Palform

Always-on response encryption Every submission is encrypted with OpenPGP-based cryptography, so neither Palform nor an attacker with database access can read responses without the form owner's locally stored secret key.[1][2]

Branching logic with response recall Form builders set branching rules per question and reference earlier answers inside later questions, creating personalised paths that keep respondents engaged.[1]

Reusable branding schemes Colours, fonts, sizes, curves, and dark-mode friendly responsive layouts can be saved as schemes and applied across forms, with free hand-made templates as starting points.[1]

Webhook and email notifications Completed responses can trigger outbound webhooks and email notifications to connect form collection with existing applications and workflows.[1]

Hierarchical team permissions Organisations group users into teams with layered access to data, and the company states the system scales to thousands of users without per-head pricing.[1]

Client-side submission exports Machine-readable exports of a form's submissions are generated in the browser, preserving the end-to-end encryption guarantee instead of decrypting server-side.[1]

Free unlimited-responses tier The free plan includes unlimited responses, with paid plans adding response quotas, team capacity, exports, and attribution removal.[1][2]

Real-human support with a Business SLA Support comes from people over email on every plan, including free ones, and Business plan users get a guaranteed 24-hour first response backed by refunds.[1]

Sensitive-data collection teams Medical practices, financial advisers, and HR departments get encryption that keeps respondent data opaque even to the service operator, reducing breach exposure.[1]

EU-residency organisations European hosting, a published security write-up, and a dedicated data-protection contact for access requests give compliance-minded buyers concrete material to evaluate.[1][2]

Small teams on a budget Unlimited responses on the free plan plus human support without a paywall suit low-budget projects that still need respondent trust.[1][2]

No supported self-hosting Self-hosting is explicitly possible but unsupported, undocumented, and unversioned, so anyone needing a supported on-premises deployment should look elsewhere.[1]

Unproven SSO and API surface No official SSO documentation or public REST API for form management was observed, so identity-driven enterprises should verify these before committing.[1]

No independent security assurance Palform publishes its security approach but no independent audit was observed, so regulated buyers requiring third-party attestation will find a gap.[1]