# Fillout — Forms & Surveys Fillout by Restly, Inc. holds a panel rating of 3/5 from 6 AI judges (category median 3/5), as of 2026-10-29. Provenance: Rest of world; sovereignty: not determined. - Vendor: Restly, Inc. (https://www.fillout.com) - Category: [Forms & Surveys](https://whats-best.ai/software/forms-and-surveys.md) - Provenance (editorial classification): Rest of world - Canonical page: https://whats-best.ai/software/forms-and-surveys/fillout - Alternatives: https://whats-best.ai/software/forms-and-surveys/fillout/alternatives ([markdown](https://whats-best.ai/software/forms-and-surveys/fillout/alternatives.md)) - Data as of: 2026-11-04 · evaluated 2026-10-29 · oldest source captured 2026-10-28 **AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology ## At a glance - Vendor: Restly, Inc. - Headquarters: Not stated on the vendor’s pages as of 28 Oct 2026 - Data hosting: Not stated on the vendor’s pages as of 28 Oct 2026 - Free plan: Yes, per the vendor’s own page [S10] ## The panel's verdict Fillout is a form and survey builder operated by Restly, Inc., a Delaware corporation, with a free tier of unlimited forms and seats and 1000 responses per month. Strongest is collection and workflows: sharing by public link, embed, email and QR code, file uploads, Stripe payments at 0% added fees, Slack and Teams notifications, webhooks and a REST API in the free plan, and workflows adding follow-up emails, approvals and AI routing. Form building sits at 6-7 on a drag-and-drop editor with 50+ question types and hundreds of templates. Weakest is analysis and reporting, flat at 4: responses can be viewed, filtered, charted and exported to CSV, with no public information on cross-tabulation, shareable dashboards or exports beyond CSV. Judges genuinely split on consent and data protection and sovereignty: on consent they weigh the same evidence differently — a published DPA with SCCs and no public information on an anonymous mode that drops IP addresses — while sovereignty turns on the United States as the default region, with EU storage for respondent data only on request. **Speaks for it:** - Sharing by public link, embed, email and QR code, with file uploads, Slack and Teams notifications, and a REST API included in the free plan - Stripe payments inside forms at 0% added fees, even on the free tier, plus electronic signatures on consent forms - A standard DPA available on any plan that incorporates the EU Standard Contractual Clauses and UK Addendum, with an EU privacy representative named - Deletion of a form, an individual response or the account completes within 45 days, backups included - Free tier with unlimited forms and seats, 1000 responses per month, no credit card, and no per-seat charges **Held against it:** - Analysis and reporting scores 4, with no public information on cross-tabulation, shareable dashboards or exports beyond CSV - We found no public information on an anonymous mode that drops IP addresses, on consent or privacy-notice fields, or on automatic retention periods - The default storage region is the United States, and EU hosting covers respondent data only, from the Team plan upward by contacting support - We found no public information on managed invitation lists with reminders and unique links, response quotas with closing rules, or offline collection - The captured pricing pages state no figures for the paid plans, so an annual cost cannot be computed from them **Best for:** - You need operational forms — registrations, orders, workshop intake — that non-technical staff build with drag-and-drop editing, conditional questions and custom branding - You collect payments or signatures inside the form itself, since Stripe runs at 0% added fees and electronic signatures are documented for consent forms - You want responses pushed automatically to Google Sheets, Slack, HubSpot, Salesforce and 50+ other apps, with webhooks and a REST API included in the free plan - You want to start free — unlimited forms and seats, 1000 responses per month — before committing to a paid plan **Avoid if:** - You need