Security & Compliance
Protect sensitive data with enterprise‑grade security, transparent controls, and compliance by design. Submit.com safeguards every form, file, review, and decision so programs run with confidence across government, education, foundations, and nonprofits.
Built to Keep Data Safe
Security, integrity, and confidentiality are foundational to Submit.com. Our platform combines strong encryption, robust identity controls, continuous backups, and comprehensive auditability to protect your organization’s data end to end.
- Data ownership guaranteed: customer data is never copied, shared, or modified without authorization.
- Encryption in transit and at rest across forms, files, and exports.
- Least‑privilege, role‑based access with granular permissions and separation of duties.
Identity & Access Management
Role‑based permissions for admins, reviewers, finance, and external stakeholders.
Enforce strong password policies; support for MFA.
Single Sign‑On (SSO) options for social and enterprise identity providers (plan dependent).
Session management, account controls, and configurable timeouts.
Compliance by Design
Operate with confidence under strict regulatory and governance requirements.
GDPR‑ready data processing and configurable data retention.
Data Resilience & Continuity
Your programs can’t pause, neither can your data protection.
- Real‑time replication to protect against data loss.
- Daily database snapshots for point‑in‑time restoration.
- Integrity checks and monitored backup operations.
- Export options for secure archival and governance needs
Secure by Default
Your programs can’t pause, neither can your data protection.
- Encrypted file storage for documents, media, and form uploads.
- Secure-by-default forms and portals, including secure submission handling.
- Fine‑grained visibility: restrict data by program, department, category, or role.
- Optional anonymization/blind review to minimize exposure of personally identifiable information (PII).
Governance, Risk, and Audit Readiness
Demonstrate accountability with clear, exportable evidence.
- Comprehensive activity logs and immutable audit trails.
- Reporting for compliance reviews, board oversight, and external audits.
- Configurable data retention and deletion policies aligned to institutional requirements.
Customer Data Ownership
Data belongs to customers always.
- You retain ownership of all data stored in Submit.com, including forms, documents, and media.
- We never access data without explicit authorization.
- No secondary uses, profiling, or data sharing.
Shared Responsibility
Security and compliance are a partnership. Submit.com provides secure infrastructure, features, and controls; organizations maintain appropriate configurations, access policies, and operational practices that align with their regulatory obligations.
Get the Details
- Architecture and controls overview
- Identity & access configuration guide
- Backup and recovery procedures
- Compliance mappings and FAQs
Have a specific requirement or questionnaire? Our security and customer success teams will collaborate with administrators and IT to validate controls, complete assessments, and support a smooth, compliant rollout.