrypted at rest
- Each workspace separated by the database itself (row-level security)
- Passwords stored only as salted hashes
- Two-step sign-in, session length and IP allowlist, set by your admins
- Every change in the Activity log, visible to your admins
- A personal data breach reported within 48 hours (DPA)
Sub-processors
| Supabase | Database, sign-in and files | London, United Kingdom |
| Netlify | Hosting | London, United Kingdom |
| Resend | Account emails | Ireland (EU) |
| Google Workspace | Support email and calls | EU and United States |
Certifications. Formentic doesn’t hold SOC 2 or ISO 27001 yet. Our practices follow those frameworks, and we’ll answer your security questionnaire.
Full detail: formentic.com/legal/security · DPA · Sub-processor listQuestions: security@formentic.com