Trust
Trust Center
Security, legal, and honest disclosure about what's built versus what's still on the roadmap — in one place instead of scattered across the site.
Where your data actually goes
Every uploaded file is scanned for malware before your team ever sees it, and every action is written to an audit trail. See "Data retention" below for how long files are actually kept.
✓ Live today
Two-factor authentication
Automatic data deletion
Redacted audit log
Signed webhooks
Not yet — on the roadmap
SOC 2 certification
HIPAA certification
Certified e-signature
Security
How data is actually protected, and who else touches it.
Why Vaultform →
Our real security and design choices, and what we’re still building toward.
Subprocessors →
Every third-party service that touches your data, and why.
Legal
The actual agreements governing your use of Vaultform.
Terms of Service →
What you’re agreeing to when you use Vaultform.
Privacy Policy →
What data we collect and what we do with it.
Roadmap
What is real today versus what is planned.
Public roadmap →
SOC 2, certified e-signature, self-hosting — honest status on each.