Privacy Forms Studio — Component Overview

Privacy Forms Studio — Component Overview An architecture diagram generated by Archify. External page · iframe / Direct DOM · Architecture component External page iframe / Direct DOM Embed security · origin allowlist · JWT · Checks before any action · single-use Embed security origin allowlist · JWT single-use LLM provider · Ollama · custom · installed · Architecture component LLM provider Ollama · custom · installed Browser · Creator + Viewer · Architecture component Browser Creator + Viewer Browser views · @@viewer · @@save-poll · Your Plone site — data stays local › Checks before any action Browser views @@viewer · @@save-poll Service layer · ai · auth · export · results · Your Plone site — data stays local Service layer ai · auth · export · results Results store · ZODB annotations / RDBMS · Your Plone site — data stays local · site scoped Results store ZODB annotations / RDBMS site scoped Validator binary · survey-core 3.x · no Node.js · Architecture component Validator binary survey-core 3.x · no Node.js Mail & webhook · SMTP · POST endpoint · Architecture component Mail & webhook SMTP · POST endpoint Converters · Markdown IR → 9 formats · Your Plone site — data stays local Converters Markdown IR → 9 formats HTTPS loader + token X-Embed-Token + Origin in-process store action schema + payload llm package mail · post action stored payload + schema Your Plone site — data stays local Checks before any action

Runs on your own Plone site

  • • Forms, submissions and versions live in ZODB or your own RDBMS
  • • Tokens, replay state and the chatbot index stay local
  • • No external SaaS service is required for forms to work

Trust boundary at the edge

  • • @@save-poll hardens and validates before any side effect
  • • Embeds add an origin allowlist and single-use signed tokens
  • • Permissions separate viewing, editing and administration

Optional integrations

  • • Validator binary: built once, invoked as a subprocess
  • • AI generator and chatbot share one configured LLM provider
  • • Mail and POST webhooks are per-survey actions