The Formward Team6 min read
The % sign that silently kills cron jobs
A scheduled job can be broken with no error, no log line, and no failed exit code anywhere a human looks. Four small mechanisms cause most of it.
Read →Blog
The Formward blog
The Formward blog collects articles on form backends, EU data residency and stopping spam. Each post below shows its author, publication date and reading time, so you can pick what to read first.
The Formward Team · · 7 min read
What actually leaves the EU with a form backend
"Your data never leaves the EU" is the standard claim, and for most form backends it is not quite true. Here is what stays and what leaves.
Read →The Formward Team · · 7 min read
Why your form notification emails land in spam
Form notifications get filtered more often than ordinary mail, and it is usually not your domain reputation. Here is the mechanism and what fixes it.
Read →The Formward Team · · 5 min read
Leaving Formspree for an EU form backend: checklist
What to check before you move a form backend into the EU: where submissions are stored, the sub-processor list, the spam defence and the DPA.
Read →The Formward Team · · 2 min read
Share a form without a website
You no longer need a site to collect submissions. Publish a hosted form on Formward and share the link directly, with the data still in Europe.
Read →The Formward Team · · 5 min read
Slack and Discord webhooks: stripping and signing
A form field is text a stranger typed, and a chat webhook posts it into your team channel. Mention stripping, signing and a secret webhook URL come first.
Read →The Formward Team · · 7 min read
How to build a GDPR compliant contact form
A practical guide to a GDPR compliant contact form: lawful basis, consent, data minimisation, retention, DSARs, and vetting your sub-processors.
Read →The Formward Team · · 7 min read
Next.js form submission without your own backend
A practical guide to Next.js form submission in the App Router: server action versus direct POST, JSON responses, and a spam honeypot.
Read →The Formward Team · · 6 min read
How to choose the best GDPR form backend
Choosing a GDPR form backend comes down to five things: data residency, a real DPA, named sub-processors, consent handling, and retention.
Read →The Formward Team · · 7 min read
Do you need a DPA for your contact form?
When you need a DPA for your contact form, why the relationship usually requires one, and what a good data processing agreement actually covers.
Read →The Formward Team · · 8 min read
Form spam protection in 2026 without reCAPTCHA
How to get real form spam protection in 2026 without reCAPTCHA: honeypots, rate limiting on hashed IPs, Cloudflare Turnstile, and AI spam scoring.
Read →The Formward Team · · 6 min read
A React form backend with fetch and no server to run
How to give a React form a backend without running a server: a controlled form, a fetch POST to a form endpoint, and proper success and error states.
Read →The Formward Team · · 2 min read
Why your form backend should stay in Europe
Most form-handling services route your visitors' data through US infrastructure. Here is why that is a GDPR problem, and what to do about it.
Read →The Formward Team · · 1 min read
Forms with no backend: how it works
You can collect form submissions without writing a single line of server code. Here is the mechanism behind a backend-less form.
Read →The Formward Team · · 1 min read
Schrems II, in plain terms, for your contact form
The Schrems II ruling changed what it means to send EU personal data to the US. Here is what it actually means for the humble contact form.
Read →The Formward Team · · 1 min read
How we rate-limit forms without storing raw IPs
Rate limiting usually means keeping a log of IP addresses. Here is how Formward stops floods while treating the IP as a secret.
Read →