altcha-org / forms

ALTCHA Forms enables secure data collection through forms. Compliant with GDPR and HIPAA.
https://altcha.org/forms
GNU Affero General Public License v3.0
8 stars 3 forks source link
forms gdpr hipaa privacy sveltekit

ALTCHA Forms

ALTCHA Forms is a robust, secure platform designed for businesses requiring compliance with data privacy regulations. It facilitates seamless and secure data collection through various forms, ensuring compliance with regulations such as GDPR and HIPAA.

For more information, visit altcha.org/forms.

Table of Contents

  1. Project Status
  2. Project Goals
  3. Target Audience
  4. Use Cases
  5. Features
  6. About Encryption
  7. About eSignatures
  8. Getting Started
  9. Self-Hosting
  10. Roadmap
  11. Contributing
  12. License
  13. Commercial License

Project Status

This project is currently in Public Beta.

Project Goals

ALTCHA aims to provide a community-driven, open-source solution for modern, privacy-friendly data collection and security. ALTCHA Forms is designed to:

Target Audience

Large Enterprises

ALTCHA Forms is ideal for enterprises needing advanced security and regulatory compliance. Its open-source, self-hosted nature ensures full data control.

Medium and Small Businesses

Regardless of size, ALTCHA Forms helps businesses comply with data privacy regulations, making operations safer and more efficient.

Non-profits

The open-source model suits non-profit organizations and NGOs, offering robust data collection without financial strain.

Individuals

Even personal websites must comply with data privacy regulations. ALTCHA Forms simplifies compliance for individuals.

Use Cases

ALTCHA Forms includes several building blocks that simplify the creation of custom forms. Some use cases include:

Features

About Encryption

ALTCHA's Encryption Shield is an automatic, user-friendly encryption system built on the asymmetric RSA algorithm. It secures all employee and customer data, including file attachments.

Submitted form data is encrypted on the server, after validation and processing, and stored in the database encrypted, protecting data from potential data breaches. File attachments are encrypted on the user's device, employing true end-to-end encryption. Only authorized devices with a valid encryption key can decrypt and access protected data.

About eSignatures

ALTCHA Forms includes support for EU/eIDAS-compliant, legally binding, simple and advanced digital signatures. Simple signatures include hand-written signatures and scanned stamps; advanced signatures include qualified digital certificates (using a signed PDF file) and other formats such as DigiDoc which can be uploaded as attachments.

Getting Started

To get started with ALTCHA Forms, use the hosted SaaS version:

For self-hosting, follow the instructions below.

Self-Hosting

Prerequisites

Docker Compose

Use the provided Dockerfile or docker-compose configuration to start Postgres, Redis, and ALTCHA Forms containers:

docker-compose up

Database Migration

To apply migrations to the database schema, use the following command (requires Node.js):

export DATABASE_URL=postgres://...

npx drizzle-kit migrate

Alternatively, you can manually create the database tables using a Postgres client and the migration files located in the /drizzle folder.

Application Access

Navigate to http://localhost:3000/app and complete the registration to create your account.

Environment Variables

Configure DATABASE_URL, and BASE_URL. See env.ts for all supported variables.

Contributing

Refer to our Contributing Guide and adhere to our Code of Conduct.

License

ALTCHA Forms is licensed under the GNU Affero General Public License version 3 (AGPLv3).

ALTCHA Forms - Secure Data Collection Platform

© 2024 Altcha.org, Daniel Regeci

This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details.

You should have received a copy of the GNU Affero General Public License along with this program. If not, see https://www.gnu.org/licenses/.

Commercial License

A commercial license is available for businesses requiring different licensing. This license allows software modification without public disclosure of your source code and removal of ALTCHA branding from public-facing forms and pages.

For more information, visit altcha.org/forms. Support plans are also available.