123FormBuilder

The Data Protection Officer

The conditional logic is genuinely deep — field rules that show or hide in real time, subrules, AND/OR connectors, form rules that redirect, and a formula calculator — with more than 3,000 templates and styling down to fonts, padding, backgrounds and corners. We found no public information on a named accessibility standard, multi-page forms, randomisation or reusable question libraries, and the documented custom CSS applies to the platform interface rather than to respondent-facing forms. 2 4 8 11 16

Report an error

The Data Protection Officer

Submissions can be routed for approval with automatic approval and rejection emails, notifications trigger on submission or payment with delays from minutes to months, recipients can be routed conditionally, payments run through sixteen processors including PayPal and Stripe, an electronic signature feature exists, and more than forty-five native integrations plus Zapier pass data onward with API calls metered per plan. We found no public information on invitations to managed contact lists with reminders, QR codes, offline or kiosk collection, or documented webhooks. 2 8 10 11 16

Report an error

The Data Protection Officer

Custom reports can be assembled field by field with a chosen chart type and widgets, public reports update automatically, and reports can be duplicated, edited or set as default — though they aggregate all entries rather than showing a single respondent. We found no public information on filters and segments, cross-tabulation, standard scores such as NPS, open-text or sentiment analysis, or export formats such as CSV, Excel or SPSS. 13

Report an error

The Data Protection Officer

The consent tooling is more serious than a bare checkbox: a dedicated GDPR agreement field with editable default text, required by default, guidance not to pre-check terms checkboxes, and any post-publish change to GDPR fields cancels consent; 256-bit SSL/AES encryption in transit and at rest is stated, with a stronger data-at-rest encryption feature gated to the Diamond and Professional plans and up. I found no public information on a data processing agreement, an anonymous mode that drops IP addresses, or retention periods that delete responses on their own — the only documented rule processes data as long as the user account exists, with backups held 30 days — so this would not pass my desk for anything touching health or special-category data without those answers. 4 5 6 14 15

Report an error

The Data Protection Officer

An EU option exists as a separate signup site hosted by AWS in Germany, Enterprise plans choose between US and European storage, and single sign-on with SAML and OpenID Connect, custom user roles, a tamper-proof audit trail over logins, deletions, field edits and submissions, white-labelling with custom domain and a guaranteed 99.99% uptime for Enterprise customers are all stated. We found no public information on a documented export format for forms and responses or on user provisioning, so portability out is less evidenced than control in. 3 5 6 16 17

Report an error

The Data Protection Officer

The contracting entity is 123FormBuilder S.R.L. under Romanian law with disputes in Romanian courts, hosting can sit on named AWS infrastructure in Frankfurt or Germany, and ISO 27001 and ISO 9001 certifications and standard contractual clauses are stated. No subprocessor list with locations is published beyond the hosting, I found no public information on a data processing agreement on the captured pages, and AWS remains a US-headquartered provider subject to the US CLOUD Act regardless of server region; the captured pages announce the company joining forces with Kiteworks without stating the resulting ownership. 3 4 5 6

Report an error

The Data Protection Officer

Plan prices and limits are public in a comparison table — Basic free, Gold $37, Platinum $49, Diamond $99 before the 50% yearly discount, with monthly submissions from 100 to 100,000, fields per form, users, integrations, notification templates and API calls per plan — and VAT treatment, automatic renewal 14 days before term end, the 30-day money-back guarantee and its exclusions are all stated. The Enterprise and Compliance tiers are starting at $225 and $255 per user per month billed yearly with no monthly option and the minimum-user question left unanswered on the page, and we found no public information on overage or extra-response prices, so the top end cannot be computed from public pages alone. 2 3 6 16

Report an error