Security
Built on Cloudflare.
Protected by their network.
FormKove runs on Cloudflare Workers, D1, and KV — the same infrastructure protecting millions of websites. Your submissions are isolated, encrypted, and handled with care.
Infrastructure
- Cloudflare Workers (edge runtime)
- Cloudflare D1 — SQLite at the edge
- Cloudflare KV — globally distributed
- Automatic TLS on all connections
- DDoS protection via Cloudflare network
Data handling
- Submissions encrypted at rest
- No sharing or cross-tenant data access
- Data retained per user preference
- Deletion requests honored immediately
- No third-party analytics or tracking
Access control
- Better Auth (email/password)
- Role-based access (owner/admin/member)
- API keys scoped per form
- Session tokens with configurable expiry
- No shared credentials across users
Spam & abuse
- Honeypot fields — zero user friction
- Cloudflare Turnstile integration
- Per-form KV-backed rate limiting
- SSRF protection on outbound webhooks
- No arbitrary code execution possible
Report a vulnerability
Found a security issue? We take disclosures seriously. Reach out and we'll respond within 48 hours.
security@formkove.com