See the forms on your website—and the privacy questions they raise
By CertScore.ai
Find observed forms and fields, open available form screenshots, and give your next website privacy review a clearer starting point.
A contact form asks for an email address. A booking enquiry adds a date of birth. A newsletter checkbox arrives already selected. Before a team can review data collection, it needs to see what the website is asking visitors to provide.
CertScore.ai brings observed forms, retained field details and available form screenshots into your website report. Developers can locate the form, agencies can explain it to a client, and privacy reviewers can start with the captured evidence.
A clearer view of data collection
Our September forms capture updates bring a dedicated Forms & fields inventory and verified, masked form crops to single-page and full-site reports. Today’s announcement introduces the combined workflow; these capabilities began rolling out earlier in September.
Form detection, screenshot capture and privacy assessment each answer a different question: what was observed, what can be shown, and what the retained evidence supports. A detected form is not automatically a privacy concern.
From a form to the details that matter
The screenshot adds visual context to the structured inventory: which fields sit together, how they are labelled and what the visitor is shown. Unavailable images remain clearly marked, while retained field details stay available for review.
- Find the captured page and review each retained form’s type, field count, method and declared destination.
- Expand a form to inspect labels, field types, required states, checkbox or toggle states and evidence references.
- Choose View form to open its cropped screenshot when capture and safety review succeed. Input values are masked.
- Use field-review indicators to prioritize questions about personal data, sensitive-looking fields and selected marketing controls.
Turn visual evidence into better questions
Imagine handing a developer a review request with the page, field labels and captured form attached. Instead of “check the forms,” the conversation can be specific: Why is this field required? Does the privacy notice explain its purpose? Should this marketing choice start selected?
Field-review indicators help route that conversation; they do not by themselves change a score or establish a legal issue. Separately supported findings can highlight retained sensitive-surface context alongside qualifying tracking or session-replay evidence. That co-occurrence warrants investigation, not a claim that entered values were captured.
For teams reviewing GDPR risk signals, form evidence is a practical starting point for checking data collection against privacy notices and intended implementation. Human review remains essential.
A real capture from our owned test page
On September 21, 2026, a production scan of our owned ErgoVeritas contact-form fixture retained four fields: Full name, Email address, Enquiry and an unchecked opt-in control. The report recorded the email field as required and retained a matching, masked form screenshot.
The report surfaced no privacy findings. Its field-review cues identify personal-contact, identity and free-text fields for investigation; they do not claim the form is unlawful. This controlled example demonstrates the capture workflow, not real visitor data or a benchmark of all websites.
Try it in your next review
You can copy the forms table as JSON. API v2 report-evidence exports and MCP report-evidence retrieval also carry retained form details, coverage and snapshot links, subject to the report’s access rules. Images remain separate downloads.
- 1Scan an eligible public website or open a recent completed report.
- 2Find Forms & fields below Services & Resources and expand a form.
- 3Open View form where available, check the source page and evidence references, and read any coverage limitations.
- 4Review the relevant Detailed evidence and share a precise follow-up with the developer or privacy owner.
Availability and limits
Forms capture is available in supported public single-page scans and on inventoried pages of full-site scans. Your existing scan access and crawl limits apply. Historical reports retain their original evidence.
The scanner observes the rendered main document within a bounded window. It does not fill or submit forms, sign in to protected pages, inspect iframe contents, or guarantee every form. Hidden controls and fields revealed only by interaction are outside this inventory.
Screenshots depend on successful capture, form-to-field verification and safety review. A missing image is a coverage limitation, not a privacy finding. Automated observations, not legal advice.
Try it
Take a closer look at your forms
Run a public website scan, then open Forms & fields in the completed report.