# Form3

We monitor the [subprocessor list Form3 publishes](https://trust.form3.tech/?itemUid=0f65baaa-f685-478f-a643-4d2856f781f4), which we last checked on 2026-11-11, but have not read any entries from it. [1 tracked vendor](https://thirdpartyindex.com/vendors/form3#used-by), [GoCardless](https://thirdpartyindex.com/vendors/gocardless), names Form3 as a subprocessor.

Form3 (form3.tech): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/form3
- Documents last verified: 2026-11-11
- Transparency rating: 33/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (published; no entries could be read); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 0/5 (not found); Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 1 tracked vendors rely on it directly, 9 within two hops, 40 within three
- Cite as: Form3, Third Party Index, https://thirdpartyindex.com/vendors/form3 (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.form3.tech/ | 2026-11-11 | 2026-10-09 |
| Subprocessor list | https://trust.form3.tech/?itemUid=0f65baaa-f685-478f-a643-4d2856f781f4 | 2026-11-11 | 2026-10-09 |
| Privacy policy | https://www.form3.tech/legal/data-privacy-statement | 2026-11-11 | 2026-09-23 |
| Terms | https://www.form3.tech/legal/terms-and-conditions | 2026-11-11 | 2026-09-23 |
| security.txt | https://www.form3.tech/.well-known/security.txt | 2026-11-11 | 2026-09-23 |
| Status page | https://status.form3.tech/ | 2026-11-11 | 2026-11-11 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO 22301, Cyber Essentials Plus ([evidence](https://thirdpartyindex.com/evidence/6175))

## Web Technologies

Form3's homepage made 146 requests to 1 domain. Loaded on 2026-11-10 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

### First party (1)

- Form3: 146 requests to form3.tech; Amazon CloudFront, Amazon S3, Amazon Web Services, Nuxt.js, Open Graph, PWA, Vue.js

## Subprocessor of (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [GoCardless](https://thirdpartyindex.com/vendors/gocardless.md): Payment processing

## Service status

Incidents it reported on its own status page.

- Last 90 days: 8 reported incidents (1 major or critical, 4 minor, 3 with no impact stated)
- Typical time to resolve: 16 min
- Status page last read: 2026-11-12
- 2026-11-10: INC492913 - Degradation to Form3 - UK Bacs service. (no impact stated)
- 2026-11-10: INC492913 - Major Outage to the Form3 - UK Instant and Form3 - SEPA services. (critical)
- 2026-11-09: INC492586 - Degradation Across Multiple Form3 Services (minor)
- 2026-10-20: INC488090 - Degradation to Form3 - UK Instant & Form3 - SEPA Instant (minor)
- 2026-10-06: INC484677 - Degradation Across Multiple Form3 Services (no impact stated)
- 2026-09-30: INC483644 - Degradation to Form3 - SEPA Instant service (minor)
- 2026-09-27: #483178 - Degradation to FPS Instant (no impact stated)
- 2026-09-01: INC478901 - Degradation to Form3 - SEPA Instant service (minor)

## Security contact

From its security.txt (https://www.form3.tech/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/6177)):

- Contact: mailto:responsible.disclosure@form3.tech
- Contact: mailto:infosec@form3.tech
- Disclosure policy: https://github.com/form3tech-oss/.github/security/policy
- Security jobs: https://www.form3.tech/company/vacancies
- Languages: en
- Valid until 2027-05-03

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api