Not even we can read your submissions.

Cyphorm is the world's most secure form builder. Every submission is end-to-end encrypted in the browser using the Web Crypto API. We store ciphertext only. You hold the only key.

// 1. Respondent fills form
{ "name": "Alice", "salary": "$150k" }
// 2. Browser encrypts with AES-256-GCM
U2FsdGVkX19H...c9aFp3KzQ=
// 3. AES key wrapped with your RSA public key
MIICIjANBgkqh...kiG9w0BAQEFAAo=

Why Client-Side Crypto Matters

Other secure form builders manage your encryption keys for you. This means they can read your data if subpoenaed or hacked. We can't.

1. Local Generation

When you create an account, your browser generates a 4096-bit RSA keypair. The private key never leaves your device.

2. E2E Encryption

When a respondent submits a form, the data is encrypted using your public key before it hits the network.

3. Zero Knowledge

Cyphorm's database receives mathematical garbage. Only you can decrypt it on your dashboard.