Forms & Surveys
SurveyMonkey
Rest of world Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by SurveyMonkey Europe UC · www.surveymonkey.com
Compare with Qualtrics → Compare with LimeSurvey → Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
SurveyMonkey at a glance
- Vendor
- SurveyMonkey Europe UC
- Headquarters
- Not stated on the vendor’s pages as of 28 Oct 2026
- Data hosting
- Not stated on the vendor’s pages as of 28 Oct 2026
- Free plan
- Not stated on the vendor’s pages as of 28 Oct 2026
- Panel verdict
- The AI panel rates SurveyMonkey 3/5, the mean of 6 judges. SurveyMonkey is an online survey and forms platform. how scores are made
- As of
- Vendor pages captured 28 Oct 2026; evaluated by the panel 29 Oct 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
SurveyMonkey is an online survey and forms platform. Its strongest criterion is analysis and reporting, scored 7 to 7 across the table: crosstabs with statistical significance, AI sentiment and thematic analysis, password-protected or SSO-enforced dashboards, and an SPSS export are documented. Form building and collection and workflows follow at 6-7; we found no public information on quotas, reminders or unique links, and the only REST API documented in the captures covers Wufoo accounts. Pricing transparency spans 5-7: team prices are published — Team Advantage €30 per user per month, Team Premier €75 per user per month, from 3 users billed annually — but the Enterprise tier carrying SSO and the EU data centre is "Get a demo" for 5+ users; the market researcher and operations manager scored 7; the HR lead, needing EU hosting, 5. Sovereignty scores 5-6: US storage is the default, the EU centre is Enterprise-only, and AI prompts and de-identified responses still go to the US even from EU-hosted accounts; judges credit the Irish entity, published subprocessor list and online DPA with standard contractual clauses.
Speaks for it
- Analysis and reporting is the strongest criterion at 7 to 7, with crosstabs and statistical significance, AI sentiment and thematic analysis, password-protected or SSO-enforced dashboards, and an SPSS export producing an SAV file.
- The consent pattern is documented in detail: a required yes/no question whose skip logic disqualifies declining respondents, with example texts and a disqualification page.
- Team prices are published — Team Advantage €30 per user per month and Team Premier €75 per user per month from 3 users billed annually, with €0.10 per additional response — alongside stated tax, auto-renewal and cancellation terms.
- Documented webhooks push responses into Tableau, Power BI, Zendesk, HubSpot, Slack and Teams, and Zapier triggers on each new complete response.
- An online DPA with standard contractual clauses is included automatically for self-serve customers, encryption runs AES 256 at rest and RSA in transit, and privacy-rights requests are answered within 30 days.
Held against it
- Storage defaults to US data centres, the EU data centre is Enterprise-only with no data migration on downgrade, and accounts opened before 2019 cannot have their questions and responses moved to the EU or Canada.
- Even with the EU data centre, AI prompts go to a US vendor for processing and de-identified response data may be transferred to the US.
- SSO and the EU data centre sit only in the Enterprise plan, presented as "Get a demo" for 5+ users, and we found no public price for the individual paid plan or the free tier's response limit.
- The only REST API documented in the captured pages covers Wufoo accounts, and the seat permissions table marks direct API access as not included.
- The privacy notice describes IP addresses used for duplicate-response prevention and inferred location, and we found no public information on an anonymous mode or automatic deletion periods.
Best for
- You need research-grade analysis — crosstabs with statistical significance, thematic and sentiment analysis, and an SPSS SAV export — on published team pricing.
- You want every response to flow automatically into Tableau, Power BI, Slack, Teams, HubSpot or Zendesk through webhooks and Zapier.
- You must demonstrate a working consent mechanism to a reviewer — a required yes/no question whose skip logic disqualifies anyone who declines, backed by an online DPA with standard contractual clauses.
- Your procurement accepts an Irish contracting entity and a published subprocessor list without requiring end-to-end EU processing.
Avoid if
- You need EU storage of survey questions and responses without an Enterprise contract — the EU data centre is Enterprise-only, and downgrade means opening a new US-hosted account with no data migration.
- Your commitments to respondents exclude US transfers — AI prompts go to a US vendor for processing and de-identified response data may be transferred to the US even from the EU data centre.
