The Gramm-Leach-Bliley Act

Collect data with GLBA compliance top-of-mind

Protect customer financial data – and your business – with secure data collection practices.

Book a Demo

Why trust FormAssembly?

We follow the 3 key rules of GLBA throughout software development:

Privacy rule

Ensuring the protection of consumers’ personal financial information.

Safeguards rule

Requiring the establishment of security measures to prevent data breaches.

Pretexting provisions

Prohibiting deceptive methods of obtaining personal financial information.

Keep financial data safe with advanced security features

Data processing agreement

A legally binding agreement that enforces FormAssembly to fulfill data processing obligations and protect the rights of individuals.

Sensitive data controls

Masking and encrypting sensitive fields is implemented to safeguard Personally Identifiable Information (PII), Protected Health Information (PHI), or any other sensitive data.

Anonymizing form data

This feature allows the IP address of form respondents to be anonymized to prevent the collection of data that can be used to identify an individual.

Administrator controls

Customizable role permissions and access controls are provided to restrict the number of individuals who can access and modify data.

Informed consent

Form builder functionalities are GLBA-compliant and include electronic signature, opt-in statements, privacy disclosures on forms, and checkboxes with clear and easily distinguishable custom styling.

Making your financial services data collection secure and GLBA compliant

Easily build forms, collect data, and integrate data with existing tech stack – all with compliance peace of mind.

FormAssembly security measures

What is FormAssembly’s dedication to compliance?

FormAssembly is committed to complying with GLBA in all global operations as well as developing our products to help customers comply with applicable GDPR requirements. FormAssembly also adheres to NIST, ISO, PCI, and HITECH best practices.

How do you handle sensitive data management?

Along with GLBA compliance, Enterprise plans give you unique control over sensitive data. With Sensitive Data Management, you control who can view data, unlock reports containing sensitive data for a specified amount of time, view a log of sensitive data access, and more.

Do you provide encryption at rest and in transit?

FormAssembly uses several methods to encrypt data during transit and when stored (at rest). These include strong cryptography and encryption techniques such as TLS 1.2 to safeguard confidential data during transmission over public networks.