Back to Blog
Architecture4 min read

Why We Don't Store Your Submissions (And Never Will)

When we started building SingleForm, we made a decision that surprised a lot of people: we don’t store form submissions. Not encrypted. Not hashed. Not anywhere. Once a submission is delivered to your webhook, we forget it ever existed.

The Compliance Nightmare We Avoided

Every SaaS that stores user data inherits a massive compliance burden: GDPR, CCPA, SOC 2, HIPAA (if you touch healthcare), PCI DSS (if you touch payments), and whatever new regulation comes next.

Storing data means you need to handle data subject access requests, implement data retention policies, maintain audit logs, hire a DPO, get certified, and constantly prove you’re doing the right thing.

We looked at that and said: what if we just... didn’t?

Your Data, Your Responsibility (In a Good Way)

When you use SingleForm, submissions go directly to your webhook. Your systems. Your database. Your compliance framework.

This might sound like we’re pushing responsibility onto you—and we are, in a way. But think about it: you already have systems for handling customer data. You already know your compliance requirements. Why would you want another vendor storing copies of your data?

What We Actually Store

We’re not completely stateless. We store metadata about deliveries:

  • Timestamp of the submission
  • Success or failure status
  • Response time
  • Any error messages from your webhook

But the actual submission content? The name, email, phone number, address, whatever fields your form collects? We validate it, deliver it, and discard it.

The Trust Signal

Here’s the thing: we can tell you we don’t store data, but how do you verify that?

Look at our product. There’s no “View Submissions” page. No export button. No submission inbox. We couldn’t show you historical submissions even if we wanted to—because we don’t have them.

Our product design is our proof. You can’t accidentally leak data you never stored.

Is This Right for Everyone?

Probably not. If you want a form builder with a nice submission inbox, use Typeform or Jotform. They’re great products.

SingleForm is for teams who already have systems to receive data and don’t want another database to manage. We’re the delivery layer, not the storage layer.

Forms that deliver. We don’t peek.