For organizations that value certainty — municipalities, schools, healthcare and associations. No marketing promises, just what we actually do.
Our servers run in a Dutch data center under our own management — not in a cloud from an American big-tech provider. Your submissions, account data and email stay within that environment. That way you keep control over where your respondents' data is stored.
All traffic runs over encrypted connections (TLS/https), including on your own domain, for which we automatically arrange a valid certificate. Passwords and sensitive keys (such as payment integrations) are stored encrypted. Daily backups make sure nothing is ever lost.
We send email via our own mail server with SPF, DKIM and DMARC configured correctly — that keeps confirmations and notifications out of the spam folder. Want to send email from your own domain (noreply@yourorganization.nl)? Then the app checks live whether your SPF/DKIM are set up correctly before you turn it on.
Accounts can enable two-factor authentication (2FA). Working with several people? Then you share one account using roles: owner, admin, reviewer (submissions only) and read-only (for example the treasurer). An account always keeps at least one owner — so no one can accidentally lock themselves out — and ownership can be transferred without losing any data.
Privacy-sensitive actions — such as exporting or deleting personal data and accepting the data processing agreement — are recorded in an audit log. That way it's always clear afterwards who did what, and when.
For each form you set a retention period: submissions are automatically deleted after that. You collect no more than necessary and old data is cleaned up automatically — exactly as the GDPR intends.
For the personal data you collect through your forms, you are the data controller and we are the data processor. You accept the data processing agreement in the app, with the version and date recorded; whenever there's a new version, we ask you to agree again. See also our GDPR page and privacy policy.
You can export all your account data at any time (forms, settings and submissions as a single file) — handy for your own records or for switching providers. If a respondent sends you an access or deletion request, you export or delete their data by email address, per form.
Payments from your respondents go directly through your own payment account (Mollie, Moneybird and more). We only receive the payment status — we store no card details and never stand between you and your money.
Report it responsibly via info@formuliermet.nl. We respond quickly, take it seriously and keep you updated. Misusing a discovered vulnerability is, of course, not the intention.
Questions about security or a specific compliance requirement for your organization? Email info@formuliermet.nl — we're happy to help think it through.