# formcel Trust Center — Resources

> formcel runs every customer on dedicated, isolated infrastructure in the region they choose, encrypts all data at rest and in transit, and builds toward formal attestation in the open. This page lists exactly what we have in place today, what is self-attested, and what is still on the roadmap.

Source: https://trust.formcel.com/resources · Last updated: 2026-09-02 · formcel, Inc., formcel.com

## Resources

### Legal

- **Privacy Policy** — https://formcel.com/privacy (updated 2026-08-21)
- **Terms of Service** — https://formcel.com/terms (updated 2026-08-21)
- **Data Processing Agreement** — available on request from security@formcel.com (updated 2026-09-02)

### Policies

- **Information Security Policy** — available on request from security@formcel.com (updated 2026-09-02)
- **Incident Response Plan** — available on request from security@formcel.com (updated 2026-09-02)
- **Business Continuity Plan** — available on request from security@formcel.com (updated 2026-09-02)

### Security reports

- **Penetration Test Summary** — available on request from security@formcel.com (updated 2026-09-02)

## Contact

- Security — vulnerability reports and security questionnaires: security@formcel.com
- Privacy — data subject requests, DPAs and privacy inquiries, answered within 30 days: privacy@formcel.com

We accept responsible disclosure. Report in good faith, give us reasonable time to fix, and we will not pursue legal action.

## Other pages

- [Overview](https://trust.formcel.com/index.md): Security and compliance posture at a glance: frameworks, control counts, documents and FAQ.
- [Controls](https://trust.formcel.com/controls.md): Every security control live in production today, grouped by category, with a plain-English description.
- [Subprocessors](https://trust.formcel.com/subprocessors.md): Complete list of third parties that may process customer data, with purpose, data category and location.
- [Data residency](https://trust.formcel.com/residency.md): Regions where customer data can be stored and processed.
- [FAQ](https://trust.formcel.com/faq.md): Answers to the questions asked most often in security reviews.