Forminit (formerly Getform) review: pricing, limits and the rename

Getform is now Forminit: what changed and what didn't

Getform.io became Forminit on 14 January 2026. Forminit's announcement, last updated 9 August 2026, says it was a rebrand, not an acquisition: the same independent team, operating company UXPLUS LTD, running the service since October 2015. The old web addresses now redirect: getform.io goes to forminit.com, docs.getform.io to the Forminit docs and app.getform.io to app.forminit.com.

For existing customers, Forminit says nothing has to change. Its post states that existing Getform endpoints continue to receive submissions, and that you do not need to update live forms or migrate submissions because of the rename. We did not send test submissions to an old endpoint, so that rests on Forminit's own statement.

Migration only comes up if you want the newer features. Forminit says to create a new form in the dashboard and follow the current setup guide for your stack. New forms use the endpoint forminit.com/f/ followed by a form ID, and the docs say inputs must be named fi-{blockType}-{name}, for example fi-sender-email or fi-text-message, and that inputs with other names are not stored. Rebuilding an old Getform form on the new setup is therefore a markup change, not only a URL swap.

The rename arrived with a product update: public and protected submission modes, workspaces, typed form blocks with server-side validation and a submission inbox. The changelog since then adds form analytics (February 2026), a Python SDK, signed webhooks (June 2026), webhook failure alerts (July 2026), Google Sheets (July 2026), Cloudflare Turnstile (August 2026), automatic retention (August 2026) and visual Workflows (October 2026).

How Forminit works

Forminit is headless: it has no hosted form page, embed or form builder. You create a form at app.forminit.com, copy its form ID and point your own form at POST https://forminit.com/f/{formId}. The endpoint accepts a plain HTML form post, JSON, or multipart form data for files. Forminit also publishes a JavaScript SDK (CDN or npm, with proxy handlers for Next.js and Nuxt.js) and a Python SDK.

Each form runs in one of two modes. Public mode is for browser forms and needs no API key; the docs limit it to one submission every 5 seconds per IP address. Protected mode is for server-side sending with an X-API-KEY header and allows 5 requests a second per IP. Requests over the limit get a 429 error and the submission is not stored.

Fields are typed blocks. A sender block holds the submitter's name, email, phone and company, and field blocks such as email, phone, url, date, rating and country are validated on the server: phone numbers must be E.164, countries ISO codes, ratings 1 to 5. A submission can carry up to 100 field blocks. The browser SDK also records UTM parameters, ad click IDs and the referrer.

• Endpoint: POST https://forminit.com/f/{formId}
• Field names: fi-{blockType}-{name}, such as fi-sender-email, fi-text-message, fi-file-resume
• Guides cover HTML, React, Next.js, Astro, Nuxt.js, Node.js, Python, Cloudflare Workers, Webflow, WordPress and static site generators

Free plan, paid plans and what happens at the limit

The Free plan costs nothing, needs no card and includes 100 submissions a month on one form, file uploads with 100 MB of storage, email notifications, redirects, validation, built-in spam filtering and the workflow's conditions and status actions. Submissions are kept until you delete them. The terms allow one free account per person.

Pro is $19 a month or $190 a year for 5,000 submissions a month and 15 forms. Business is $99 a month or $594 a year for 50,000 a month and unlimited forms. The pricing page shows yearly billing by default, so it displays Pro as $16 a month and Business as $50 a month; those are the yearly prices divided by 12. Prices are in US dollars before tax, and a custom plan is available from sales.

The limits are hard. When a form reaches its monthly allowance, Forminit pauses it and rejects new submissions until the allowance renews or you upgrade, and the pricing FAQ says submissions sent while paused are not stored or queued, so they cannot be recovered. When file storage is full, submissions without files are still accepted but those with uploads are rejected. If a downgrade leaves you with too many forms, Forminit keeps the most active ones collecting and pauses the rest.

Spam protection and file uploads

Every form has built-in spam filtering that needs no setup, and the GDPR page lists CleanTalk as the spam protection subprocessor. On top of that you can add Cloudflare Turnstile, Google reCAPTCHA v3, hCaptcha, a hidden honeypot field (named _gotcha by default, renamable per form) and authorized domains. Submissions from domains not on the list are not rejected; they go to the Spam folder, where you can restore false positives. Spam is deleted after 30 days on every plan.

