formtrovePrivate by design
Customer files will be used only to perform the action requested. FormTrove will not sell document contents, use them for advertising, or train AI models on them.
FORMTROVE TRUST CENTER
Security should be understandable.
We make money when FormTrove saves you time—not by studying, selling, or training on your files. This page separates protections that are operating now from the independent checks required before paid public launch.
Protected accounts, file screening, encrypted intake, faxing, and PDF services are connected.
Clerk protects account access. Local file tools stay in the browser. Stored intake and packet files are content-screened, isolated, and encrypted with AES-256-GCM. Telnyx handles requested fax delivery, Adobe handles requested OCR and PDF protection, Better Stack independently monitors the live status page, and Resend delivers sanitized operational alerts. Paid plans and the general document vault remain disabled.
Encryption required
Every production file path must use encrypted transport and encrypted storage. Secrets stay server-side, access is scoped, and sensitive actions can require a fresh sign-in.
Defined deletion windows
Temporary fax PDFs are deleted after final status or within 24 hours. Limited fax and PDF job records are automatically removed after 90 days. Saved profiles and contacts remain editable and deletable by their owner.
Recoverable operations
The production backup system creates encrypted database and durable-file snapshots, retains them for 30 days, checksum-verifies them, and rehydrates them in a non-destructive restore drill. The first protected production verification passed on July 20, 2026; recurring scheduling and a separate isolated full-restore exercise remain launch requirements. No service can promise zero loss, so customers should keep originals of critical documents.
BUILT FOR REAL WORK
Business controls without enterprise clutter.
Shared workspacesSeparate personal and company documents with clear ownership.
Roles and approvalsControl who can upload, send, sign, view, or administer.
Receipts and audit historyTrack file jobs, fax delivery, downloads, deletion events, and account changes.
Secure intake linksCollect documents from clients without asking them to email attachments.
Templates and autofillReuse approved fields and common packets while previewing every change.
Retention policiesSet deletion schedules by workspace, document category, or workflow.
PAID-LAUNCH READINESS
What is complete and what still needs independent proof
“Early access” can be removed after every required item is complete, the policies have an approved launch date, and paid checkout has been tested end to end.
- Clerk account protection and server-side ownership checks
- Application-layer encryption for fax, intake, and packet files
- Content screening, file isolation, size and type limits
- Required Cloudmersive malware scanning with fail-closed uploads
- Per-account and per-network rate limits
- Automatic temporary-file and intake-file deletion windows
- Central activity logs and public health endpoint
- Independent Better Stack uptime monitoring and public incident history
- Sanitized operational and security alerts through Resend
- Verified encrypted backup and non-destructive restore drill
- Verified clean/unsafe malware-scanner self-test
- Sign the Cloudmersive vendor and data-processing review
- Schedule recurring maintenance and complete an isolated full restore
- Independent application security review and remediation sign-off
- Incident-response tabletop exercise with named owner
- Qualified attorney approval of terms, privacy, refunds, and liability language
- Stripe live-mode identity, bank, tax, and payment approval
No borrowed compliance badges
FormTrove will not display SOC 2, HIPAA, or another compliance badge unless FormTrove itself has independently earned it and the claim applies to the advertised service. A vendor’s certification is not FormTrove’s certification.