Formstack.com is a well-known business tool for building online forms, generating documents, and collecting e-signatures. It's been operating since 2010, which is a strong sign of legitimacy for any software service. The site uses modern security practices, including encryption that protects your data in transit, and it has not been flagged for malware or phishing. Its domain history is clean, and it ranks among the top 7,000 websites globally, indicating real usage by thousands of organizations. If you're wondering whether formstack.com is a scam, the evidence points clearly to no. It's a legitimate SaaS company with transparent ownership and contact information. For a platform that handles sensitive business data, the security setup is solid. The only minor note is that email authentication is in monitoring mode, not enforcement, but that doesn't affect the safety of the website itself. Overall, formstack.com reviews from the technical signals align with its reputation as a trusted service. Should you buy from formstack.com? If you need form-building or e-signature tools, it's a safe choice.
In plain English
Formstack is a legitimate, well-established SaaS platform. It's been around for 16 years, has strong security, and a clean reputation. You can trust it for collecting forms, documents, and signatures.
Where the score comes from
The site uses modern encryption, enforces HTTPS, and has strong browser protections like clickjacking prevention. No malware or phishing reports. This is exactly what you'd expect from a reputable SaaS handling sensitive form data.
The domain is 16 years old, registered in clear WHOIS, and owned by a known company. No hidden ownership. For a long-running business platform, this is as transparent as it gets.
Formstack ranks among the top 7,000 sites globally, has a clean history on the Wayback Machine since 2010, and appears on no blacklists. It's a well-established operation with a strong track record.
The site provides an about page, visible contact info, and links to social media. The excessive hidden elements are likely UI components, not deceptive content. Overall, they communicate openly about who they are.
Privacy policy and terms of service are present. A dedicated legal entity disclosure is missing, but that's common for US-based companies. For a global SaaS, GDPR-specific cookie consent might be expected, but not a dealbreaker.
The site runs on Amazon CloudFront and uses Google for email, which is solid. DMARC is set to monitoring only, and DNSSEC is off — these are minor gaps for a SaaS, but the core infrastructure is reliable.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →