Your OpenForms data — including all responses to your forms — is securely stored in the cloud. We use web application firewalls, anti-malware solutions, and have industry-standard access controls to secure your data.
Data from users in Australia, New Zealand, and other countries in the Asia-Pacific region is stored within Australia. Data from users in all other countries is stored within the USA. This is to help comply with data sovereignty requirements for our Government clients.
How we treat payment data
If you're taking Payment Gateway payments through your forms it's important to know how we treat transaction data.
OpenForms (Granicus) as a PCI Security Council defined Servicer Provider understands its obligation to comply with the Payment Card Industry Data Security Standard (“PCI DSS”) and any amendments thereto.
Granicus acknowledges that it is responsible for securing customer cardholder data that it may transmit, store, or process on its systems or to the extent that Granicus could impact the security of our customer’s cardholder data environment