MUMBAI, INDIA - February 23, 2026 - MakeForms, the enterprise-grade, privacy-first form builder trusted by healthcare providers, government agencies, and Salesforce-powered organizations worldwide, today announced a landmark enhancement to its data residency capabilities. Users can now select their preferred data storage region — United States, European Union, Canada, Australia, India, or Singapore — directly during account sign-up, establishing complete sovereignty over where their sensitive data resides from the very first interaction.
This advancement is particularly transformative for two critical verticals: healthcare organizations managing Protected Health Information (PHI) through HIPAA-compliant forms, and sales-driven enterprises relying on Salesforce form integrations to power their customer data workflows.
Data Sovereignty as a Fundamental Right, Not a Premium Feature
"Most form builders treat data residency as an afterthought — an enterprise checkbox buried in lengthy sales cycles. We are flipping that model entirely. When a healthcare clinic in Vancouver or a government department in Sydney creates an account, they should not have to wonder where their patient data or citizen records are stored. They should control it from second one. That is not a premium feature. That is a fundamental right." — Pratik Ghela, Founder & CEO, MakeForms
MakeForms is now the only form builder in the market offering data residency selection at sign-up. The new capability delivers:
- Six global data regions: US, EU, Canada, Australia, India, and Singapore — with custom regions available for enterprise customers.
- Immediate compliance from day one: Full alignment with HIPAA, GDPR, PIPEDA, Australian DPA, CCPA, and CCCS at account creation — no configuration lag.
- Universal access: Available across all pricing tiers, including free plans — no enterprise gate, no negotiation required.
- Complete transparency: Users see exactly where their data resides before creating their first form.
Transforming the HIPAA Forms Landscape
For the healthcare industry, where a single data breach can cost millions in fines and erode patient trust irreparably, MakeForms' sign-up data residency selection is a game-changer. Healthcare providers — from solo practitioners to large hospital networks — can now create HIPAA-compliant forms knowing their PHI never leaves the region they selected during sign-up.
MakeForms' HIPAA forms offering goes well beyond basic compliance checkboxes. The platform delivers a complete healthcare data collection ecosystem: patient intake forms with conditional logic that dynamically surfaces relevant clinical fields, digital consent and authorization workflows, appointment booking, secure payment collection, and electronic signature capabilities — all built on HIPAA-certified infrastructure with a signed Business Associate Agreement (BAA) available to every user regardless of plan.
"Healthcare teams should be focused on patient care, not on decoding compliance paperwork," said Ghela. "With MakeForms, a dermatologist in Dallas and a telehealth network in Toronto can both build HIPAA-compliant patient intake forms in minutes — and both can be confident their PHI stays exactly where they chose it to be."
Powering Salesforce-Driven Enterprises with Compliant Data Collection
For the millions of businesses that run their sales, marketing, and customer operations on Salesforce, data residency has historically been an afterthought — a risk quietly sitting in the background. MakeForms changes that equation entirely through the latest offering of Salesforce Forms.
As a native Salesforce AppExchange solution, MakeForms connects seamlessly to Salesforce CRM workflows: form submissions automatically create or update Salesforce records, files collected through forms sync directly to customer profiles, and pre-filled forms pull existing Salesforce data to reduce friction and errors. All of this now happens within a data residency framework that the organization controls from day one.
This is critical for Salesforce administrators and consultants managing enterprise accounts in regulated industries. A healthcare organization using Salesforce to manage patient touchpoints needs its form data to stay in a US or EU data center. A financial services firm operating across APAC needs the same guarantee for Singapore or Australia. MakeForms is the only Salesforce form builder that makes this selection immediate — at sign-up, not after a sales call.
Enterprise-Grade Security Across Every Region
Unlike competitors who maintain different security postures across data regions, MakeForms delivers uniform, best-in-class protection regardless of where an organization's data resides:
- SOC 2 Type 2 compliance: Independently audited across Security, Availability, Processing Integrity, Confidentiality, and Privacy trust principles.