File uploads work on every plan through file blocks named fi-file-{name}, sent as multipart form data; JSON submissions cannot carry files. The limit is 25 MB per submission across all files combined, with up to 20 file fields, in more than 50 file types. Storage is 100 MB on Free, 1 GB on Pro and 10 GB on Business. Files get download links in the dashboard and are deleted with their submission. In webhooks, files arrive as URLs and metadata, not as binary content.

Workflow, webhooks, integrations and email delivery

Everything that happens after a submission is set up in a visual Workflow per form: send an email notification, send an autoresponder, call a webhook, post to Slack or Discord, add a Google Sheets row, change the status, or move the submission to spam, with if/else branches that route on field values. Each submission shows which actions ran, and a failed action can be retried on its own. Email notifications, conditions and status actions are on every plan; autoresponders, webhooks, Slack, Discord, Google Sheets, Zapier and the REST API start on Pro.

Webhooks send a form.submitted JSON payload and must pass a test (an HTTP 200 from your endpoint) before they can be published. Requests are signed with HMAC-SHA256 and carry a webhook ID and timestamp, and the docs suggest a five-minute timestamp tolerance. Forminit retries failed deliveries with exponential backoff, can email a failure alert, and keeps delivery logs. The docs say timeout and retry-attempt limits may depend on its delivery configuration and do not publish exact numbers.

Notification emails go to any number of To, Cc and Bcc addresses, with reply-to and subject lines that can use form variables, such as replying straight to the submitter. The email notifications guide says they are sent from [email protected], while the custom sender guide says [email protected]. Sending from your own domain through your own SMTP server, and removing Forminit branding from emails, are Business features. The pages we checked do not name the provider that sends notification emails.

Dashboard, retention, data location and privacy

Submissions land in an inbox with full-text search, filters for status, date, starred and unread, internal notes and statuses (Open, In progress, Done, Closed). CSV export starts on Pro. On every plan, including Free, submissions are kept until you delete them. On Pro and higher, Submission Retention can delete a form's submissions and files automatically after 30, 90 or 365 days or a custom period. Deleted data expires from backups within 35 days.

Forminit's security page says submissions, uploaded files and backups are hosted on AWS in Ireland, encrypted at rest with AES-256 and in transit with TLS 1.2 or newer, and that internal access to production systems requires a VPN and follows least privilege. For data collected through your forms, you are the controller and Forminit the processor. It says it does not sell submission data or use it to train AI models.

The GDPR page lists its subprocessors: AWS (hosting), CleanTalk (spam), Cloudflare (only if you enable Turnstile, US), Fathom (analytics), Pusher (real-time), Laravel Nightwatch (monitoring), Resend (marketing emails), Stripe (payments) and Typesense (search), all in the EU except Cloudflare. The GDPR page says business users agree to the Data Processing Agreement by accepting the terms; the security page says a copy is available on request. Forminit says it is registered with the UK ICO. The security page is explicit that the ISO 27001 and SOC certifications it mentions belong to AWS, not to Forminit.

Support, uptime and billing terms

Support runs through a contact form (with topics for technical support, billing, abuse and general questions) and [email protected]; the terms describe support in English by chat and email, with response times proportionate to severity. The pricing page does not list different support levels per plan. Forminit targets 99.9% uptime, which it calls a goal and not a contractual SLA, and publishes a status page at status.forminit.com. Security issues go to [email protected].

Payment is by Visa, Mastercard, American Express or PayPal, with Stripe processing card payments. You can cancel at any time and keep paid features until the end of the billing period. The terms (last updated December 2025) say charges are non-refundable, with no refunds or credits for partial months, plan changes or unused time. The pricing FAQ says unused time is typically prorated or credited on a plan change, so ask before you rely on either. The terms also allow Forminit to throttle accounts whose bandwidth goes over 500 MB a month.

Forminit compared with splitforms

splitforms, which publishes this review, is also a form backend, so here are the differences that matter. Forminit Free gives 100 submissions every month on one form; splitforms Free is 500 submissions in total (one-time, not monthly) across unlimited forms. On paid plans, splitforms Pro is $5/month for 5,000 submissions a month and Annual is $49/year for 15,000 a month, compared with Forminit Pro at $19/month or $190/year for 5,000 a month.

Forminit has the edge on free file uploads, EU hosting, typed server-side validation and its visual workflow. splitforms accepts your existing input names, keeps submissions with no automatic expiry, sends notification emails on every plan and filters spam with rules and no CAPTCHA required. File uploads (5 files of 5 MB each per submission) and HMAC-signed webhooks come with any paid splitforms plan. Compare at your real monthly volume and form count.