Everything You Need

Powerful Features, Zero Backend Code

27 field types with 100+ validation options, bot protection, 28+ integrations, file uploads, team collaboration — everything you need to collect form data professionally.

27 Field Types

28+ Integrations

BYOE & BYOS

5 Team Roles

Lookup Dictionaries

Geofencing

Validation Engine

27 Field Types, Bulletproof Validation

Every field type has built-in validation logic with 100+ configurable options. Define your rules once, we enforce them on every submission.

All (28)

Text & Content (2)

Numbers (2)

Date & Time (5)

Contact (2)

Identity (2)

Selection (2)

Web & Technical (5)

Financial (2)

Location (1)

Data Validation (3)

Security (2)

Short Text

Long Text

Number

Age

Date

Time

Date & Time

Birthdate

Birthday

Phone

Username

Password

Boolean

Single/Multiple Choice

URL

Slug

UUID

Hex Color

Regular Expression

Credit Card

Currency

Coordinates

Lookup

File

Hidden

Honeypot

reCAPTCHA

Click any field type to see details • Filter by category above

Core Features

Beyond Just Validation

A complete form backend with everything you need to collect, protect, store, and deliver submissions.

Bot Protection

Stop automated submissions before they reach you

File Uploads & Security

Accept files with comprehensive validation and security

Enable or disable file uploads per form

Extension whitelist — only allow specific file types (.pdf, .docx, .jpg)

File size limits — per-file and total submission limits

Quantity restrictions — limit number of files per submission

Polyglot detection — detect files with multiple format signatures

SVG script scanning — block malicious scripts in SVG files

Macro blocking — detect Office files containing macros

ZIP bomb detection — prevent decompression attacks

Email Notifications & BYOE

Get notified instantly with your own email infrastructure

Instant email alerts on new submissions

BYOE (Bring Your Own Email) on any paid plan — use your domain

SendGrid integration — popular email service with analytics

AWS SES integration — cost-effective at scale ($0.10 per 1,000 emails)

SMTP integration — any email server (Gmail, Outlook, custom)

Custom email templates — branded emails with variable substitution

Custom email layouts — reusable designs verified by admins

Reply-to support — set any confirmed email field as reply-to address

Storage & BYOS

Store files in FormSubmits or your own cloud storage

Webhooks & Integrations

Send validated data anywhere automatically

Cloud Platform Integrations

Deep integration with major cloud providers

Submission Archive

Full control over what gets stored and for how long

Form Scheduling & Limits

Control when and how many submissions you accept

Lookup Dictionaries

Validate against your own data sources

Team Collaboration

5 roles for flexible team management

Security & Access Control

Enterprise-grade security features

Referrer/Origin checks — prevent unauthorized form submissions

Geofencing — restrict submissions by coordinates, regions, polygons

Domain verification — DNS existence checks for email/URL fields

MX record validation — verify email domains can receive mail

Plus addressing control — allow/forbid/strip email aliases

Domain allowlists/blocklists — restrict to specific domains

URL liveness checks — verify URLs are reachable over HTTP

AES-256-GCM encryption for connector credentials

SSRF prevention — validate all external URLs

Prototype pollution protection — sanitize field names

New Field Type

Available Now

Coordinates Validation

Validate geographic coordinates against polygons, radius restrictions, or bounding boxes. Build location-aware forms that only accept submissions from your service areas.

Field Type

Coordinates

Example input:
43.6532, -79.3832
Validation:
✓ Within "Greater Toronto Area" polygon

Polygon Containment

Define complex service areas with custom polygon boundaries

Greater Toronto Area, Manhattan below 96th St, specific delivery zones

Radius Restriction

Accept submissions only within X kilometers of a point

Within 50km of our warehouse, 10-mile delivery radius

Bounding Box

Simple rectangular area defined by corner coordinates

Continental US, Western Europe, specific city bounds

How It Works

Capture coordinates on client

Use browser geolocation API or an IP lookup service

Submit as hidden field

Pass lat,lng in a hidden input with your form

Server validates location

FormSubmits checks against your polygon, radius, or bounding box

Perfect For

Delivery zone validation — verify customer is in your service area

Local business intake — only accept inquiries from your region

Event registration — attendees must be near the venue

Service area verification — contractors serving specific states/provinces

Real estate — property inquiries within target neighborhoods

Food delivery — orders only from areas you can reach

Implementation Example

Copy & paste ready

<!-- Location-validated form -->
<form action="https://api.formsubmits.com/api/submissions/YOUR_FORM_ID" method="POST">
  <!-- Hidden coordinates field - validated against your polygon -->
  <input type="hidden" name="location" id="user-coords" />
  
  <input type="email" name="email" required />
  <button type="submit">Submit</button>
</form>

<script>
// Option 1: Browser Geolocation (accurate, needs permission)
navigator.geolocation.getCurrentPosition(pos => {
  document.getElementById('user-coords').value = 
    pos.coords.latitude + ',' + pos.coords.longitude;
});

// Option 2: IP Geolocation service (no permission needed)
fetch('https://ipapi.co/json/')
  .then(r => r.json())
  .then(data => {
    document.getElementById('user-coords').value = 
      data.latitude + ',' + data.longitude;
  });
</script>

Lookup Dictionaries

Validate form inputs against your own datasets. Accept only values that exist in your product catalog, employee directory, or promo code list.