- ISO 27001:2019 and ISO 27017 certification: Meeting international standards for both information security management and cloud-specific security controls.
- AES-256 encryption: All data protected both in transit and at rest across every supported region — enabled by default on every plan.
- HIPAA compliance with BAA: Business Associate Agreements available to all users, not just enterprise tiers, making PHI protection accessible to clinics of every size.
- Data Processing Addendum (DPA): Ready-to-execute agreements aligned with GDPR, HIPAA, and other global privacy regulations.
Beyond Forms: A Complete Compliance Ecosystem
MakeForms' data residency capabilities integrate seamlessly with a broader security and compliance infrastructure that few form builders can match:
- Sensitive data masking: Team members can flag specific fields — ID numbers, financial details, clinical notes — as sensitive, restricting visibility to authorized personnel only.
- Password-protected forms: Source-level and form-level access controls ideal for internal surveys, gated patient portals, and employee-facing workflows.
- Two-factor authentication: Native integration with Google Authenticator and other TOTP providers.
- Single Sign-On (SSO): Enterprise identity provider support so teams can access MakeForms through their existing authentication infrastructure.
- Audit trails and access logs: Full visibility into who accessed, viewed, or modified form data — essential for HIPAA audits and SOC 2 reviews.
- Smart CAPTCHA and bot detection: Verified submissions without degrading the user experience.
- Automated encrypted backups: Regular, secure data protection with no manual intervention required.
Addressing the Global Compliance Crisis
The announcement comes at a critical inflection point. Data protection regulations are proliferating across every major jurisdiction — GDPR in Europe, HIPAA in the United States, PIPEDA in Canada, the Australian Privacy Act, CCPA in California — and enforcement agencies are increasing both the frequency and severity of penalties. Organizations that cannot demonstrate regional data control are increasingly vulnerable, not just to fines, but to reputational damage and lost enterprise contracts.
Traditional form builders have responded by restricting data residency to enterprise-only tiers or charging premium fees for geographic control. MakeForms' approach democratizes compliance, recognizing that a single-person medical practice collecting patient intake forms carries the same PHI protection obligation as a hospital system. And a two-person Salesforce consulting firm building lead-gen forms for a healthcare client faces the same data sovereignty requirements as a Fortune 500.
Real-World Impact Across Verticals
Organizations across multiple industries are already leveraging MakeForms' compliance capabilities to solve real data sovereignty challenges:
- Healthcare providers build patient intake, consent, and feedback forms with full HIPAA compliance and PHI stored in their chosen region.
- Salesforce-driven sales teams collect lead and customer data through compliant forms that feed directly into CRM workflows — with data residency locked in from sign-up.
- Financial institutions collect KYC and onboarding information through forms that meet regional data protection requirements by design.
- Educational institutions manage student records and communications compliantly across jurisdictions using no-code form workflows.
Pricing and Availability
MakeForms' sign-up data residency selection is available immediately to all users. The six standard regions — US, EU, Canada, Australia, India, and Singapore — are accessible to the paid users. Enterprise customers requiring custom regional deployments can contact the MakeForms team for tailored solutions.
About MakeForms
MakeForms is an enterprise-grade, privacy-first form builder that combines powerful functionality with uncompromising security. Trusted by healthcare organizations, government agencies, and global enterprises, MakeForms delivers SOC 2 Type 2, HIPAA, ISO 27001, GDPR, PIPEDA, and Australian DPA compliance alongside intuitive drag-and-drop design and robust integrations — including native Salesforce connectivity via AppExchange. With AI-powered form creation, industry-leading data residency control, and a complete compliance ecosystem, MakeForms empowers organizations to collect, manage, and protect sensitive information without compromise.
For more information, visit makeforms.io or contact support@makeforms.io.
Media Contact
Company Name: Eszmeletlen Holding Co.
Contact Person: Pratik Ghela
Email: Send Email
Address:1014 Opal Square Wagle Estate
City: Thane West
State: Maharashtra
Country: India
Website: https://makeforms.io/
