We are a bank and require certain due diligence before we can use certain products. Does Gravity offer the SOC1 Security information for our bank to review. We will and do sign NDA's if necessary.
We are a bank and require certain due diligence before we can use certain products. Does Gravity offer the SOC1 Security information for our bank to review. We will and do sign NDA's if necessary.
SOC1 has to do with service providers. We aren't a service provider. Gravity Forms is a self-hosted product. It's not a web application we host for you like Wufoo, Formstack, etc.
So no, Gravity Forms does not offer SOC1 Security Information. It's not a hosted service. So the security, etc. falls on the user and where they are hosting and running the product itself. So it would fall on your web server and your database server where you are using Gravity Forms.
It also does not encrypt the form submission data by default, it can encrypt the data but would have to be done as a customization or a 3rd party Add-On for encrypting the data would have to be used (which does exist).