Skip to content
Form backend, minus the backend

Your form.
Delivered.

Connect any HTML or JavaScript form to a secure endpoint. Qubeforms handles spam, files, notifications, webhooks, and the inbox your team actually needs.

Free forever tier No credit card Live in five minutes
A contact form sending a protected submission to an inbox, email, and a webhook

Use whatever you already use

HTMLJavaScriptReactVueNext.jsDevflow CMSCodefyPHPSymfony
What is Qubeforms? 01

The part between “submit” and “we got it.”

Qubeforms is the backend for forms built anywhere. Give your form an endpoint and get validated, encrypted submissions in a searchable inbox—plus reliable email delivery to recipients you have verified.

<5 minTypical setup
3 formatsForm, multipart, JSON
0 serversFor you to maintain
Get started

Three small steps.
One less service to build.

No SDK is required. Your form stays yours; Qubeforms simply gives it somewhere dependable to go.

Create a form endpoint

Name the form, verify its recipients, and copy the public form key from your dashboard.

Paste it into your form

Use the endpoint as a standard HTML action or send FormData or JSON using fetch.

Publish and receive

Submissions appear in your inbox while notification email, webhooks, and retries happen behind the scenes.

Building forms

One endpoint.
Any frontend.

Start with plain HTML. Add JavaScript only when the experience calls for it. The response stays clean either way.

POST /v1/cf_pk_8f…21/submissions
<form action="https://api.qubeforms.io/v1/cf_pk_demo/submissions" method="POST">
  <label for="contact-email">Email</label>
  <input id="contact-email" type="email" name="email" autocomplete="email" required>

  <label for="contact-message">How can we help?</label>
  <textarea id="contact-message" name="message" required></textarea>

  <button type="submit">Send message</button>
</form>
const form = document.querySelector('#contact');

form.addEventListener('submit', async (event) => {
  event.preventDefault();

  const response = await fetch(form.action, {
    method: 'POST',
    headers: { 'Accept': 'application/json' },
    body: new FormData(form)
  });

  const result = await response.json();
  if (response.ok) form.reset();
});
export function ContactForm() {
  async function submit(event) {
    event.preventDefault();
    const response = await fetch(FORM_URL, {
      method: 'POST',
      body: new FormData(event.currentTarget)
    });
    if (!response.ok) throw new Error('Not sent');
  }

  return <form onSubmit={submit}>…</form>;
}
const status = ref('ready')

async function submit() {
  status.value = 'sending'
  const response = await fetch(formUrl, {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify(fields.value)
  })
  status.value = response.ok ? 'sent' : 'error'
}
What makes it different

Boring infrastructure.
Exceptional form handling.

The best form backend is the one your visitors never have to think about and your team can always trust.

Safe by default

Honeypots, rate limits, domain rules, verified recipients, encrypted payloads, and optional captcha protection.

Security

A real submissions inbox

Search, inspect trust signals, separate spam, export CSV, and take bulk actions without digging through email.

Workflow

Delivery you can see

Email notifications arrive with retries and visible status. Reply-To can point directly to the submitter.

Email

Signed automation

Send timestamped, HMAC-SHA256 signed webhooks into the systems and pipelines your team already uses.

Webhooks

Private file uploads

Send attachments to private storage and expose time-limited secure links instead of public files.

Paid plans

Incomplete is still useful

Save progress on multi-step forms and follow up when a high-intent visitor does not reach the last screen.

Drafts

CORS that just works

Preflights are handled and fetch clients receive structured JSON, without maintaining a proxy endpoint.

Developers

Privacy considered

TLS in transit, controlled retention, no sale of personal data, and tools designed for GDPR-aware workflows.

Privacy
How it works

A short, secure trip.

Every request moves through a deliberate pipeline before it becomes a message in your inbox.

Your visitor submits

HTML, FormData, multipart, or JSON.

Qubeforms validates

Origins, limits, spam signals, and fields.

Payload is protected

Data is encrypted and files stored privately.

Your team receives it

Inbox, email, webhook, or API.

Put your next form online before your coffee gets cold.

The free plan is free for good. No card, no trial countdown, no backend deployment.

Create a free endpoint