Security

Your data is
safe with us

Security is built into every layer of WandForm, from runtime protection to access controls to how we handle incidents.

Data encryption

All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Encryption keys are managed via a dedicated key management service.

Access control

Role-based access control (RBAC) with Owner, Admin, Editor, and Viewer roles. Workspace isolation ensures data never crosses tenant boundaries.

Identity roadmap

Workspace roles and scoped dashboard access protect form management today. Enterprise identity-provider controls are on the roadmap.

Audit logging

Every significant action in the workspace is logged with timestamp, user, and IP. Audit logs are immutable and available for export.

Runtime protection

Public form and dashboard surfaces run behind managed production security controls, including TLS, abuse protection, rate controls, and monitored availability.

Responsible disclosure

Found a vulnerability? Email security@wandform.com. We respond within 24 hours and follow coordinated disclosure principles.

To report a security vulnerability, email security@wandform.com. Please include a description, steps to reproduce, and your contact info. We respond within 24 hours.