A slot anyone can use
A night depository takes deposits after hours and hands nothing back. A Formzed form is the same: anyone with the link can post an answer, nobody can read one back through it.
Your responses stay yours
How Formzed keeps form answers, CVs and interview recordings private, and who else handles them.
Senior product designer · Maya Chen's application
maya-chen-cv.pdf
182 KB · private storage
The file has no public address. Open asks Formzed for a link, and only people signed in to this workspace get one.
In plain words
Formzed holds what people tell you: form answers, uploaded CVs and IDs, AI interview recordings. We treat all of it as yours.
Files sit in private storage. Nobody can open one from a guessed address; Formzed hands your team a link that works for an hour.
Access rules in the database check every request, so one account can't read another's forms or responses, through the app or through our API.
We don't sell your data and we don't train AI on it. An AI model reads your responses only through features you use.
Security
Keep your account safe.
Password
We'll email you a secure link to set a new password.
Two-factor sign-inOn
8 recovery codes left
Settings › Security, on a paid plan with two-factor sign-in turned on.
Borrowed from the bank vault
A box with two locks
A safe-deposit box needs its owner's key and the bank's. A file in Formzed needs a teammate signed in to your workspace and a link Formzed signs for them.
A lock that keeps time
A vault's time lock opens it only for the hours it's set to. A file's link from Formzed opens it for one hour, then stops working.
Locks get checked
Vault doors are tested before they leave the works. We review Formzed's code for security problems; the latest whole-codebase review was on 25 October 2026.
Where one answer goes
Sent over HTTPS · into the slot
A night safe stands in for Formzed: answers go in through a slot anyone can use, wait in locked boxes, and come out only with your team's key, for the hour the time lock allows.
What protects it
Private files
Uploads live in private storage. Links in Formzed last an hour; links your automations send to Gmail or Sheets last 30 days, so the email still opens next week.
passport-scan.jpg
Your role can't open uploaded files in this workspace.
Roles you set
Owners, admins, members and viewers. On Team Growth and Scale you choose who can delete, export or open files, and an audit log records changes.
Response permissions
AdminsMembersViewersDelete responsesExport responsesOpen uploaded files
Two-factor sign-in
On paid plans, sign-in can ask for a code from an authenticator app. Our servers check it, so a stolen password alone doesn't open your data.
Enter your code
From the authenticator app on your phone.
481
Use a recovery code
AI that doesn't learn from you
AI answers use Claude by Anthropic, whose API terms rule out training on what we send. Voice interviews use Deepgram, with its training programme switched off.
Who has five or more years of React?
Of 212 applicants, 9 list five or more years of React. Priya Raman leads with seven, including a design system at…
Cards stay with Stripe
Plans and form payments go through Stripe's checkout. Card numbers are typed on Stripe's page and never reach Formzed.
Pro
$39 / month
You'll enter card details on Stripe's page.
Keys and passwords
API keys are stored only as a fingerprint (a hash), form passwords with PBKDF2, and wrong guesses are rate-limited. Passwords need eight characters with a capital and a number.
API keys
Zapier sync
fz_Q7hTb2kLm9…New password
Good
Who handles it, and what we've checked
Who handles your data
SupabaseDatabase, files and sign-in · Tokyo
CloudflareWebsite and API traffic
StripePayments
AnthropicAI answers (Claude)
DeepgramVoice interview transcripts
ResendEmails we send'/%3e%3cpath%20d='M30%2050%20L50%2030%20L70%2050%20L50%2070%20Z'%20fill='white'%20opacity='0.9'/%3e%3ccircle%20cx='50'%20cy='50'%20r='8'%20fill='url(%23grad)'/%3e%3c/svg%3e)
ComposioApps you connect to automations
GoogleAnalytics, only if you accept cookies
MetaAd measurement, only if you accept cookies
Checks we've done
- Whole-codebase security review25 Oct 2026
- Review of contact details and AI credits25 Oct 2026
- Review of automations, passwords and payments23 Oct 2026
- Security review22 Oct 2026
- Security review14 Oct 2026
- Known vulnerabilities in our code libraries0 open
Questions buyers ask
Do you have SOC 2?
Not yet. We're planning a SOC 2 audit. Until then this page says what we do and what we don't, and you can send questions to contact@formzed.com.
Is our data used to train AI?
No. We don't train models on your data. Anthropic's API terms rule out training on what we send, and Deepgram's model-improvement programme is switched off for voice interviews.
Where is our data stored?
In Supabase's Tokyo region in Japan: the database, uploaded files and sign-in. Website and API traffic passes through Cloudflare's network.
When does the AI read our responses?
When you use an AI feature: asking a question about responses, matching CVs (each CV is read once when it arrives, to build its profile), running an AI interview, or an automation step you set up with AI.
Can people who fill in a form see other answers?
No. A form only lets people send an answer. Reading answers needs a signed-in account in your workspace, or a report link you choose to share.
How do we delete data?
Delete a response and its uploaded files leave storage within about 15 minutes. Interview recordings are deleted 7 days after the interview. To delete your whole account, email contact@formzed.com from the account's address.
Can we turn on two-factor sign-in?
Yes, on any paid plan: Settings › Security › Set up 2FA. You also get 10 recovery codes for when your phone isn't to hand. See the plans.
What happens to card details?
They're typed on Stripe's checkout page and go to Stripe. Formzed never receives or stores card numbers.
Found a security problem?Tell us first.
Email us what you found and the steps to see it. Please test only with your own account, and don't touch other people's data or slow the service down.
The arrow opens a new email with "Security report" as its subject.
- contact@formzed.com
- Data region
- Tokyo, Japan
- Page updated
- 26 October 2026
The vault door drawing is Hairline's Vault by Lucas Marques (MIT).