Security

Transport. Everything is served over HTTPS with HSTS. Strict security headers (CSP, frame-ancestors none, nosniff) are set on every page.

Access. There are no accounts and no passwords to leak. Each form is managed through a private high-entropy link that acts as its only key; form data is only reachable through the application.

Data handling. Uploaded PDFs are processed to build your form, including by the Anthropic Claude API for field extraction. Submissions are encrypted in transit, delivered to the email you configure, and kept with the form so your exports and downloads keep working. Stored copies of filled PDFs are pruned after 90 days and regenerated on demand from the answer record.

Abuse controls. Rate limits, bot honeypots, file-type validation, and size limits apply across the service.

Scope. filledform is not intended for legally binding documents, e-signatures, or regulated records (e.g. HIPAA). Please don't use it for those.