Dictionary: Promo Codes

Value

Filter

Expires

SAVE20

All Products

Dec 31, 2025

FREESHIP

Orders > $50

Dec 31, 2025

VIP50

VIP Members

—

EARLYBIRD

New Users

Jan 15, 2025

CSV Import

Auto-expire

Conditional

Local Dictionaries

Add items manually in the dashboard or bulk import from CSV files. Perfect for static lists that change occasionally.

External HTTP API

Validate against your own API endpoint in real-time. Configure HTTP verb (GET/POST) and custom headers for authentication.

Expiration Dates

Set expiration on individual items. Perfect for promo codes, temporary access tokens, or seasonal campaigns.

What Can You Validate?

Product SKUs / Catalog codes

Employee directories / ID numbers

Promo codes / Discount vouchers

Department codes / Cost centers

Zip codes / Postal codes

Membership IDs / License numbers

Client lists / Account numbers

Real-World Examples

E-commerce Promo Codes

Dictionary:

Black Friday 2024

Items:

SAVE20, FREESHIP, EARLYBIRD

Expiration:

2024-11-30

→ Only valid codes accepted, auto-expire after sale

Employee Verification

Dictionary:

Company Employees

Items:

EMP001, EMP002, EMP003...

Expiration:

External API

→ Verify employee IDs against live HR system

Regional Availability

Dictionary:

Service Areas - Canada

Items:

M5H, M5J, M5K... (Toronto)

Expiration:

—

→ Only accept orders from serviceable regions

Team Collaboration

5 Roles for Flexible Access Control

From full account control to read-only access. Assign the right permissions to each team member without compromising security.

Owner

Ultimate authority over the account

Can do

Full control including billing and subscription

Transfer ownership to another user

Delete entire account

Manage all users including Admins

Admin

Manages forms, integrations, and team

Can do

Create and manage all forms, connectors, templates

Create workflows and lookup dictionaries

Invite Members, Support Agents, Viewers

View all submissions across all forms

View billing information (read-only)

Cannot do

Manage other Admins or Owner

Change billing or subscription

Member

Creates own forms independently

Can do

Create and manage own forms

Add and verify own email recipients

Create webhook connectors

Create lookup dictionaries (within limits)

Create email templates (within limits)

Use all shared resources from Admins

View submissions from own forms only

Cannot do

Create credential-based connectors (SendGrid, AWS, Slack)

Create or manage workflows

See other Members' forms or submissions

Make resources shared organization-wide

Support Agent

Reviews submissions across all forms

Can do

View ALL submissions from ALL forms

Delete submissions (spam cleanup, GDPR requests)

Add notes and flags to submissions

View forms, connectors, workflows (read-only context)

Cannot do

Create or edit any forms or configuration

Manage users or account settings

Viewer

Read-only access for stakeholders

Can do

View all forms and their configurations

View all submissions

Export data for reporting

Cannot do

Create, edit, delete, or import anything

Manage any settings or users

Form Settings

Fine-Grained Control

Every form is configurable to match your exact requirements.

Field Uniqueness

Limit how many times a value can be submitted — once, or up to N times total

One vote per email, max 3 entries per phone number, single-use referral codes

Submission Limits

Cap total submissions per form — first 100 entries, limited spots, etc.

Contest entries, event RSVPs, early bird signups, limited offers

Data Retention Control

Set how long to keep submissions — auto-delete after N days within your plan limits

Keep for 7 days then purge, 30-day default, minimize stored data for privacy

Stats-Only Mode

Record that a submission happened without storing the actual form data

High-volume tracking, GDPR compliance, anonymous counters

Form Cloning

Duplicate existing forms with all settings and field configurations

Seasonal campaigns, A/B testing forms, multi-language versions

Hidden Fields

Pass invisible data with submissions — not rendered, but included in payload

UTM parameters, user IDs, A/B test variants, referral sources

Custom Error Messages

Replace default validation errors with your own friendly, branded messages

"Please enter your work email" instead of "Invalid email format"

Unknown Fields Handling

Choose to accept, ignore, or reject fields not defined in your configuration

Strict mode for security, flexible mode for progressive enhancement

Submitter Confirmations

Auto-send confirmation emails to the person who submitted the form

Application received, we'll be in touch, your reference number is...

