/

Companies / FormAssembly

FormAssembly tech stack

formassembly.com

FormAssembly provides a secure data collection and digital process automation platform for building forms and workflows. It serves organizations in regulated and data-driven industries such as healthcare, higher education, financial services, government, nonprofit, and marketing.

Summarized from its homepage on 4 Nov 2026.

Classified asCompliance and risk

885 S College Mall Rd, #399, Bloomington, IN, 47401, US

The FormAssembly homepage

Vendors of FormAssembly and the evidence for each

VendorCategoryEvidenceLevel
CloudflareCloud and infrastructureLikely
Websiteheader: cf-ray: a58cff419da908c4-LAX11 Nov 2026Source
Companies using Cloudflare
Google Tag ManagerAnalyticsLikely
Websitescript: =true;j.src= '//www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f11 Nov 2026Source
Companies using Google Tag Manager
Google WorkspaceProductivityLikely
Websitemx: aspmx.l.google.com.11 Nov 2026Source
Companies using Google Workspace
WordPressWebsites and CMSLikely
Websitescript: www.formassembly.com/wp-content/themes/formassembly_2024/js/formassembly_2024.m11 Nov 2026Source
Companies using WordPress

No public list found

We did not find a public subprocessor list. The company may still publish one, or share it privately.

Certifications

StandardWhat the source saysChecked
SOC 2 Type IICompany's statement“SOC 2 Type II certified on all plans; FedRAMP Certified and DoD IL4 available”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA.11 Nov 2026Source

We last read its homepage on 11 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean FormAssembly lacks it.

Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.

See FormAssembly's full stack

Every vendor with its source and date, and an alert when FormAssembly adds or drops one. The same lookup works for any company.

  • Every company and vendor, with its public source
  • 100 API calls a month, plus MCP and the Chrome extension
  • Work email only. No card, no sales call