Scoped Notion OAuth
We use Notion's official OAuth protocol. We only request permissions for the specific databases you explicitly choose to share. We never have root workspace admin access.
Credentials
AI provider API keys you add in settings are encrypted at rest with AES-GCM. All traffic to nDBForms is served over HTTPS.
Edge Computing Network
Our codebase is hosted on Cloudflare's serverless edge workers. Requests are served from Cloudflare's network, which includes its DDoS protection.
Response data
Each submission is written to your Notion database. A copy is also kept in our database (Cloudflare D1) so you can see responses in your dashboard and so failed Notion writes can be retried. Deleting a form deletes its stored responses.