Document automation means handing a tool your templates and your data — often contracts, tax forms, and customer records. So it deserves a straight answer about what happens to those files. Here is how ExForms protects your data: what is encrypted, what is deleted, and when.

In short, ExForms encrypts every template at rest and keeps a per-file key in Azure Key Vault. It then builds your documents in memory and wipes them from the server as soon as you have them. We are not in the business of keeping your data around.

ExForms encrypts every template file you upload, and gives each file its own unique encryption key. Those keys then live in Azure Key Vault, where a hardware security module protects them and logs every access for auditing.

The practical consequence matters more than the acronyms: even if someone breached the database, the encrypted contents stay useless without separate access to the Key Vault.

So output is deliberately short-lived:

• Processing happens in memory. ExForms combines your data and templates in RAM.
• ExForms builds a temporary ZIP for delivery.
• The download streams to you.
• Cleanup is immediate — ExForms deletes that ZIP the moment your download finishes.

Similarly, documents generated through the API follow the same principle with explicit limits: download links stay valid for one hour maximum, work only once, and then delete themselves.

Likewise, connector credentials — database connections, API tokens, workspace IDs — use the same secure storage backed by Key Vault, and ExForms sends them only to the service you configured.

• So ExForms keeps no copy of your spreadsheet data once it hands you the documents.
• Meanwhile, your templates stay encrypted, with keys separated from the data.
• We never use your documents to train anything.
• As a result, sensitive workflows — tax forms, contracts, HR letters — can run without leaving copies behind.

• Generate documents via the API
• Send Excel data with Connectors

That, in short, is how ExForms protects your data. The guide covers encryption layers, deletion timing, and credential handling in full — Data Protection guide.