Privacy, Security and Compliance

Staying Informed About Gravity Security Updates

This article explains how to stay informed about security updates for Gravity Forms and related products, including monitoring changelogs, whitelisting notification emails, and reviewing security documentation.

The Importance of Updates

When running a website, it can be a struggle to find the time to attend to general maintenance. As described in our article on security practices, keeping WordPress, as well as all plugins and themes, up to date is crucial to your site's continued good health.

Security Best Practices

The advice and best practices in this section is to help site owners and administrators understand the issues and learn how to adjust the security features according to their needs.

WordPress, Gravity Forms, and GDPR Compliance

You’ve probably heard about GDPR compliance but aren’t quite sure how it affects your forms or WordPress site in general. Your best option is always to consult legal counsel, but we’ll try to get things clarified for you in the meantime.

Upgrade Checks and Usage Data

This article describes the operational data collected by your Gravity Forms installation in support of license checks, package upgrade operations and product development usage data.

Non-Applicability of Data Processing Agreements

This article describes why Gravity Forms does not provide data processing agreements to its customers.

Gravity Forms Security Whitepaper

Learn more about Gravity Forms software security in this free white paper which is forked from the original security white paper for WordPress.

URL Validation In Gravity Forms

Within Gravity Forms, URL validation methods exist to heighten security as well as avoid possible bugs. In this article, we will explain how URL validation works in Gravity Forms, and how to manipulate it.

Is Gravity Forms PCI Compliant?

The short answer is yes, Gravity Forms is PCI compliant. However, this is subject to change depending on your environment and setup, as Gravity Forms is simply a single piece of the puzzle.

File Upload Security

This article covers the security considerations for the File Upload field.