FormProof beta: what it checks, what it doesn't, and what it leaves behind

What each check does

1. Loads your page's HTML and confirms the HubSpot embed code for your form is still there.
2. Confirms FormProof still has access to your HubSpot account (if you disconnected or uninstalled, nothing is sent).
3. Reads the form's settings. If CAPTCHA is on, the check stops: we never get around CAPTCHAs.
4. Sends one labeled test submission to that form through HubSpot's form submission service.
5. Searches your HubSpot CRM for the test contact for up to 15 minutes, and checks the form's submission history.
6. Deletes the test contact and records the result.

What a result tells you

• Received: a submission to this form reached your CRM as a contact within 15 minutes.
• Not received within the window: HubSpot accepted the submission but no contact appeared. We search once more an hour later.
• Unable to verify: the check could not run (embed code missing, CAPTCHA on, access lost). It says nothing about delivery.
• Each result is one test at one time, not a guarantee that every inquiry arrives.

Not checked

• Your website's Submit button. We never click it; the test goes straight to HubSpot's submission service.
• Whether the form displays correctly in visitors' browsers, on phones, or behind cookie banners.
• Staff notification emails, workflows and follow-up.
• Forms not built with HubSpot, or embedded without HubSpot's standard embed code.
• Phone lines, lead quality, volume or revenue.

Permissions we ask HubSpot for

• forms: read your form's fields and settings, and its submission history.
• crm.objects.contacts.read: find the test contact.
• crm.objects.contacts.write: delete the test contact we created. We don't change or delete any other record.
• A HubSpot Super Admin, or a user with App Marketplace access, must approve the connection.

What stays in your HubSpot

• Deleted test contacts stay restorable in HubSpot's recycle bin for 90 days.
• Form submissions stay in the form's submission history; FormProof can't delete them.
• Notifications and workflows fire as for a real inquiry. Tests are named "FormProof Test" and the message starts "TEST INQUIRY".
• If HubSpot files a test as spam, it appears on the form's Spam tab and is removed by HubSpot after 90 days.
• If deleting a test contact fails, your results page says so and lists it for you to delete.

Before you start

• HubSpot will warn you when you install. FormProof is not yet listed on the HubSpot App Marketplace. Its developer domain, getformproof.com, is verified, but HubSpot shows that it hasn't reviewed the app and asks you to type "I accept the risk" before connecting.
• The form's "Automatically create new contacts from unknown email addresses" setting must be on, or submissions create no contact and the result will be "Not received".
• CAPTCHA must be off for the form.
• Your website's domain should be listed in HubSpot under Settings → Tracking code → Additional site domains. In our tests HubSpot blocked submissions from an unlisted domain as "Unregistered Site Domain" spam.
• The beta is invite-only and limited to 20 HubSpot accounts. Request an invite, or email support@getformproof.com.

Beta terms

• Free. No card is collected and nothing is charged.
• 4 weekly checks and up to 4 on-demand checks every 30 days.
• Disconnect HubSpot or delete all your data any time from Settings. Uninstalling FormProof in HubSpot also stops checks.
• Results and reports are emailed to you.