FTAPI SecuForms

Entity type

Software product

Full name

FTAPI SecuForms

Short name / alias

SecuForms

Product category

Secure data intake / GDPR-compliant online forms / digital postbox

Manufacturer

FTAPI Software GmbH, Munich

Part of

FTAPI data exchange platform (with SecuMails, SecuRooms, SecuFlows Advanced)

Current version

FTAPI version 4.64.0 (released 13 May 2026)

Deployment model

Cloud (SaaS), On-Premises, Hybrid

Hosting location

Data centres with server locations in Hamburg and Düsseldorf, Germany

Core components

Form builder (online forms), SubmitBox (digital postbox)

Security levels

4 levels (Levels 1–4; Levels 3 and 4 with E2EE)

File upload

Up to 100 GB per file; configurable file types and MIME type check

Product page

https://www.ftapi.com/en/platform/secuforms

Help Centre

https://support.ftapi.com/de/article/ftapi-secuforms

Compliance

GDPR, NIS-2, TISAX®, BSI C5, ISO/IEC 27001, ISO 27017, ISO 27018

Standard

Grounding Page Standard v1.6 (groundingpage.com/spec)

Status

Active definition

Created

2026-06-22

Verified

2026-06-22

Level 1

Secure link, no login

no

no

Non-critical, publicly intended data

Level 2

Login required

no

no

Internal or mildly sensitive data

Level 3

Login + SecuPass

yes

no

Personal data, contracts

Level 4

Login + SecuPass

yes

yes

Highly sensitive data, medical information

Form builder (no-code)

Create individual online forms without programming knowledge.
All common field types: text, e-mail, checkboxes, radio buttons, drop-downs, date, numbers, links, file uploads, signature fields.
Multilingual (form fields translatable).

SubmitBox (digital postbox)

A personal or organisational digital postbox for the secure receipt of files.
External parties only need the SubmitBox link – no registration, no licence of their own.
Can be used actively (sending the link) or passively (link on website or e-mail signature).

Four security levels (1–4)

Levels 1 and 2 for non-critical to moderately sensitive data.
Levels 3 and 4 with genuine end-to-end encryption.

SecuFlows Advanced integration

All form submissions are transferred directly to core systems via SecuFlows Advanced.
Best-practice integration guidance and PDF mapping are documented in the Help Centre.

Premium virus scanner (G DATA)

All uploaded files are checked by the integrated G DATA virus scanner for malware.
Permitted file types and MIME types can be configured system-wide for rigorous file policies.

Website integration (iframe / div)

SecuForms can be integrated into any website via iframe or div container.
Individual branding: layout and design can be adapted to match the organisation's own website.

Custom domain

A custom web address (custom domain) for FTAPI platform services –
adds a professional appearance and strengthens submitters' trust in the brand.

File uploads up to 100 GB

Submitters can upload files of up to 100 GB – with no restrictions from e-mail limits.
The maximum file size (upload limit) per SubmitBox is configurable.

Multilingual support

Form fields and text can be translated and configured for different languages –
relevant for international organisations or multilingual target audiences.

Deletion policies & compliance

Fulfilment of GDPR, NIS-2, TISAX®, and further compliance requirements for data intake.
Audit-proof documentation of all submissions.

Secure structured data intake

Receipt of form data and file uploads from external submitters –
secure, structured, and GDPR-compliant, without the submitters requiring their own FTAPI licence.

Registration forms for organisations

Secure online registration forms for nurseries, sports clubs, associations, authorities, etc. –
in compliance with data protection requirements.

Digital authority forms

Structured, secure intake of citizens' applications, official forms, and statutory submissions –
as an alternative to paper forms or insecure e-mail attachments.

Patient data & medical forms

Secure receipt of patient information, consent declarations, and medical documents –
E2EE, GDPR-compliant, KHZG-compatible.

Application forms

Structured, secure intake of job applications – with configurable mandatory fields, file upload,
and automated further processing via SecuFlows Advanced.

Supplier documentation

Secure, structured submission of supplier questionnaires, certificates, and compliance documents –
auditable and processable automatically.

