Data Breach Initial Report — shared by the community

Who this template is for

Data Breach Initial Report is built for engineering, IT and product teams who need to route technical requests with the context needed to triage them.

• Engineering, IT and product teams working in technology, saas & dev.
• Teams who need to route technical requests with the context needed to triage them without writing code or paying for a custom build.
• Anyone replacing vague reports that can't be reproduced or prioritised with one structured record per enquiry.
• Respondents are users, testers and internal stakeholders — the form asks them 32 questions across 3 screens.

Why this form is useful

It removes the cost of vague reports that can't be reproduced or prioritised and turns each submission into a record your team can act on immediately.

• 24 questions are required, so submissions arrive complete instead of needing a follow-up email.
• It captures a phone number for urgent follow-up.
• It accepts a document or photo upload as evidence.
• It pins the request to a specific date.
• It allows multiple selections without free text.
• It captures a numeric value you can filter and sort on.
• Conditional logic hides 4 questions until they are relevant — shorter forms convert better than long ones.
• Splitting the form across 3 pages keeps each screen short and shows respondents how much is left.

How to use this template

From copy to live form is a few minutes of work, and every step is reversible.

1. 1Press “Use this template” — a fresh copy of Data Breach Initial Report lands in your workspace, ready to edit.
2. 2Rename or delete any question, and change what is required. Nothing here is fixed.
3. 3Open Notifications and add the email addresses that should be alerted on each submission; add an auto-reply to the respondent if the form collects an email address.
4. 4Check the upload limits on the file question so respondents can attach what you actually need.
5. 5Publish it, then either share the link directly or paste the embed snippet into your site — the embedded form resizes to fit and loads no marketing or advertising trackers.
6. 6Watch responses land in Submissions, where you can filter, label and export them to CSV or PDF.

Logic and conditions blueprint

Exactly how this form behaves as it is answered — 4 conditional rules ship with it.

• Features conditional validation: if “Is the exposure still live?” is Yes, “What is stopping it being closed” becomes mandatory before the form can be sent.
• Features conditional validation: if “Did the data leave the organisation?” is Yes, “Where it went, and who holds it now” becomes mandatory before the form can be sent.
• Features conditional validation: if “Is a supplier or third party involved?” is Yes, “Which supplier, and what they have been told” becomes mandatory before the form can be sent.
• Features conditional validation: if “Has anyone outside the organisation been told?” is Yes, “Who was told, when, and by whom” becomes mandatory before the form can be sent.
• All 4 rules are editable in the Logic tab, and the built-in checker warns about rules that contradict each other.