Secure Form Filler

Challenge

An enterprise client needed a form-filling extension that could store sensitive data (credentials, PII) with end-to-end encryption while still allowing optional team sharing for shared accounts. Compliance (SOC2, GDPR) was non-negotiable, and they wanted to ship on Manifest V3 only.

Solution

We designed Secure Form Filler with encryption-first: all stored data is encrypted in the extension using the Web Crypto API before being written to chrome.storage. Team sync uses a separate, permission-gated flow so admins control what is shared. We built on Manifest V3 from day one, using declarativeNetRequest and offscreen documents where needed, so the extension was future-proof and passed store review on first submission.

Results

• Zero security incidents since launch
• SOC2 and GDPR compliance documented and audited
• Adopted by 200+ enterprise teams in first 6 months
• First-time approval on Chrome Web Store with Manifest V3