One inbox. Real humans.

About 10 minutes from signup. You create your account, set an Access Code (the personal key for your encryption), build the form by picking question types, and copy the share link. Submissions arrive encrypted from the very first one.

No. Your Access Code is the starting point for every key that protects your forms — we never receive it, never store it, and have no recovery path. This is intentional, and it's exactly what makes Schweizerform meaningfully different from "secure" tools that can reset and reveal your data. Best practice: store it in a password manager. You can also rotate it anytime from inside your account.

Go to Settings → Security → "Rotate Access Code." Your browser re-encrypts every form under the new code, then writes the updated sealed Master Key. The old code is invalidated immediately. The whole process runs locally — our server never sees either code.

Dashboard → Settings → Plan. Upgrades take effect immediately (prorated). Downgrades take effect at the end of the current billing period. Your data stays put — your existing forms remain accessible regardless of plan.

They stay accessible — your dashboard simply drops to Free-plan limits. You keep opening and reading every submission in your browser for as long as your account is open. Full account deletion (with cascade to submissions and stored files) is a one-click action under Settings → Account.

Each file is encrypted in the respondent's browser, chunk by chunk, before it leaves the device. The original filename is replaced with a random ID on our servers — so neither the contents nor the name is visible in the storage folder. Sensible per-file and per-submission limits apply behind the scenes; the chunked approach keeps memory use reasonable even on lower-end devices.