Collect answers encrypted in the browser
A zero-knowledge form builder for health, legal, and financial data. Every response is sealed to your keys in the respondent’s browser — so we store only ciphertext, never a readable answer.
14-day trial, no limit · then free for 1 active form at a time · no card · respondents never sign up
How it works
Build a form
Add your questions — short text, long text, single choice, date. Publish and get one shareable link.
Respondents fill it — no account
They open the link and answer. Each response is sealed to your keys in their browser before it is sent. No signup.
You decrypt the responses
Open your inbox and decrypt responses locally into a table. We never hold a key or a readable answer.
Answers stored only as ciphertext
Every response is sealed to your public key on the respondent’s device. We store only ciphertext, so server-side analytics on your answers is impossible. That is the selling point, not a limitation.
Post-quantum by default
Responses are sealed with a hybrid of ML-KEM-1024 and X25519 via the open-source @shieldfive/crypto core — on for every form.
EU-hosted, DPA on every seat
Ciphertext and metadata live in the EU, and a GDPR data-processing agreement is included on every seat — which matters for health, legal, and financial answers.
Built for confidential answers
Collecting files rather than answers? ShieldFive File Request uses the same encryption for client documents.
Free to start
For 14 days there is no limit on open forms; after that the free plan runs 1 active form at a time, no card. For unlimited active forms — and a shared response inbox when a team joins — add seats at €29 per seat per month. The firm’s decryption identity is sealed to each member so colleagues share one inbox without sharing personal keys. Respondents never pay.
Questions
- Can ShieldFive read the answers?
- No. Each response is sealed to your public key (ML-KEM-1024 + X25519) in the respondent’s browser. We store only ciphertext; you decrypt in your own browser. The honest limit: like any web app we serve the JavaScript, so the property is “encrypted in the browser, ciphertext at rest”, not a claim that no server could ever be subverted.
- Do respondents need an account?
- No. They open the link and submit — no account, no password. Only you need a free ShieldFive account, because answers are sealed to your keys.
- Are the questions private too?
- Yes. The title and questions are encrypted with a key that lives in the link, so a form on a sensitive topic isn’t readable on our servers either. A link without its key is refused.
- How much does it cost?
- 14 days with no limit on open forms, then free for 1 active form at a time. No card. Seats at €29 per seat per month (€290 per year) give unlimited active forms and a shared response inbox for teams. Respondents never pay.
- What if I need to collect files, not answers?
- Use ShieldFive File Request — the same zero-knowledge encryption, built for collecting documents from clients.