- You must compute your full annual cost, including SSO and EU hosting, before talking to sales — the Enterprise tier is priced only on request.
- You depend on a documented API to export responses from the core survey product — the captured pages document an API only for Wufoo accounts, and the permissions table lists direct API access as not included.
The scores
| Criterion | Panel median |
|---|---|
| Form & survey building | 3.5 of 5 |
| Distribution, response collection & workflows | 3 of 5 |
| Survey analysis & reporting | 3.5 of 5 |
| Consent, GDPR & respondent data | 3 of 5 |
| Hosting choice, teams & portability | 3.5 of 5 |
| European sovereignty | 3 of 5 |
| Pricing transparency | 3 of 5 |
Form & survey building
Show reasoningHide reasoning
How this is scored
What can be built without code: question and field types, conditional logic and branching, piping and hidden fields, calculations, multi-page forms and progress, templates, design and branding, multiple languages, and accessible output for respondents.
0 — Not a form or survey builder; questions cannot be authored in the product.
3 — A builder with the common question types and a few templates; logic, branding or languages are basic or not described.
5 — A drag-and-drop builder with a wide range of question types, conditional logic that shows, hides or skips questions, multi-page forms, a template library, and the customer's logo, colours and fonts.
8 — Advanced logic with piping, hidden fields, calculations and scoring, randomisation, surveys translated into several languages from one master, reusable question libraries, custom CSS or themes, and accessible forms with a named standard (WCAG 2.1 AA or BITV) stated.
10 — Best-in-class authoring: complex research designs (loops, quotas in logic, conjoint or MaxDiff), versioned forms with change history, a published accessibility conformance report, and every element of a form available through the API.
The Market Researcher
Branching, dynamic and advanced logic with skip-to-page, hide, show, disqualify and random-page actions are documented, and the pricing pages add question and answer piping, A/B testing, block randomisation, multilingual surveys and a shared team library. We found no public information on quotas inside logic, scoring or calculations, or a stated accessibility standard, so I cannot confirm the controls I use to keep a four-language sample clean. 3 10 16 18
The Operations Manager
A colleague can build real forms here: branching with hide/show/skip actions, question and answer piping, A/B testing, multilingual surveys, themed or white-labelled branding and a template library for event feedback and NPS are all listed, and teams can reuse question items from a shared library. We found no public information on built-in calculations or on an accessibility standard for respondents, which keeps it below the research-grade level. 3 10 1 18
The HR Lead
Skip logic, question and answer piping, A/B testing and block randomization are listed plan features, multilingual surveys and an employee-engagement template set are public, and the Apply product documents branching, dynamic and advanced logic with show/hide/skip actions and ANY/ALL multi-condition rules. The consent pattern is genuinely well documented: a required yes/no question with skip logic that disqualifies anyone who declines. We found no public information on calculations or scoring, custom CSS, or a named accessibility standard such as WCAG or BITV. 1 3 10 17
The Academic Researcher
The captured pages document skip logic and question-and-answer piping on the individual plan, A/B testing, multilingual surveys, block randomisation on Team Premier, and branching rules that skip to pages, randomly traverse page ranges, and show, hide or invalidate questions with ANY/ALL conditions — enough for a randomised design. A team library for reusable items and premium themes are also described; we found no public information on scoring or calculations inside the authoring tool, or on an accessibility standard such as WCAG for respondent-facing forms. 1 3 10 16 18
The Data Protection Officer
Branching, dynamic and advanced logic with skip, hide, show and randomise actions, question and answer piping, A/B testing, block randomisation and multilingual surveys go well past basic authoring, and a team library plus white-label branding serve teams. We found no public information on calculations or scoring, and no accessibility standard is named on the captured pages. 3 10 18
The Skeptic
The captured pages document a real builder: skip logic with question and answer piping, A/B testing, block randomization, multilingual surveys, a template library, custom colours and URLs, premium themes and white-label branding, plus Apply's three logic types that hide, show, disable or terminate questions on ANY or ALL conditions. We found no public information on calculations or scoring, custom CSS, or any named accessibility standard for respondent-facing forms. Strong authoring, but a buyer who must answer for accessibility will find the pages silent. 1 3 10 16
Distribution, response collection & workflows
Show reasoningHide reasoning
How this is scored
How forms reach people and what happens to an answer: share links, embedding, QR codes, email invitations with reminders, contact lists and panels, offline or kiosk collection, file uploads, payments and signatures inside the form, notifications, approval or assignment of submissions, and automations that pass a response on to other tools.