cross-tabulation, significance testing, shareable dashboards or exports beyond CSV, since analysis stops at charts and a per-form CSV export - You must certify respondent anonymity (no IP capture) or automatic retention deletion to a review board — ask the vendor: the public pages we read do not show it - Your procurement requires an EU contracting entity or EU-default hosting — the operator is a Delaware corporation and the default region is the United States - You need submission data to stay in the EU end to end — the published subprocessor list shows email via Postmark and payments via Stripe in the US, and Cloudflare worldwide, flagged as able to process submission data ## Scores by judge and criterion Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion. | Criterion | The Market Researcher | The Operations Manager | The HR Lead | The Academic Researcher | The Data Protection Officer | The Skeptic | | --- | --- | --- | --- | --- | --- | --- | | Form & survey building | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 | 3.5/5 | | Distribution, response collection & workflows | 3/5 | 3.5/5 | 3.5/5 | 3/5 | 3.5/5 | 3.5/5 | | Survey analysis & reporting | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | | Consent, GDPR & respondent data | 3/5 | 2/5 | 2.5/5 | 3/5 | 2.5/5 | 2.5/5 | | Hosting choice, teams & portability | 3.5/5 | 3.5/5 | 3.5/5 | 3/5 | 3/5 | 3/5 | | European sovereignty | 2.5/5 | 3/5 | 3/5 | 2.5/5 | 3/5 | 3/5 | | Pricing transparency | n/r | n/r | n/r | n/r | n/r | n/r | | **Weighted verdict** | **2.5/5** | **3/5** | **3/5** | **2.5/5** | **3/5** | **3/5** | ### The judges - **The Market Researcher** (v1.0): Runs customer and brand studies for a mid-sized consumer-goods company, three waves a year in four languages. Wants logic and quotas that keep the sample clean, invitations with reminders, cross-tabs and NPS without exporting to a spreadsheet first, and open answers grouped into themes before the board meeting. - **The Operations Manager** (v1.0): Replaces paper and PDF forms at a service company: event registrations, supplier onboarding, damage reports with photos, order requests with a payment. Wants forms a colleague can build without IT, file uploads, a submission that lands in the right inbox and the CRM or spreadsheet without copy and paste, and a price that does not jump when the response count does. - **The HR Lead** (v1.0): Runs the yearly engagement survey and pulse checks for a German company of six hundred, with the works council reading every question. Wants anonymity that is real and stated, results hidden below a minimum group size, reports per department that managers can read, and answers that are deleted when the agreement with the works council says so. - **The Academic Researcher** (v1.0): Runs questionnaire studies at a European university and has to satisfy the ethics board before the first respondent sees a question. Wants complex branching, randomisation and validated scales, an informed-consent page that is part of the instrument, exports to SPSS and R with labels intact, and a licence the faculty can host or at least keep in the EU. - **The Data Protection Officer** (v1.0): Signs off every form tool a department wants to use and has found health data in a feedback form before. Wants a data processing agreement and a subprocessor list on the vendor's own pages, consent fields and an anonymous mode that drops IP addresses, retention periods that delete on their own, EU hosting the customer can choose, and roles that keep responses away from people who do not need them. - **The Skeptic** (v1.0): Has seen a "free form builder" put its logo on every customer survey and charge per response the month the campaign worked. Reads "GDPR compliant" with no data processing agreement behind it, "anonymous" surveys that still log IP addresses, "EU hosting" on the enterprise plan only, and AI analysis features with no word on where the answers go — and asks whether the responses can leave with the customer. ## European sovereignty — proven facts Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined. | Dimension | Finding | Points | Source | |---|---|---|---| | Legal entity | Not determined | — | — | | Hosting location | Not determined | — | — | | Hosting options | Not determined | — | — | | Open source | Not determined | — | — | | Data processing agreement | Not determined | — | — | | Transfer impact assessment | Not determined | — | — | ## Key facts Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources). **Compliance** - Backups: yes · daily [S3] - Badges footer: 256 · Type 2 [S3] - Bug bounty: yes [S6] - DPA: main.fillout.com/dpa · yes [S4] - DPA AVV: DPA is equivalent to AVV [S4] - DPA custom: Enterprise · yes [S4] - DPA scc: yes · yes [S4] - Employee infra access: as-needed · yes · yes [S6] - Encryption: yes · HTTPS/TLS · yes [S6] - Encryption: AES · TLS 1.2 [S3] - Encryption: 256-bit AES [S7] - Encryption: 256-bit AES [S9] - Encryption: 256-bit AES data encryption [S2] - Encryption: yes [S11] - Encryption: 256-bit AES [S13] - Encryption: 256-bit AES [S12] - Encryption: [S8] - Encryption: yes · yes · HTTPS/TLS [S4] - EU privacy representative: Prighter [S4] - Footer SOC 2: 256-bit AES · yes [S10] - GDPR compliant: yes [S4] - SOC 2: yes [S3] - SOC 2: yes [S7] - SOC 2: yes [S9] - SOC 2: yes [S2] - SOC 2: yes [S11] - SOC 2: yes [S13] - SOC 2: yes [S12] - SOC 2: 256-bit AES · yes [S10] **Data** - Backups: yes · yes · yes [S6] - Deletion: privacy@fillout.com · 45 [S4] - Dnt: no · no [S7] - Export: privacy@fillout.com · yes [S4] - Export CSV: per form · CSV [S4] - Min age: 18 · no [S7] - No sale: no [S7] - Opt out marketing: yes [S7] - Payment stripe: Stripe · no [S7] - Request fee: no [S7] - Responses: Responses stored in Fillout; view, filter, chart, export [S10] - Responsibility window: 90 · 45 · 12 [S7] - Retention: retain only as long as necessary or legally required [S7] - Rights: yes · yes · yes · yes [S7] - Self delete options: delete form · delete individual response · delete account [S4] **Hosting** - EU hosting: contact support to switch after upgrading · Team · yes [S4] - EU residency: enterprise · yes · SCCs [S7] - Infrastructure: AWS · Render.com [S4] - Provider: US · EU · AWS via Render.com · yes [S6] - Region: US [S7] **Integrations** - Activecampaign: Add and update contacts in your email lists [S2] - Activepieces: Open-source business automation platform with 200+ app integrations [S2] - Amazon s3: Upload files directly to an Amazon S3 bucket [S2] - Apps: Stripe · 50 · Google Sheets · Airtable · Notion · Slack · HubSpot · Salesforce [S10] - Attio: Populate your CRM with people, companies and deals [S2] - Box: Securely store, share, and access uploaded files in Box [S2] - Brevo: Create or update contacts and manage custom fields in Brevo [S2] - Cal com: Book meetings directly from your forms [S2] - Calendly: Book meetings directly from your forms [S2] - Clearbit: Enrich form data with Clearbit [S2] - Clickup: Automatically create tasks and updates in ClickUp [S2] - CSV export: yes [S3] - Discord: Get notified in Discord when a form is submitted [S2] - Dropbox: Store uploaded files in your Dropbox folders [S2] - Excel online: Turn form responses into actionable data [S2] - Firebase: Store and manage form submissions in real-time [S2] - Freshdesk: Create new support tickets from Fillout form submissions [S2] - Gmail: Send custom emails on form submission and other workflow triggers [S2] - Google ads: Track and upload form conversion data to Google Ads [S2] - Google analytics: Measure conversion and track attribution for your marketing campaigns [S2] - Google analytics status: coming_soon · Measure conversion and track attribution for your marketing campaigns [S13] - Google analytics workflows: Track new form submissions by creating measurements in Google Analytics · Update Google Analytics goals when new form submissions are received [S13] - Google APIs limited use: yes [S7] - Google calendar: Book meetings directly from your forms [S2] - Google docs: Generate custom Google Docs from form submissions [S2] - Google drive: Store uploaded files in your Google Drive folders [S2] - Google forms