Are there data restrictions on the information that can be captured with a form? Are forms submissions encrypted?
Handling Sensitive Data in Sitefinity Forms
Data Security - Sitefinity forms should not be used to collect sensitive data.
What Is Considered Sensitive Data?
Sensitive data may include:
- Personal information (e.g., Social Security numbers)
- Financial details (e.g., credit card numbers)
- Proprietary business information
- Health records (e.g., protected health information)
- Trade secrets
Why This Matters
While your website’s SSL certificate encrypts data during transmission between the browser and the server, Sitefinity CMS does not provide internal encryption for data stored within the system. This means any sensitive information captured through Sitefinity forms is not securely protected once stored.
Potential Risks
- Compliance Violations: Collecting sensitive data may breach agreements with services like credit card processors.
- Increased Liability: Storing unprotected sensitive data can expose your organization to legal and financial risks.
Best Practice
Use secure, compliant platforms specifically designed for handling sensitive information. Avoid using Sitefinity forms for any data that requires encryption or regulatory protection.
#data_security #content_types