Source
GDPR page — Fillout
Checked for Fillout on 28 Oct 2026
- Page
- https://www.fillout.com/help/gdpr
- Checked
- 28 Oct 2026, 14:18 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:4be913248f4c3c52700edf8e7b573fefb42bd46b17662cb71d4dcdf2c22f0736
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
GDPR compliant Report an error
“Fillout complies with the GDPR framework.”
-
EU hosting Report an error
“Fillout offers EU-based hosting and storage for all respondent data (form submissions) on our Team plan and above. Contact support to switch to EU hosting after upgrading.”
-
Export Report an error
“You can export your data from Fillout at any time, including all form responses, to migrate data if needed. If you would like a copy of your account data, email privacy@fillout.com.”
-
Deletion Report an error
“Fillout will permanently delete forms, individual form responses, or your user data from our servers and backups, if deleted in Fillout or requested from privacy@fillout.com, within 45 days.”
-
EU privacy representative Report an error
“If you are an EU resident and would like to make use of your GDPR data privacy rights, please contact Prighter, our privacy representative in the EU.”
-
Infrastructure Report an error
“Fillout is hosted on Amazon Web Services (AWS), via Render.com, with AWS’s industry-leading security.”
-
Encryption Report an error
“Fillout encrypts all data in transit between you or your form respondents and Fillout’s servers over HTTPS/TLS. Data is also encrypted at rest and replicated for durability.”
-
DPA Report an error
“If your organization needs a Data Processing Agreement (DPA) with Fillout for GDPR compliance, our standard DPA is available to any customer, on any plan, at main.fillout.com/dpa.”
-
DPA scc Report an error
“The DPA incorporates the EU Standard Contractual Clauses (SCCs) for international data transfers, and the UK Addendum to the SCCs for transfers from the UK. The SCCs are part of the DPA, not a separate document.”
-
DPA AVV Report an error
“In Austria, Germany, and other German-speaking countries, a DPA is also known as an AVV (Auftragsverarbeitungsvertrag or Auftragsverarbeitungsvereinbarung). If you’re looking for an AVV, this is the same agreement.”
-
DPA custom Report an error
“If you need changes to the standard DPA, custom agreements and SLAs are available on the Enterprise plan and are negotiated with our Enterprise team.”
-
Privacy contact Report an error
“If you have additional questions about security or privacy, contact security@fillout.com.”
-
Export CSV Report an error
“Every Fillout form includes a CSV spreadsheet that you can export. Click Results on the top menu bar followed by the download icon to download the CSV.”
-
Self delete options Report an error
“Delete a form - look for your form in the dashboard and click ⋯ to Move to trash. This also deletes responses collected.”
2 facts read from this page are not shown because they could not be confirmed on the page as captured.
Scores citing this record
- The Academic Researcher Survey analysis & reporting
- The Academic Researcher Consent, GDPR & respondent data
- The Academic Researcher Hosting choice, teams & portability
- The Academic Researcher European sovereignty
- The Data Protection Officer Survey analysis & reporting
- The Data Protection Officer Consent, GDPR & respondent data
- The Data Protection Officer Hosting choice, teams & portability
- The Data Protection Officer European sovereignty
- The Data Protection Officer Pricing transparency
- The HR Lead Survey analysis & reporting
- The HR Lead Consent, GDPR & respondent data
- The HR Lead Hosting choice, teams & portability
- The HR Lead European sovereignty
- The HR Lead Pricing transparency
- The Market Researcher Survey analysis & reporting
- The Market Researcher Consent, GDPR & respondent data
- The Market Researcher Hosting choice, teams & portability
- The Market Researcher European sovereignty
- The Operations Manager Survey analysis & reporting
- The Operations Manager Consent, GDPR & respondent data
- The Operations Manager Hosting choice, teams & portability
- The Operations Manager European sovereignty
- The Skeptic Survey analysis & reporting
- The Skeptic Consent, GDPR & respondent data
- The Skeptic Hosting choice, teams & portability
- The Skeptic European sovereignty
- The Skeptic Pricing transparency