SmartGuard AI for Gravity Forms

SmartGuard AI adds an AI relevance firewall to Gravity Forms.

Traditional spam tools mostly ask: “Does this look like bot traffic?” SmartGuard asks: “Is this submission relevant for this form and this business?”

That is why it works well for websites that receive many human-written but irrelevant messages.

Why teams install SmartGuard AI

• Higher signal quality in Gravity Forms entries, not just bot blocking.
• Explainable decisions with score, threshold, reason, model profile, and history.
• Faster moderation with direct Confirm spam / Confirm not spam actions.
• Better long-term accuracy via adaptive thresholds from real admin feedback.
• Scale-ready operations: async queue, retry/backoff, circuit breaker, and API usage limits.
• Integration-ready for agencies and automation stacks (REST, signed webhooks, MCP tools/resources, HubSpot connector).

What you can control

• Decision states: flagged, passed, review, skipped, queued.
• Global + per-form control: enable/disable, threshold override, prompt version, A/B mode, model profile.
• Cost/risk controls: minimum content length, daily/weekly/monthly API limits, pattern cache.
• Governance controls: retention settings, excluded fields, audit trail, white-label and multisite defaults.

Best fit use cases

• Contact forms with recurring irrelevant outreach or low-quality lead spam.
• Clinics, legal firms, consultancies, and local services where relevance is critical.
• Multi-form setups where each form needs a different strictness level.
• Agencies operating multiple client sites with standardized anti-spam operations.

Quick setup (about 5 minutes)

1. Activate SmartGuard AI and ensure Gravity Forms is active.
2. Add your OpenAI API key.
3. Set threshold and uncertainty margin.
4. Submit one test entry and review the score/reason in the entries list.
5. Tune per-form thresholds where needed.

Bundled locales:

• bg_BG, hr, cs_CZ, da_DK, nl_NL, en_GB, et, fi, fr_FR, de_DE, de_AT, el, hu_HU, ga, it_IT, lv, lt_LT, mt_MT, pl_PL, pt_PT, ro_RO, sk_SK, sl_SI, es_ES, sv_SE, he_IL.

Requirements:

• WordPress 5.9 or higher
• PHP 7.4 or higher
• Gravity Forms 2.5 or higher (required)
• OpenAI API key

External services

OpenAI API

This plugin connects to the OpenAI API to analyze enabled form submissions and calculate a relevance score.

• What the service is used for: AI-based spam and relevance scoring for Gravity Forms entries.
• Data sent for scoring: submitted field labels and submitted values from the form entry being analyzed, plus the optional website context configured by the site admin.
• Data sent for the explicit connection test: only the API authorization header and configured model identifier; no form data or prompt content is sent.
• When data is sent: when an enabled form entry is checked by SmartGuard and passes local guardrails, or when an administrator explicitly selects Test API connection in the plugin settings.
• Where data is sent: https://api.openai.com/v1/chat/completions for scoring requests and https://api.openai.com/v1/models/{configured-model} for the read-only connection test.
• Service provider: OpenAI.
• Terms of Use: https://openai.com/policies/terms-of-use
• Privacy Policy: https://openai.com/policies/privacy-policy

Custom outbound webhook (optional)

This plugin can send signed SmartGuard events to an endpoint URL configured by the site administrator. The feature is disabled by default.

• What the service is used for: forwarding decision and feedback events to an automation or integration endpoint selected by the site administrator.
• Data sent: delivery ID, event name, timestamp, attempt number, entry ID, form ID, decision status, score, threshold, reason, prompt version/variant, model profile/model, or feedback label/source, depending on the event. Submitted form field values are not included.
• When data is sent: only when outbound webhooks are enabled and SmartGuard creates or updates a decision or feedback label; failed deliveries can be retried.
• Where data is sent: the custom endpoint URL entered by the site administrator in SmartGuard settings.
• Service provider and terms: determined by the configured endpoint. The site administrator is responsible for reviewing that provider’s terms and privacy policy before enabling the webhook.

HubSpot API (optional)

This plugin includes an optional HubSpot connector that is disabled by default.

• What the service is used for: forwarding SmartGuard decision and feedback events to a CRM notes endpoint for follow-up workflows.
• Data sent: SmartGuard event metadata including entry ID, form ID, status or feedback label, score, threshold, reason, and timestamp. The default connector does not send submitted field values to HubSpot.
• When data is sent: only when the site admin enables the HubSpot connector and SmartGuard emits a supported decision or feedback event.
• Where data is sent: https://api.hubapi.com/crm/v3/objects/notes by default, or the custom endpoint URL configured by the site admin.
• Service provider: HubSpot for the default endpoint. If a custom endpoint is configured, the same event payload is sent to that configured external service instead.
• Terms of Use: https://legal.hubspot.com/website-terms-of-use
• Privacy Policy: https://legal.hubspot.com/privacy-policy