SmartGuard AI for Gravity Forms

1. 01Activate SmartGuard AI and ensure Gravity Forms is active.
2. 02Add your OpenAI API key.
3. 03Set threshold and uncertainty margin.
4. 04Submit one test entry and review the score/reason in the entries list.
5. 05Tune per-form thresholds where needed.

Bundled locales:

• bg_BG, hr, cs_CZ, da_DK, nl_NL, en_GB, et, fi, fr_FR, de_DE, de_AT, el, hu_HU, ga, it_IT, lv, lt_LT, mt_MT, pl_PL, pt_PT, ro_RO, sk_SK, sl_SI, es_ES, sv_SE, he_IL.

Requirements:

• WordPress 5.9 or higher
• PHP 7.4 or higher
• Gravity Forms 2.5 or higher, including the Gravity Forms 3.x line (required)
• OpenAI API key

External services

OpenAI API

This plugin connects to the OpenAI API to analyze enabled form submissions and calculate a relevance score.

• What the service is used for: AI-based spam and relevance scoring for Gravity Forms entries.
• Data sent for scoring: submitted field labels and submitted values from the form entry being analyzed, plus the optional website context configured by the site admin.
• Data sent for the explicit connection test: only the API authorization header and configured model identifier; no form data or prompt content is sent.
• When data is sent: when an enabled form entry is checked by SmartGuard and passes local guardrails, or when an administrator explicitly selects Test API connection in the plugin settings.
• Where data is sent: https://api.openai.com/v1/chat/completions for scoring requests and https://api.openai.com/v1/models/{configured-model} for the read-only connection test.
• Service provider: OpenAI.
• Terms of Use: https://openai.com/policies/terms-of-use
• Privacy Policy: https://openai.com/policies/privacy-policy

Custom outbound webhook (optional)

This plugin can send signed SmartGuard events to an endpoint URL configured by the site administrator. The feature is disabled by default.

• What the service is used for: forwarding decision and feedback events to an automation or integration endpoint selected by the site administrator.
• Data sent: delivery ID, event name, timestamp, attempt number, entry ID, form ID, decision status, score, threshold, reason, prompt version/variant, model profile/model, or feedback label/source, depending on the event. Submitted form field values are not included.
• When data is sent: only when outbound webhooks are enabled and SmartGuard creates or updates a decision or feedback label; failed deliveries can be retried.
• Where data is sent: the custom endpoint URL entered by the site administrator in SmartGuard settings.
• Service provider and terms: determined by the configured endpoint. The site administrator is responsible for reviewing that provider’s terms and privacy policy before enabling the webhook.

HubSpot API (optional)

This plugin includes an optional HubSpot connector that is disabled by default.

• What the service is used for: forwarding SmartGuard decision and feedback events to a CRM notes endpoint for follow-up workflows.
• Data sent: SmartGuard event metadata including entry ID, form ID, status or feedback label, score, threshold, reason, and timestamp. The default connector does not send submitted field values to HubSpot.
• When data is sent: only when the site admin enables the HubSpot connector and SmartGuard emits a supported decision or feedback event.
• Where data is sent: https://api.hubapi.com/crm/v3/objects/notes by default, or the custom endpoint URL configured by the site admin.
• Service provider: HubSpot for the default endpoint. If a custom endpoint is configured, the same event payload is sent to that configured external service instead.
• Terms of Use: https://legal.hubspot.com/website-terms-of-use
• Privacy Policy: https://legal.hubspot.com/privacy-policy