Sensitive forms that keep your respondents safe
Built for nonprofits, legal aid, and grassroots organizations. Protect the people who trust you with their most vulnerable data.
Break free from Big Tech
Most companies make money by tracking your activity, profiling you, and serving you ads. We believe this is an invasion of your privacy. We don't do this, period.
Your data stays yours — we can't read it even if we tried
Forms are encrypted on your device before reaching our servers. Respondents use secure form links to decrypt your form and encrypt their responses. We cannot access this data even if we wanted to.
Collaborate with your team
Shared workspaces enable your team to work together while maintaining full data encryption with respondents. You have full control over who can see what — with clear audit logs of what was accessed and when.
Privacy isn't optional
Whether you're collecting:
- incident or abuse reports
- immigration or legal case details
- whistleblower submissions
A breach — or even internal misuse — can put real people at risk.
Only you can read submissions
Forms and responses are encrypted before they ever reach us. We cannot access them.
Anonymous by default
No trackers. No IP logging. No hidden analytics.
Safe team collaboration
Workspaces, access controls, and audit logs — without exposing raw data unnecessarily.
Built for real-world use.
Everything your organization needs to collect sensitive information responsibly.
- Auto-delete old responses to reduce risk
- Close forms automatically when needed
- Share via secure links or QR codes
- Encrypted forwarding when needed
- Multi-language support
- Passkey-only authentication
I have questions about security and our data…
Can Confide read my form responses?
No. Forms and responses are encrypted on your device using keys only you control. By the time data reaches our servers it's already encrypted — we have no way to decrypt or read it.
What happens if Confide gets hacked?
An attacker would only obtain ciphertext. Without your private keys — which never leave your device — the data is unreadable. End-to-end encryption means a server breach exposes nothing meaningful.
Do respondents need to create an account?
No. Respondents receive a secure link that contains everything needed to decrypt your form and encrypt their response. No sign-up, no email, no tracking.
Is Confide open source?
Yes. Confide is licensed under AGPL, so anyone can inspect, audit, or self-host the code. Security claims you can verify are more trustworthy than ones you can't.
What metadata does Confide collect?
We collect only what's necessary to run the service — timestamps of form submissions and basic account information for paying customers. We do not log IP addresses of respondents, track behavior, or sell data.
Can I delete data automatically?
Yes. You can configure forms to auto-delete responses after a set period, or close a form entirely once a submission limit is reached. Reducing the data you hold reduces your risk.