Verified Email Recipients

Add and verify email addresses that can receive form notifications

Sales team, support inbox, department-specific addresses

Developer Experience

Built for How You Work

Whether you prefer traditional form posts or modern AJAX submissions, FormSubmits adapts to your workflow.

Multiple Integration Methods

Standard HTML form POST — works everywhere, no JavaScript required

AJAX/Fetch API — for single-page apps and headless submissions

FormData API — for file uploads with progress tracking

JSON payloads — structured data for complex forms

Custom success/error redirects — control the user flow

CORS-enabled endpoints — call from any domain

Smart Response Handling

JSON responses with field-level validation errors

HTTP status codes: 200 (success), 400 (validation), 429 (rate limit)

Submission ID returned for tracking

Detailed error messages for each invalid field

Webhooks

Send validated submissions to any endpoint with JSON payloads, custom headers, authentication, and automatic retry logic.

<!-- Simple HTML Form -->
<form action="https://api.formsubmits.com/api/submissions/YOUR_FORM_ID" method="POST">
  <input type="text" name="name" required />
  <input type="email" name="email" required />
  <textarea name="message"></textarea>
  <button type="submit">Send</button>
</form>

// AJAX with Fetch API
const response = await fetch(
  'https://api.formsubmits.com/api/submissions/YOUR_FORM_ID',
  {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      name: 'Jane Doe',
      email: 'jane@example.com',
      message: 'Hello from my app!'
    })
  }
);

const result = await response.json();

if (result.code === 0) {
  console.log('Submitted!', result.data[0].submission.id);
} else {
  console.error('Errors:', result.errors);
}

// File Upload with FormData
const formData = new FormData();
formData.append('name', 'Jane Doe');
formData.append('email', 'jane@example.com');
formData.append('resume', fileInput.files[0]);

const response = await fetch(
  'https://api.formsubmits.com/api/submissions/YOUR_FORM_ID',
  {
    method: 'POST',
    body: formData  // No Content-Type header needed
  }
);

const result = await response.json();

// React Component
import { useState } from 'react';

function ContactForm() {
  const [status, setStatus] = useState('');
  const [errors, setErrors] = useState([]);

  const handleSubmit = async (e) => {
    e.preventDefault();
    setStatus('submitting');
    
    const formData = new FormData(e.target);
    const response = await fetch(
      'https://api.formsubmits.com/api/submissions/YOUR_FORM_ID',
      { method: 'POST', body: formData }
    );
    
    const result = await response.json();
    
    if (result.code === 0) {
      setStatus('success');
      e.target.reset();
    } else {
      setStatus('error');
      setErrors(result.errors || []);
    }
  };

  return (
    <form onSubmit={handleSubmit}>
      <input type="email" name="email" required />
      {errors.map((err, i) => <span key={i}>{err.message}</span>)}
      <button disabled={status === 'submitting'}>
        {status === 'submitting' ? 'Sending...' : 'Submit'}
      </button>
    </form>
  );
}

// Success Response (HTTP 200)
{
  "code": 0,
  "data": [{
    "submission": {
      "id": "78e7b2c8-4da6-45f4-ac44-c87e354dfe28",
      "formId": "a457149f-fd82-4b08-9197-e5a652f4a2cd",
      "submissionDttm": "2025-12-11T18:28:22.626Z",
      "requestId": "20251211182821-WKMTUR",
      "formData": "{"name":"John","email":"john@mail.com"}",
      "status": 50
    },
    "message": "Thank you for your submission"
  }],
  "errors": []
}

// Validation Error Response
{
  "code": 1,
  "data": [],
  "errors": [
    { "name": "email", "errors": ["Invalid email format"] },
    { "name": "phone", "errors": ["Required field"] }
  ]
}

// Webhook / Connector Payload
{
  "metadata": {
    "submissionId": "a7d0d8ed-788b-4bb2-910c-3a6b9669ed12",
    "requestId": "20251207201938-DMFDHU",
    "formId": "2cbced1a-0345-4e9b-ac6b-08ca12f2649b",
    "formName": "Contact Form",
    "submissionDateTime": "2025-12-07T20:19:39Z",
    "remoteIp": "192.168.1.1",
    "userAgent": "Mozilla/5.0..."
  },
  "formData": {
    "name": "Jane Doe",
    "email": "jane@example.com",
    "message": "Hello, this is my inquiry!"
  },
  "files": []
}

Works with any frontend framework

React

Vue

Next.js

Astro

Hugo

Gatsby

Svelte

Any HTML

Ready to Build Better Forms?

Start collecting validated submissions in minutes. Free plan available with no credit card required.

Get Started Free Read the Docs