Built for the forms you
can't afford to get wrong
High-stakes forms carry a business's most sensitive information: licences and registrations, tax and insurance identifiers, client details, signatures. Our answer to that is not a longer list of safeguards. It is holding as little of it as possible, and never acting on it without you.
Your most sensitive data stays on your device
The identifiers you would least like to see in someone else's database — licence and registration numbers, tax IDs, insurance and bond policy numbers, signature details, home address, bank details, date of birth — are held on your own machine and filled from there. They are not written to our servers, and that is enforced in the code, not by policy alone.
What we do keep is minimal, and encrypted
We keep the standing details that save you time across forms, and the structure of the forms themselves. We do not keep the contents of the filings you produce. Everything is encrypted in transit, and the business details we store for you are encrypted at rest.
Less held is less to leak, and less to hand over.
Nothing is ever submitted for you
The product fills a form and stops. There is no autopilot, no queue that files on your behalf, no mode you can switch on that changes this. A human reviews every field before anything is filed.
On a regulated filing, the person who signs it stays the person who decided it was right.
Export it or delete it, whenever you want
You can take everything held under your account with you, and you can delete the account outright. Deletion takes effect immediately: no waiting period, no email request, no retention window we quietly keep it in.
Access is least-privilege, and separated per account
Every account's data is isolated from every other account's. Access to anything sensitive requires authentication, defaults are closed rather than open, and our records of who did what are kept as structure — which account, which action, when — never as copies of your content.
If something goes wrong, there is a plan
We maintain a written incident-response plan: how an incident is contained, who is notified, and in what order. You will hear it from us, promptly and in plain language, rather than finding out later.
We carry professional liability and cyber insurance
If the worst happens, the people who trusted us are not relying on a small company's balance sheet.
The line we draw
A form-filling product has an obvious temptation: keep everything, because more data makes the matching better. We drew the line somewhere else. Your identity — the recurring details that are yours across every form — is worth storing, because re-typing it is the problem you hired us to solve. The structure of a form — where its fields are and what they mean — is worth storing, because it is not anybody's private information.
The contents of a particular filing is neither. It arrives, it fills the form, and it is gone. That is why the honest answer to “what happens if you are breached” is short.
The privacy policy is the binding version of all of this, field by field.
Your rights, and how to use them
Privacy law gives you rights over your data. We built them into the product rather than into a request queue, so exercising one takes a click instead of a letter.
- See your data
- Everything held under your account is visible from the account pages, at any time.
- Take it with you
- Export what we hold in a form you can keep or move elsewhere.
- Delete it
- Delete your account and its data outright, effective immediately, from your account page.
- Correct it
- Edit your stored business details directly from the account pages, whenever they change.
- Know who touches it
- The third parties involved in running the service are named in the privacy policy, with what each one receives. We do not sell or rent your data, and we do not run advertising trackers.
If your organisation needs a data processing agreement, has a security questionnaire to run, or wants to talk through how this fits your obligations, email support@autofillportal.com and you will reach the person who built it.
Different forms, same standard
Permits are where we started. The principles above do not change with the form.