Your OpenForms data — including all responses to your forms — is securely stored in the cloud. We use web application firewalls, anti-malware solutions, and have industry-standard access controls to secure your data.
Data from users in Australia, New Zealand, and other countries in the Asia-Pacific region is stored within Australia. Data from users in all other countries is stored within the USA. This is to help comply with data sovereignty requirements for our Government clients.
If you want more information about your data, check out the Granicus Privacy Policy.For a more detailed breakdown of OpenForms security, contact support and ask for our Data Security documentation.
How We Treat Payment Data
If you're taking Payment Gateway payments through your forms it's important to know how we treat transaction data.
OpenForms (Granicus) as a PCI Security Council defined Service Provider understands its obligation to comply with the Payment Card Industry Data Security Standard (“PCI DSS”) and any amendments thereto.
Granicus acknowledges that it is responsible for securing customer cardholder data that it may transmit, store, or process on its systems or to the extent that Granicus could impact the security of our customer’s cardholder data environment.
Submit a ticket in our support portal if you require a copy of Granicus' Attestation of Compliance document for your PCI DSS records.
What Next?