Source
GDPR page — Zoho Forms
Checked for Zoho Forms on 28 Oct 2026
- Page
- https://www.zoho.com/gdpr.html
- Checked
- 28 Oct 2026, 14:50 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:25d61f8da62e26dcfcd5e28cac71045a3f4d0f31d5475a3fff0d8907da14eba8
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
GDPR baseline worldwide Report an error
“we have implemented GDPR controls as our baseline standard for all our operations worldwide”
-
DPA available Report an error
“We have amended our Data Processing Addendum (based on Model Contractual Clauses) to be compliant with the data processing requirements of GDPR.”
-
DPA request email Report an error
“If you are the organization administrator and would like to sign a DPA with us, please drop an email to legal@zohocorp.com to request a copy of the Data Processing Addendum mentioning in which Data Center you've signed up for your Zoho account.”
-
Breach notification 72 hours Report an error
“Customers will be notified of a breach within 72 hours after Zoho becomes aware of it.”
-
Breach notification channels Report an error
“For general incidents, we will notify users through our blogs, forums, and social media. For incidents specific to an individual user or an organization, we will notify the concerned party through email (using their primary email address).”
-
Encryption at rest Report an error
“This includes encrypting data at rest, based on the level of sensitivity and likelihood of risks.”
-
Dpia conducted Report an error
“We conducted Data Protection Impact Assessments (DPIA). Based on the results, we have put in place appropriate controls on data processing and management.”
-
Internal audits conducted Report an error
“We conducted internal audits of our products, processes, operations, and management.”
-
Information asset register Report an error
“We have constituted an Information Asset Register(IAR), which includes information on all the roles Zoho assumes, such as a data controller and processor.”
-
Subprocessor assessment Report an error
“We have assessed our sub-processors (third party service providers, partners) and streamlined the contract process with them to ensure that they have addressed the pressing needs of the current security and privacy world.”
-
Product GDPR assessment Report an error
“We have assessed all Zoho products, individually, against the requirements of the GDPR and have implemented new features that will give you more control over your data and ease your burden of achieving GDPR compliance.”
-
Privacy contact email Report an error
“Please feel free to ask questions and share concerns with us at privacy@zohocorp.com.”
-
GDPR effective date Report an error
“GDPR has taken effect from 25th May 2018.”
-
Dormant account cleanup Report an error
“This cleanup process includes removing terminated and dormant accounts as per our Terms of Service.”
-
No advertising monetization Report an error
“Your data is yours, and we never monetize it for advertisement purposes.”
Scores citing this record
- The Academic Researcher Consent, GDPR & respondent data
- The Academic Researcher European sovereignty
- The Data Protection Officer Consent, GDPR & respondent data
- The Data Protection Officer European sovereignty
- The HR Lead Consent, GDPR & respondent data
- The HR Lead Hosting choice, teams & portability
- The HR Lead European sovereignty
- The Market Researcher Consent, GDPR & respondent data
- The Market Researcher Hosting choice, teams & portability
- The Market Researcher European sovereignty
- The Operations Manager Consent, GDPR & respondent data
- The Operations Manager European sovereignty
- The Skeptic Consent, GDPR & respondent data
- The Skeptic European sovereignty