Source
Security page — Formbricks
Checked for Formbricks on 28 Oct 2026
- Page
- https://formbricks.com/security
- Checked
- 28 Oct 2026, 14:13 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:c3f33faec156f7da5e3bb74e2a975322b8af0a60c4b4f6b73c4dd1d38cd8b502
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
GDPR CCPA Report an error
“Formbricks is fully compliant with both GDPR and CCPA, giving users clear rights to access, modify, or delete their personal data.”
-
ISO 27001 Report an error
“We are also ISO 27001 compliant.”
-
Encryption Report an error
“All data is encrypted in transit (HTTPS/TLS 1.3) and at rest (AES-256). Even backup copies of data are stored in encrypted form.”
-
Region Report an error
“Formbricks Surveys is hosted in Germany to ensure EU privacy law compliance.”
-
Pentest Report an error
“Annual independent penetration tests are conducted. Critical findings are addressed immediately.”
-
No legal action Report an error
“We commit to taking no legal action against those who follow responsible disclosure practices, and we are happy to provide public credit for validated reports.”
-
Code quality Report an error
“Automated static code analysis (SonarQube) runs on every change, catching bugs, code smells, and security vulnerabilities before they reach production.”
-
Peer review Report an error
“every change is peer-reviewed by another engineer and tested in CI/CD”
-
Error monitoring Report an error
“We employ automated error monitoring with Sentry, which reports critical issues directly to the Formbricks engineering team to ensure rapid detection and resolution of bugs in production systems.”
-
Security updates email Report an error
“We encourage all users ( including Community Edition users ), to sign up here to receive occasional notices, patches, and best practices directly by email.”
-
Trust center Report an error
“See our live Trust Center for the latest security, compliance, and reliability updates.”
11 facts read from this page are not shown because they could not be confirmed on the page as captured.
Scores citing this record
- The Academic Researcher Consent, GDPR & respondent data
- The Academic Researcher European sovereignty
- The Data Protection Officer Consent, GDPR & respondent data
- The HR Lead Consent, GDPR & respondent data
- The Market Researcher Consent, GDPR & respondent data
- The Skeptic Consent, GDPR & respondent data