PLEASE NOTE: These forums are no longer utilized and are provided as an archive for informational purposes only. All support issues will be handled via email using our support ticket system. For more detailed information on this change, please see this blog post.

SOC1 Security Information

  1. We are a bank and require certain due diligence before we can use certain products. Does Gravity offer the SOC1 Security information for our bank to review. We will and do sign NDA's if necessary.

    Posted 11 years ago on Monday June 10, 2013 | Permalink
  2. SOC1 has to do with service providers. We aren't a service provider. Gravity Forms is a self-hosted product. It's not a web application we host for you like Wufoo, Formstack, etc.

    So no, Gravity Forms does not offer SOC1 Security Information. It's not a hosted service. So the security, etc. falls on the user and where they are hosting and running the product itself. So it would fall on your web server and your database server where you are using Gravity Forms.

    It also does not encrypt the form submission data by default, it can encrypt the data but would have to be done as a customization or a 3rd party Add-On for encrypting the data would have to be used (which does exist).

    Posted 11 years ago on Monday June 10, 2013 | Permalink

This topic has been resolved and has been closed to new replies.