Storing and handling form data is one of the most important aspects to consider while designing forms.
In a production environment, it is recommended not to store submitted form data in the AEM repository. The default implementation of Forms Portal Store, Store Content, and Store PDF submit actions store form data in the AEM repository. These submit actions are meant only for demonstration purposes. Also, the Save and Resume and Auto Save features use portal storage by default. Therefore, consider the following recommendations:
Length of draft ID: When you save an adaptive form as a draft, a draft ID gets generated to uniquely identify the draft. The minimum value for the length of the draft ID field is 26 characters. Adobe recommends setting the draft ID length to 26 or more characters.
Handling personally identifiable information
One of the key challenges for organizations is how to handle personally identifiable (PII) data. Some best practices that will help you handle such data are as follows:
Use Terms and Conditions form component to take explicit consent from user before enabling auto save. In this case, enable auto save only when user agrees to the conditions in Terms and Conditions component.
Use FDM to write the data to Rest endpoint, Databases or even SOAP endpoints.