Client forms that don't feel like a boring survey.
Formulate turns your intake, consent, and onboarding PDFs into shareable links. Your clients fill them out on any device — and you get back a signed, on-brand PDF for your records.
No card. 2 forms and 10 submissions/month on the free plan.
Three steps. No PDF wrangling.
The form you already send by email — now with a link, a signature and a delivered PDF.
Drop your PDF (or start blank)
Upload an existing form — intake, consent, waiver, questionnaire — and Formulate's AI extracts every field in order. Or build from scratch in the visual editor.
Share a clean link
Send a mobile-friendly link. Optionally generate one-shot invite links per recipient so you can audit who opened, who submitted, and who ghosted you.
Receive a signed PDF
Every submission comes back rendered on your brand — letterhead, colors, signature, timestamp — ready for your records or your client's inbox.
Your form is a template. Every client gets their own link.
Generate as many invite links as you need from one form. Track each one from "sent" to "opened" to "submitted" to "retired" — with full timestamps.
- Per-recipient invite links with labels
- Live audit trail: opened, submitted, retired
- One-shot links auto-close after use
- Or leave the form open for many respondents
Upload a logo or a full letterhead. Choose accent color. The PDF and the fill-out page match.
Text, email, phone, date, dropdown, checkbox, radio, signature, headings, RTL support.
Envelope-encrypted PDFs in a private bucket, HMAC-signed with a content hash. Raw IPs are hashed, never stored. Optional email MFA on your account.
Drop a PDF, get a live form in seconds — labels, field types, layout, even the header logo detected.
Keep what you need. Auto-delete the rest.
Choose a retention window per form — 30, 60 or 90 days. When it's up, the encrypted PDF, the field data and the signature are permanently removed. Respondents see the window before they sign, and you can delete any submission early from the dashboard.
- Per-form retention: 30 / 60 / 90 days
- Countdown badge on every submission row
- One-click delete removes PDF + data + signature
- Signed copy emailed to the respondent with a secure download link
Each PDF is encrypted with a per-submission data key, wrapped by a master KEK. Only your download route can decrypt.
Every PDF carries an HMAC signature and a content hash derived from the immutable submission record. A tampered row refuses to re-render.
For optional dedupe we store a salted hash of IP + email + timestamp. Raw IPs never touch the database or the PDF.
Turn on email-code MFA to require a fresh code from any new device before you can see submissions.
Simple pricing. Real limits.
Start free. Upgrade when you're actually sending forms. Yearly plans save 20%.
Try Formulate with no card.
- 2 forms at a time (delete & recreate freely)
- 10 submissions/month across all forms
- AI PDF import up to 5 pages (5 imports/month)
- Branded PDF for every submission
Common questions
Do I need to install anything?＋
No. Formulate is a web app — sign in, build a form (or import a PDF), and share a link. Your clients open the link in any browser, on any device.
Is the free plan really free?＋
Yes. 2 forms at a time and 10 submissions per month across all your forms. No card required.
Can I delete a form and start a new one?＋
Yes, on any plan. On the free plan the submission count is aggregate across all forms in the current month, so deleting a form doesn't reset it, but you can always swap out which forms you're running.
Is the submitted data encrypted?＋
Yes. Every submission PDF is encrypted with a per-submission key (envelope encryption) and stored in a private bucket. The PDF also carries an HMAC signature and a content hash so any tampering with the underlying data is detected on download.
How long are submissions kept?＋
You choose per form — 30, 60 or 90 days. After that the encrypted PDF, the field data and the signature are permanently deleted. Respondents see the retention window before they sign, and once a form is published the window is locked so promises to past respondents can't be changed.
Can respondents get a copy?＋
If they provide an email address they receive a copy of the signed PDF as an attachment via Resend, plus a secure short-lived download link that expires when the retention window ends.
Who owns the submission data?＋
You do. Formulate stores and delivers submissions on your behalf as a processor. You can delete any submission at any time from the dashboard — the PDF object and the database row are both removed.