The form submission API for builders

Build beautiful forms in seconds, not hours.

Point any HTML form at SimplyForms and we handle the rest — submissions, email alerts, spam protection, and webhooks. No backend code required.

Your form / API
import { SimplyForms } from "@simplyforms/sdk";
const sf = new SimplyForms("YOUR_FORM_ID");
await sf.submit({
name: "",
email: "",
message: "",
});
SFSimplyForms engine
  • Spam blocked
  • Encrypted at rest
  • Stored
Email notificationinstant
Toalerts@yourteam.com
Reply-Tojane@example.com
SubjectNew submission · Contact us

Hello from the web!

WebhookPOST · HMAC

https://your-server.com/hooks/simplyforms

X-SimplyForms-Signature: sha256=9f86d08…

{
  "id": "sub_a1b2c3d4",
  "form_id": "f_a1b2c3d4e5",
  "data": {
    "name": "Jane Doe",
    "email": "jane@example.com",
    "message": "Hello from the web!"
  },
  "received_at": "just now"
}
Dashboardstored
NameJane Doe
Emailjane@example.com
StatusClean
Receivedjust now

Live demo — edit either source and watch every output update. Nothing is actually sent.

From form to inbox in three steps

Drop in your endpoint URL. Receive submissions. Wire them anywhere.

01

Build your form

Use plain HTML, React, or any framework. Point the action attribute at SimplyForms.

02

Submit data

We accept FormData and JSON. Honeypot and Turnstile are checked server-side.

03

Get notified

Email alerts, webhooks with HMAC signing, and a dashboard to review every submission.

Works with everything you already use

SimplyForms collects your form submissions and delivers them where you work — email, webhooks, Slack, Discord, Telegram, and Google Sheets. If you connect your Google account, SimplyForms only creates and updates spreadsheets it created for you (Google's drive.file permission) — it can never see the rest of your Drive. See our Privacy Policy.

HTML
React
Next.js
fetch
curl

Built for every form on your site

One backend for contact forms, surveys, sign-ups, and everything in between.

Contact forms

Capture inbound enquiries with instant email alerts.

Surveys & feedback

Collect structured feedback without standing up a backend.

Lead capture

Pipe sign-ups straight into your CRM via webhooks.

Support tickets

Route customer issues into Slack or Discord in real time.

Beta sign-ups

Launch a waitlist in minutes -- track every entry.

Event RSVPs

Run a registration page with no server-side glue code.

Everything you need, nothing you don't

Powerful features packaged in a simple, elegant interface.

Lightning fast

Optimised endpoints respond in milliseconds, anywhere.

Secure by default

Honeypot, Turnstile, encrypted secrets, GDPR-ready.

Real-time analytics

Track views, submissions and drop-off as it happens.

Webhooks

Push every submission to your URL with HMAC signing and retries.

Email notifications

Get notified on every submission. Reply-to set automatically.

Submission storage

Every submission stored, searchable, and exportable.

Drop in. Done.

Ship a working form in your stack of choice — HTML, fetch, curl, or anything that speaks HTTP. No SDK required.

  • Accepts both application/json and form-encoded.
  • Optional 303 redirect after submit for non-JS forms.
  • Reply-to is set automatically from the email field.
<form
  action="https://api.simplyforms.dev/v1/forms/YOUR_FORM_ID/submissions"
  method="POST"
>
  <input type="email" name="email" required />
  <textarea name="message" required></textarea>
  <button type="submit">Send</button>
</form>

Spam protection that actually works

Layered defences keep your inbox clean and your data trustworthy.

  • Honeypot fields

    Invisible to humans, irresistible to bots -- silently dropped.

  • Cloudflare Turnstile

    Per-form configurable, with secrets encrypted at rest (AES-256-GCM).

  • Domain restrictions

    Lock submissions to the origins you actually own.

  • HMAC-signed webhooks

    Verify every webhook came from us -- never from an attacker.

Privacy by default

Even our staff can't read your submissions.

SimplyForms is a GDPR data processor. Our internal admin tools show only metadata by default — not the content your end-users submit. Reading any payload requires a written justification, a 15-minute single-use token, and is logged in an immutable audit trail.

  • Three-tier access model. Staff see operational data freely; metadata with logging; payload only with justification.
  • Separate reviewer for every access. No single admin — not even a super-admin — can approve their own access to your submission data. Every category requires a second super-admin reviewer, enforced at the database.
  • Single-use tokens. Approved access expires in 15 minutes and cannot be replayed.
  • Never used for marketing or training. Your customers' submissions are theirs, not ours.
Read our employee-access policy

What admins see by default

FormContact us
Received2 min ago
StatusClean
PayloadHidden — access required

Every access to the “Hidden” field is logged with the staff member's name, reason, and timestamp.

Get notified in 5 minutes.

Free to start. No credit card required. Upgrade whenever you outgrow the free tier.

Create your free account