Forms · Approvals · E-signatures · Records
mdflows turns paperwork into flows you can prove: forms that open instantly on any phone, approvals drawn on a canvas, signatures with evidence, and records kept under your rules — every step written to a tamper-evident audit log.
30 days freeNo credit cardPlans from $19.99/month
What it is
Most tools do one of these steps and hand you off to the next tool. mdflows does all eight in one place, so the evidence never leaves the chain.
Drag fields onto a page — or describe the form and review what the assistant proposes. Logic, calculations, line items, live lookups.
Each publish is an immutable version. Edits become a draft, so nothing changes under a live form.
A public link, an embed on your site, or a members-only page. Save and resume. Seven themes, your logo.
Approvals in sequence or in parallel, branches on any answer, deadlines that remind and escalate.
Staff sign in the app; outside parties sign from a secure email link — no account needed.
Send results to SharePoint, your database, a webhook, or anywhere through the API.
A document vault with cabinets, versions, full-text search, retention rules and legal holds.
Every change is chained by hash to the one before it — a record anyone can verify.
A closer look
Real screens from the product, recorded in a demo organization.
Build
Start from a blank page or a sentence. The assistant proposes fields, logic and whole sections as a change you review — you apply it, and it never deletes anything.
AI stays off until an administrator enables it and records consent.
Fill
A fill page is about 22 KB of JavaScript — a sliver of a typical web page — so it loads on an old phone in a hallway. Every build checks it against WCAG 2.1 AA, and it looks like your organization, not like us.
Route
Draw who approves what on a visual canvas. Branch on any answer, run reviewers in parallel, set deadlines that remind and escalate, and let people delegate while they are away.
Sign
Collect signatures from staff in the app and from anyone else by a secure, single-use email link — no account, no app to install. Each signature records who, when, from where, and a fingerprint of exactly what was signed.
Built around the intent, consent and attribution principles of the U.S. ESIGN Act and UETA.
Keep
Completed submissions file their PDF and attachments into a document vault automatically. Organize by cabinet and document type, search inside the files, and let retention rules do the housekeeping — except where a legal hold says otherwise.
Connect
The same REST API the app itself uses is yours, with signed webhooks and connectors for the tools institutions actually have.
Security & reliability
Affordable doesn’t mean cut corners. The same protections run on the $19.99 plan and on an Enterprise contract.
Every change, sign-in and signature is chained by hash to the entry before it. Alter one record and the chain breaks — provably.
Your records live in their own database. There is no shared table another customer’s query could ever reach.
Encrypted in transit and at rest. Stored integration credentials are sealed again with keys that rotate without downtime.
Two-factor authentication on every plan, Microsoft and Google single sign-on from Team up, lockouts, and per-resource permissions.
Databases keep point-in-time recovery for 30 days, and files sit on storage designed for eleven nines of durability.
Every build must pass automated WCAG 2.1 AA checks on the pages the public and your reviewers use.
Two homes, one product
Some organizations want nothing to run; others can’t let data leave the building. mdflows is one codebase, tested both ways on every release.
Runs on Cloudflare’s global network with point-in-time database recovery, isolated storage for every organization, and updates that simply arrive. Start in minutes.
The same product as a Windows service on your own hardware, with automated backups, a tested restore drill and an offline updater. Pair it with a local AI model and nothing leaves your building. Talk to us.
Pricing
One price for your whole organization — never per seat. Try everything free for 30 days, no credit card.
For one professional with paperwork to prove
$19.99$16.58/ month
billed monthly · or $199 a yearbilled $199 yearly — 2 months free
Request accessFor departments and growing businesses
$49.99$41.58/ month
billed monthly · or $499 a yearbilled $499 yearly — 2 months free
Request accessFor institutions that run on forms
Custom quote
invoiced monthly or yearly
Schedule a callPrices in US dollars per organization, before applicable taxes. Need invoicing, higher volume or a security review? Talk to us.
The same product as a Windows service on your own server — offline license, air-gapped if you like. Priced annually.
Questions
Your organization pauses new activity: no new forms, users or submissions, and public forms show a polite “not accepting responses right now” page. Nothing is deleted — you can still sign in, read and export everything, and finish approvals already in progress. Choose a plan and everything picks up where it left off.
No. The trial runs for 30 days with every feature switched on, and nothing is charged. If you subscribe before it ends, the rest of the trial carries over — the first charge waits for the trial’s last day.
No. Each plan is one flat monthly price for your whole organization. People who fill in your public forms, or sign from an email link, never count as users.
No practical cap. To protect the service from runaway automation, unlimited forms have a guardrail of 10,000 active forms and unlimited users a guardrail of 100,000 accounts per organization. If you ever get close, we’ll talk first.
mdflows records what the U.S. ESIGN Act and UETA look for: the signer’s intent and consent, and evidence of who signed, when, from where, and a fingerprint of exactly what they signed. Some documents — wills and certain court filings, for example — still need wet ink or special handling; your counsel can tell you which of yours do.
In mdflows Cloud, on Cloudflare: your organization’s records in their own isolated database, and your files in object storage. If your data has to stay on your premises, run mdflows On-Premises instead.
Yes, any time: submissions as CSV or PDF, documents in their original formats, and everything else through the REST API. Your data is yours.
Not yet — and we take the question as seriously as you do. mdflows does not have a SOC 2 report today. We are preparing for a SOC 2 Type I audit and will publish its date once it is scheduled.
The technical controls an auditor tests are already running for every customer: an isolated database per organization, a tamper-evident audit log, sealed credentials and two-factor sign-in. Our infrastructure provider, Cloudflare, holds its own SOC 2 Type II report and ISO/IEC 27001 certification.
See where we stand on each framework in the trust center, or request our security packet — we will answer your security questionnaire, whether HECVAT, CAIQ or your own.
AI is off until an administrator turns it on and records consent. When you ask it to build, it sees the form’s structure and your request; document suggestions need their own, separate consent. Use our hosted model or your own provider key — or, on-premises, a local model so nothing leaves the building.
Yes. Plans are month-to-month, or yearly with two months free. Cancel whenever you like from your Plan page (payments are handled by Stripe) and keep access through the end of the period you paid for. Nothing is deleted when a plan ends.
30 days, every feature, no credit card. Your first form can be live this afternoon.