Framaforms should be configured for data privacy by default, controlled form publication, and secure result exports.
APP_URL=https://framaforms.example.com
DB_HOST=127.0.0.1
DB_NAME=framaforms
DB_USER=framaforms
DB_PASSWORD=replace-with-strong-password
¶ Privacy and publication policy
- Keep forms private unless explicitly published.
- Restrict administrative roles and audit changes.
- Configure GDPR-aligned retention and deletion policies.
- Enforce HTTPS and security headers.
- Apply anti-abuse/rate-limit controls.
- Review module/plugin updates before deployment.
¶ Backup and recovery
Back up DB, form assets, and configuration. Validate restored form publication and response exports.
- Submission errors monitored.
- Access log anomalies monitored.
- Backup restore verified.
- Policy documentation updated.
Feel free to contact us. Find all contact information on our contact page.