0 — No way to collect responses from other people; the product only analyses data collected elsewhere.
3 — A share link and an embed code, with responses visible in the product; invitations, notifications and onward workflows are basic or not described.
5 — Links, embedding and QR codes, email notifications on submission, file uploads, a few native integrations (spreadsheets, CRM, chat) plus a connector service such as Zapier or Make, and either email invitations with reminders or payments inside the form.
8 — Invitations to managed contact lists with reminders and unique links, response quotas and closing rules, offline or kiosk collection, submissions routed for approval or assignment, conditional notifications, documented webhooks and a REST API to read and write responses.
10 — Collection at research and process scale: panel or sample sourcing, multi-channel distribution (email, SMS, web, app intercept) with deduplication, workflows with branching and audit trail, and every response event exposed to the customer's systems in real time with a stated delivery guarantee.
The Market Researcher
Invitations go out through an address book and collectors with named email and SMS delivery vendors, SurveyMonkey Audience sells targeted completes by country, age and gender, and Zapier triggers plus conditional webhooks into Tableau, Power BI, Slack or Teams pass responses on automatically. We found no public information on invitation reminders, unique per-respondent links, or response quotas and automatic closing rules, which are the controls that keep my three waves a year clean. 3 7 12 13
The Operations Manager
File uploads and payment acceptance are on the plan lists, an address book drives email and text invitations, Zapier triggers on each new complete response, and documented webhooks push answers into Slack, HubSpot, Zendesk, Tableau and Teams — that covers my requirement that a submission lands in the CRM without copy and paste. We found no public information on email reminders, unique links, QR codes or approval routing, so I stop short of the top level. 3 7 12 13
The HR Lead
An address book feeds the invitation collectors, email and SMS delivery run through named providers, payments can be collected inside the form, webhooks push responses conditionally into Slack, Teams, Tableau and Power BI, and Zapier can trigger on every new complete response or add contacts and send surveys. We found no public information on email reminders with unique links, response quotas or closing rules, offline collection, or a documented API for the core survey product — the pages we read describe only Wufoo's API. That leaves this between the solid mid level and the advanced one. 3 7 12 13
The Academic Researcher
Email invitations go out from an address book via collectors, delivery runs through SparkPost email and Twilio SMS, payments and file uploads live inside the product, and webhooks and Zapier push responses onward — with SurveyMonkey Audience able to source panel respondents by country, age and income. We found no public information on invitation reminders, response quotas or closing rules, or on a REST API for reading and writing responses in the core survey product. 3 7 9 12 13
The Data Protection Officer
An address book feeds survey invitations, file upload and payments are plan features, and webhooks push each response into tools like Tableau, Power BI, Slack and HubSpot, with Zapier triggers and actions on top. We found no public information on reminders with unique links, response quotas, offline collection or approval routing, and the API licence documented on the captured pages is the one for Wufoo. 7 3 13 12 9
The Skeptic
Invitations through an importable address book, an audience panel targetable by country, age, income and employment, payments accepted on team plans, file upload, Zapier triggers and actions, and a documented webhook integration pushing web, app, email, chat and SMS responses into tools like Tableau, Power BI and Slack put collection well beyond a share link, down to IP-based duplicate-response prevention. We found no public information on QR codes, reminders, unique links, response quotas or offline collection. The only REST API documented in the captures covers Wufoo accounts; for core SurveyMonkey responses I found no API documentation, which matters if the customer wants the answers out in real time. 3 7 9 12 13
Survey analysis & reporting
Show reasoningHide reasoning
How this is scored
What the product does with the answers: live results and charts, filters and segments, cross-tabulation, NPS, CSAT and other standard scores, open-text and sentiment analysis, shareable dashboards and reports, and exports to the formats analysts use (CSV, Excel, SPSS, R).
