Multi-page form builder
Organize long forms into pages and sections. Text, email, phone, number, date, dropdowns, radios, checkboxes, file uploads, and content blocks — defined as portable YAML you can version and move.
Features
Everything a serious form needs
A complete, shipping platform — not a form widget. Build, deliver, automate, and govern, all in one place.
Conditional logic
Show or hide pages, sections, and fields from the answers so far. Rich operators and all/any/not rules, evaluated identically on the client and server so what a visitor sees is exactly what gets validated.
Localization built in
Ship one form in many languages with a base language and per-locale translations. Visitors get their locale or a clean fallback — no duplicated forms to maintain.
Reliable email delivery
Submissions go out over SendGrid with per-form recipients, dynamic CC, and rich HTML + plain-text notifications. Delivery is best-effort and asynchronous, so a mail hiccup never drops a captured submission.
Autoresponders
Send a translated confirmation back to the person who filled out the form, addressed from the field they entered — only when a valid address is present.
Signed webhooks
Push every submission to your stack as JSON with custom headers. Each call is HMAC-SHA256 signed and timestamped so your receiver can verify authenticity and reject replays. Workflow triggers are unlimited.
Microsoft sign-in & roles
Microsoft / Entra ID single sign-on, granular role-based permissions, groups, and verified-domain auto-provisioning so the right people land in the right workspace automatically.
Custom domains
Serve forms on your own domain or an Overture subdomain with automatically issued TLS certificates. Tenant isolation keeps every customer's data and forms their own.
Audit logging
An append-only audit trail records submissions, configuration changes, and every staff view or export of submission data — who, what, when, and from where.
Built for sensitive data
Enterprise-ready, not enterprise-heavy
Overture treats security as table stakes: least-privilege access, masked PHI, sealed secrets, and an immutable record of who touched what.
- PHI-aware. Fields flagged as PHI are masked in notifications while access stays auditable — a HIPAA-grade posture out of the box.
- Secrets stay sealed. Delivery credentials live in AWS Secrets Manager and are referenced, never stored in the database.
- Real RBAC. Owner, admin, security officer, member, and developer roles — plus custom roles — gate every action by permission.
- Authoritative validation. Server-side validation is the source of truth and the client mirrors it exactly, so an accepted submission is always a valid one.
Raise the curtain
Your first form is minutes away.
Sign in with your Microsoft account and your workspace is provisioned automatically. No credit card to start.