Accessibility and hosting
What we checked for accessibility, and where your data is stored. The full statements are on the SharpForm website, under Accessibility and Hosting and data region.
Accessibility
We aim for WCAG 2.2, level AA.
On 26 October 2026 we audited the pages your respondents see: public forms, the page where a respondent sees their response, kiosk mode and the embedded form. We checked the page code against WCAG 2.2 AA and ran automated contrast tests on every built-in theme. We did not test these pages by hand in a browser or with a screen reader.
- Every built-in theme preset, in every input and question style, in light and dark, meets the AA contrast levels for text (4.5:1) and for borders, focus rings and progress (3:1).
- Fields have labels, a required state, an error state and error text. Errors are announced and listed with a link to each field.
- A form can be filled in with the keyboard alone. The focus marker is always visible and is not hidden by the sticky action bar.
- Common fields say what they are for, so your browser can fill them in.
- Changes such as “saved” and “sent” are announced to screen readers.
- Forms respect the reduced-motion setting on your device.
- The page language is declared, and the embedded form has a title.
Not covered: the dashboard and the form builder have not been audited. What a form owner adds is the form owner's responsibility: custom colours outside the built-in themes, the wording of labels, and the alt text on images and logos.
If you cannot use a SharpForm page, email help@sharpform.co.za with the page address and what went wrong.
Hosting and data region
Your data is stored in South Africa. Our database runs on our own servers in South Africa, and uploaded files, outgoing email and sign-in are on Amazon Web Services in Cape Town.
Some companies we use handle limited data outside South Africa. These companies process that data abroad:
- Cloudflare (web traffic and the Turnstile bot check)
- Vercel (serves the website, dashboard and public forms)
- Sentry (error reports)
- Paystack (SharpForm's own billing only)
- OpenRouter and its zero-retention model hosts (AI features only, when someone uses them)
- Tally (waitlist emails only)
The sub-processors page on the SharpForm website says what each company handles.