Security is part of stewardship. Form Digital builds custom-coded systems and, through its care plans, keeps them stable and protected after launch. This page outlines our general approach.
How we build
Custom-coded, modern frameworks with a small, auditable surface area. Managed hosting and deployment on trusted infrastructure (Vercel). Secrets and credentials kept in environment variables, never committed to source. HTTPS by default across all pages and forms.
Partner account safeguards
Partner access requires email verification. Account APIs check the signed-in identity and restrict partner records to their owner. Photos use private storage and short-lived access links rather than a public directory. Account and referral changes are recorded for security and support; audit records exclude passwords, access tokens and full banking details. The current partner release does not collect banking information or execute payments.
These statements describe the account functionality when it is enabled. They are not a claim of SOC 2 certification, a completed independent audit, or absolute protection against every threat.
How we maintain
Care plans include security basics — dependency and platform updates, deployment stability, issue monitoring, and prompt fixes — so systems stay protected as they age.
Reporting a vulnerability
If you believe you have found a security issue with this site or a system we maintain, please email security@formintel.co with the details. We will review and respond as quickly as we can, and we ask that you avoid publicly disclosing the issue until it has been addressed.
Important note
This page describes our general approach and is not a warranty or contractual commitment. Specific security terms for an engagement are defined in your project agreement.