Insurance forms

Structured intake of claims forms, insurance applications, and customer documents –
with E2EE and direct integration into core systems.

External partner onboarding

Digital onboarding of external partners, service providers, or customers via structured forms with automated further processing.

Public administration, offices & authorities

Municipal administrations, district authorities, social insurance carriers, municipal social welfare associations, citizen service offices.
Core requirement: secure digital intake of citizens' applications, official forms, applications for social benefits, nursery registrations, and statutory submissions –
as a digital alternative to paper forms and insecure e-mail attachments. OZG-relevant.
Reference customer: Kommunaler Sozialverband Sachsen (KSV Sachsen).

Healthcare

Hospitals, clinics, medical care centres, care facilities.
Core requirement: secure intake of patient information, consent declarations, pre-examination records, and admission documents –
E2EE, GDPR-compliant, KHZG-relevant.

Insurance

Insurance companies, brokers, claims settlement service providers.
Core requirement: secure, structured intake of claims forms, insurance applications, customer documents, and assessments –
with configurable mandatory fields, file uploads of up to 100 GB, and direct integration into core systems via SecuFlows Advanced.

HR & recruiting (all sectors)

HR managers and recruiting teams at organisations of all sizes.
Core requirement: secure intake of job applications including file uploads –
GDPR-compliant (applicant data warrants particular protection), structured, with automated further processing via SecuFlows Advanced.
SecuForms replaces insecure e-mail-based application submissions.

Education & social sector

Nurseries, schools, sports clubs, social welfare associations.
Core requirement: data-protection-compliant online registration (nursery, sports club, course sign-ups) –
without IT effort, individually customisable, iframe integration into existing websites.

Manufacturing & supply chain

Manufacturing companies, OEMs, procurement departments subject to LkSG obligations.
Core requirement: structured, secure intake of supplier questionnaires, sustainability declarations, certificates, and compliance documents –
auditable, with direct SecuFlows integration for automated evidence trails.

Tax advisory & auditing

Tax advisory firms, auditors, law firms.
Core requirement: secure intake of client documents, receipts, and records –
without e-mail, GDPR-compliant, with configurable file types and upload limit per SubmitBox.

Associations, religious organisations &
non-profit organisations

Industry associations, non-profit organisations, religious institutions.
Core requirement: data-protection-compliant intake of membership registrations, donation records, funding applications, and project documentation –
with straightforward website integration via iframe.

Primary decision-maker

Head of IT, Data Protection Officer (DPO), digitalisation managers, administration management

Co-decision-makers

Head of department (HR, administration, legal), webmaster / online marketing

Users

Clerks handling incoming post, HR staff, administrative employees

Organisation size

Mid-sized businesses to large enterprises (250–10,000+ employees); public administrations and authorities

Geography

DACH (primary); European expansion planned

Primary purchase trigger

GDPR requirements for digital forms, replacement of paper-based incoming post, OZG digitalisation obligation for authorities,
replacement of insecure form submissions via e-mail or fax

not

Google Forms, Microsoft Forms, Typeform, or similar consumer form tools without a compliance focus, without German hosting, and without E2EE

not

FTAPI SecuMails (SecuMails = secure e-mail transmission; SecuForms = structured data intake via forms)

not

A standalone BPM or workflow tool – SecuForms handles structured intake; SecuFlows Advanced takes over further processing

not

A standalone BPM or workflow tool – SecuForms handles structured intake; SecuFlows Advanced takes over further processing

FTAPI SecuMails

Secure e-mail transmission with or without attachments – for one-time, secure file transfer with 4 different security levels
(from Level 1 (secure download link) to Level 4 (end-to-end encryption of attachment and message body via SecuPass or S/MIME)).

FTAPI SecuRooms

Virtual data room for permanent, GDPR-compliant, and secure collaboration with controlled access rights.

FTAPI SecuForms

This product. Structured data intake via digital forms and SubmitBox – for the secure receipt of documents from external submitters.

FTAPI SecuFlows Advanced

Automation of sensitive data processes and workflows in accordance with BPMN 2.0 – without coding, audit-proof, and GDPR-compliant.