Encryption everywhere
Data is encrypted in transit with TLS 1.2 or higher, and at rest with AES-256. Backups are encrypted too.
How Forma protects your data
Encryption, access controls, connected apps, and what happens to your data when you leave.
Access you control
Two-step verification for every account, project roles and permissions on Team, and single sign-on on Enterprise.
A clear record
Automations log every action they take. Enterprise workspaces add an audit log of sign-ins, permission changes, and exports.
Careful integrations
Connected apps use OAuth with the narrowest permissions Forma needs. Disconnect an app and its access is revoked immediately.
Your data, portable
Export projects, tasks, and comments as CSV or JSON at any time. Delete your workspace and its data is removed from active systems.
Private by design
Forma does not sell your data or use the contents of your workspace to advertise to you. Staff access is limited and logged.
Responsible disclosure
Report an issue
Reporting a security issue
Please report security issues privately so we can fix them before they are disclosed. We will confirm we received your report, keep you updated, and credit you if you want.
- Give us reasonable time to investigate before sharing details publicly.
- Do not access, change, or delete data that is not yours.
- Avoid testing that degrades service for other people.
This page describes how Forma is designed to handle security. Forma is presented here as a design concept, and no third-party compliance certifications are claimed.
Try Forma with your own projects
Start on the free plan, import a board, and see how much of your week it takes care of.
Free plan available. No credit card needed.