Form submissions
This document covers features you can use to manage your form submissions and recommendations for sensitive data. To learn how you can be made aware of new form submissions, visit our form notifications page.
# Form submissions UI
You can find all submissions to your Netlify forms in your site’s
tab. Select a form name from the Active forms list to access the submissions for that form. By default, only verified submissions are listed. You can switch to spam submissions using a menu above the list.Note
If you’ve disabled form detection, Netlify will not process any new or changed forms in your HTML files during deploys. You can still access form submissions for any preexisting and unchanged forms, but any newly deployed or updated forms won’t support new submissions while form detection is disabled.
# Export form submissions to CSV
You can export verified form submissions to a CSV file. From the Forms tab, select the form you want to export, then select Download as CSV near the top of the form detail page.
# Change a form submission’s state
You can change the state of a submission from spam to verified or vice versa. To do so, check the box next to each submission title to select one or multiple submissions and then use the Mark as spam or Mark as verified button.
# Delete a form submission
You can delete both verified submissions and spam submissions. To do so, check the box next to each submission title to select one or multiple submissions. After you select the submissions, a red Delete submission button will become available. When you select Delete submission, you’ll be prompted to confirm the deleting action. Once you confirm, your selected submissions will be deleted permanently.
# Delete a form
You can delete a form and all of its submissions by selecting Delete form. You’ll be prompted to confirm the deleting action. Once you confirm, future submissions to the form will result in a 404 error and previous submissions will no longer be available. You may want to export form submissions to CSV before you delete your form.
# API endpoints
You can use the API to get verified/spam submissions, delete submissions, delete forms, and more.
# File uploads
When a form is submitted with one or more file uploads, a link to each uploaded file will be included in the form submission details. These are accessible in the Netlify app, in email notifications, in CSV exports, and from our API.
# Manage sensitive form data
Form submission data is securely stored in our user database. If your form collects personally identifiable information (PII), we recommend that you actively manage the data by exporting form submissions and deleting them regularly.
Forms that include file uploads with personally identifiable information should use the Very Good Security integration to protect this data.
# Automatic sanitization
Our form handling automatically sanitizes form submissions to keep your site and business secure. Any code that gets submitted through Netlify Forms, such as <script> tags or anything else that could be harmful, is neutralized.
Take for example the following code:
<script>alert('Surprise!');</script>
If someone tries to submit this through your form, we transform the code into the following to make it harmless:
<script>alert('Surprise!')</script>
# Form-triggered functions
You can integrate your forms with Netlify Functions by triggering a serverless function when a form submission is verified. Find out more in the Functions docs.
Did you find this doc useful?
Your feedback helps us improve our docs.