import: Easily import and upgrade your existing Google Forms [S2] - Google forms import: yes [S13] **Legal** - Address: Beaverton · Oregon · 9450 SW Gemini Dr · USA [S7] - Arbitration location: Chicago, Illinois [S8] - Arbitration opt out: privacy@zite.com [S8] - Company: Restly, Inc. · 2026 [S9] - Company name: Restly, Inc. [S3] - Dmca: yes [S8] - Entity: Restly, Inc. [S1] - Entity: Restly, Inc., d.b.a. Zite [S7] - Entity: Restly, Inc. [S2] - Entity: Restly, Inc. [S11] - Entity: Restly, Inc. · 2026 [S13] - Entity: Restly, Inc. [S12] - Entity: Restly, Inc. [S10] - Feedback ownership: yes [S8] - Governing law: Illinois, United States [S8] - Liability cap: 100 · 12_months_fees_paid [S8] - Minimum age: 18 [S8] - No data repository: no · yes [S8] - Operating entity: Restly, Inc. · Delaware [S8] - Pii responsibility: yes [S8] - Privacy email: privacy@zite.com [S7] - Terms effective date: 2022-07-02 [S8] - User content license: "license": "nonexclusive, royalty-free, sub-licensable, transferable worldwide"}}} [S8] **Pricing** - Annual discount: 20 [S3] - Auto renewal: yes · 30 [S8] - Billing model: yes · monthly · annually [S8] - Discount eligibility: non-profits · students · startups · educational institutions [S3] - Free limits: unlimited · unlimited · 1000 [S3] - Free plan: yes · yes · 1000 · no [S10] - Free tier: yes [S11] - No per seat charges: no [S3] - Nonpayment suspension: 30 [S8] - Over limit behavior: 1 · yes [S3] - Refund policy: no [S8] **Product** - Admin security free: yes [S3] - AI form builder: AI form builder creates forms from plain-language descriptions [S10] - AI form creation: AI tool to create custom form templates [S9] - AI tools: /ai-quiz-maker · /ai-form-builder · /ai-survey-maker · /import-google-forms · /ai-signature-maker · /survey-questions · /pdf-to-form [S1] - AI tools: AI tools include AI Quiz Maker, AI Form Builder, AI Survey Maker, Import Google Forms, AI Signature Maker, PDF to Form [S9] - AI workflows: AI steps in Fillout Workflows summarize, tag, score and route responses [S10] - Also built in: Logic & calculations · Login forms · Results & analytics · File uploads · Partial submissions · Custom domains [S10] - Analytics collaboration: yes [S1] - Conditional logic: AI can add conditional logic, page jumps, scoring, calculations [S10] - Custom theming: yes [S1] - Customer count: 100000 [S10] - Disaster recovery: yes [S6] - Drag and drop: yes [S1] - Drag drop editor: yes [S10] - Edit existing responses: yes [S1] - Esignatures: yes [S10] - External storage: yes [S3] - Form building: building dynamic, multi-step web forms [S8] - Free account: yes [S10] - Free core features: 50+ · yes [S3] - Free form creation: First form can be made in minutes [S9] - G2 rating: 4.8 · G2 · Product Hunt [S10] - Google forms import: yes [S1] - Granular permissions: yes [S3] - Import sources: Import from PDF, Google Forms, Typeform, pasted questions [S10] - Importers list: Google Forms · Typeform · Jotform · SurveyMonkey · Tally · Paperform · any form link [S10] - Modules: /forms · /scheduling · /pdf-generation · /payments · /workflows [S1] - Modules: Product modules: Forms, Scheduling, PDF generation, Payments, Workflows, Conversion kit, Zite [S9] **Subprocessors** - Amplitude: Analytics · US · no [S5] - Anthropic: AI and editor experience · US [S5] - Apollo: Conversion kit · if enabled · US · yes [S5] - Aws: File storage and cloud · US or EU (for EU submission hosting customers)* · yes [S5] - Bytescale: App screenshots · US · no [S5] - Clickhouse: Workflow logs · US [S5] - Cloudflare: CDN + workers · Worldwide · yes [S5] - Datadog: Monitoring · US · no [S5] - Dubco: Affiliates · US · no [S5] - Flyio: Infrastructure · US [S5] - GDPR reference: GDPR details are covered in a separate page 'Fillout and GDPR-Compliant Forms' [S5] - Google: Support · US · no [S5] - Intercom: Support · US · no [S5] - List URL: https://www.fillout.com/help/subprocessors [S7] - Microsoft azure: AI + transcription · opt-in; only for EU submission hosting customers · EU · yes [S5] - Neon: Dedicated database for ZiteDB · US [S5] - Openai: AI + transcription · opt-in; does not apply for EU submission hosting customers · US · yes [S5] - Postmark: Email · US · yes [S5] - Regions enterprise note: Other regions (e.g. Canada, Australia) possible for enterprise customers if specified in agreement [S5] - Render: Hosting and storage · US and EU (EU only for EU submission hosting customers)* · yes [S5] - Segment: Event pipeline · US · no [S5] - Sentry: Error logging · US · no [S5] - Stripe: Payments · US · yes [S5] - Temporal: Workflows · US · no [S5] - Workos: SSO · Enterprise SSO login users only · US · yes [S5] - Zite service note: Zite app building service uses all Fillout subprocessors plus additional ones [S5] **Support** - Availability: 24/5 [S9] - Availability: 24/5 [S11] - Availability: 24/5 [S13] - Availability: 24/5 [S10] - Hours: 24/5 [S1] - Hours: 24/5 [S3] - Hours: 24/5 [S7] - Hours: 24/5 [S2] - Hours: 24/5 [S12] - Hours: [S8] - Privacy contact: security@fillout.com [S4] 75 more facts on the canonical page: https://whats-best.ai/software/forms-and-surveys/fillout ## Questions ### Is Fillout European? No. whats-best.ai classifies Fillout as Rest of world. ### Where does Fillout store data? Not stated on the vendor’s pages as of 28 Oct 2026. ### Does Fillout have a free plan? Yes. Fillout has a free plan, per [the vendor’s page captured 28 Oct 2026](https://whats-best.ai/evidence/11718). ### What are the best alternatives to Fillout? As of 3 Nov 2026, the panel rates [Formbricks (4/5)](https://whats-best.ai/software/forms-and-surveys/formbricks), [easyfeedback (3.5/5)](https://whats-best.ai/software/forms-and-surveys/easyfeedback) and [Netigate (3.5/5)](https://whats-best.ai/software/forms-and-surveys/netigate) highest among the other 19 Forms & Surveys products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Formbricks](https://whats-best.ai/software/forms-and-surveys/formbricks) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Fillout alternatives](https://whats-best.ai/software/forms-and-surveys/fillout/alternatives). ## What this page leaves out - 13 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. - 12 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. - 5 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. - 3 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. - 1 pricing fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. - 1 subprocessors fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. - 1 support fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. - 5 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. - 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. ## Sources - [S1] Vendor homepage: https://www.fillout.com/ (checked 2026-10-28) - [S2] Integrations page: https://www.fillout.com/integrations (checked 2026-10-28) - [S3] Pricing page: https://www.fillout.com/pricing (checked 2026-10-28) - [S4] GDPR page: https://www.fillout.com/help/gdpr (checked 2026-10-28) - [S5] Subprocessor list: https://www.fillout.com/help/subprocessors (checked 2026-10-28) - [S6] Security page: https://www.fillout.com/help/security (checked 2026-10-28) - [S7] Privacy policy: https://www.fillout.com/privacy (checked 2026-10-28) - [S8] Terms of service: https://www.fillout.com/terms (checked 2026-10-28) - [S9] Form & survey building — found from sitemap: https://www.fillout.com/templates (checked 2026-10-28) - [S10] Form & survey building — found from sitemap: https://www.fillout.com/ai-form-builder (checked 2026-10-28) - [S11] Distribution, response collection & workflows — found from sitemap: https://www.fillout.com/integrations/paypal (checked 2026-10-28) - [S12] Distribution, response collection & workflows — found from sitemap: https://www.fillout.com/integrations/stripe (checked 2026-10-28) - [S13] Survey analysis & reporting — found from sitemap: https://www.fillout.com/integrations/google_analytics (checked 2026-10-28) --- Cite as: whats-best.ai, "Fillout — Forms & Surveys", AI panel analysis, as of 2026-11-04. https://whats-best.ai/software/forms-and-surveys/fillout Corrections: https://whats-best.ai/correct/1117?target=page