0 — No view of results inside the product; submissions can only be forwarded or downloaded one at a time.
3 — A table of responses with simple charts per question and a CSV export; filters, comparisons and report sharing are basic or not described.
5 — Charts per question, filters and segments, at least one comparison or cross-tab view, standard scores such as NPS, shareable or exportable reports (PDF, presentation), and exports to CSV and Excel.
8 — Cross-tabulation with significance testing, weighting, open-text coding or sentiment analysis, trend reports across survey waves, dashboards for different audiences with permissions, and SPSS or R exports with labels.
10 — A research-grade analysis environment: statistical models beyond cross-tabs (driver analysis, regression), benchmarks, text analytics with themes the customer can edit, and every analysis reproducible from documented exports or an analytics API.
The Market Researcher
Crosstabs with statistical significance, thematic analysis and AI sentiment on open text, multi-survey analysis, and shareable dashboards with password or SSO protection are all listed, with exports to SPSS as an SAV file as well as CSV, PDF, PPT and XLS. We found no public information on weighting or trend reporting across survey waves, so I could not confirm two pieces my board reporting depends on. 3 14 15 18
The Operations Manager
Exports cover CSV, Excel, PDF, presentation and SPSS files, crosstabs and statistical significance sit on the team plans, and dashboards can be shared by link with password protection and auto-update while the survey is open. Sentiment and thematic analysis of open text is stated, but we found no public information on weighting or significance testing inside cross-tabs. 3 7 14 15
The HR Lead
Crosstabs, statistical significance, multi-survey analysis, AI thematic analysis and sentiment on open text are listed features, results dashboards auto-update while a survey runs and can be password-protected or, on Enterprise, locked behind SSO — usable as manager-facing department reports. Exports reach CSV, Excel, PDF, PowerPoint and SPSS with an SAV file. We found no public information on weighting, trend reporting across survey waves, or suppressing results below a minimum group size, which is the first question my works council asks. 3 14 15 7
The Academic Researcher
Cross-tabs with statistical significance, multi-survey analysis, AI sentiment and thematic analysis of open text, shareable dashboards with password protection and Enterprise SSO enforcement, and an SPSS export producing an SAV file are all documented. That covers most of a research workflow; we found no public information on weighting, R exports, or whether value labels are preserved in the SPSS export. 3 7 14 15 18
The Data Protection Officer
Crosstabs with statistical significance, AI sentiment and thematic analysis, shareable dashboards with password protection or SSO, and an SPSS export alongside CSV, PDF, PPT and XLS make the analysis layer serious. Weighting and trend reports across survey waves are not described on the captured pages. 3 15 14 7
The Skeptic
Crosstabs and statistical significance sit in the plan lists, AI sentiment and thematic analysis on open text is described, dashboards can be shared, password-protected and enforced with SSO while auto-updating, analysts get unlimited rules and filters, and SPSS export is documented down to the SAV file format. Weighting and trend reports across survey waves are analysis items on which we found no public information. This is a genuine analysis environment with most of the research-grade checklist evidenced in detail. 3 7 14 15 18
Consent, GDPR & respondent data
Show reasoningHide reasoning
How this is scored
What the product gives the customer to collect personal data lawfully: consent and privacy-notice fields, anonymous surveys that really drop IP addresses and identifiers, retention periods and automatic deletion, handling of access and erasure requests, encryption of responses, a data processing agreement, and controls over cookies and tracking on the form itself.
0 — The product collects no personal data from respondents, so there is nothing to protect; or it is a different kind of product.
3 — A privacy policy and a statement of GDPR compliance, with a checkbox field usable for consent; anonymity, retention and deletion are not described.
5 — A data processing agreement offered to customers, a consent or privacy-notice field, an anonymous mode that does not store IP addresses, responses deletable by the customer, and encryption in transit and at rest stated.
8 — Retention periods with automatic deletion, tools for access and erasure requests per respondent, field-level encryption or masking of sensitive answers, forms that set no tracking cookies by default, a published list of technical and organisational measures, and a named data protection officer.
10 — Data protection by design and evidenced: end-to-end or customer-key encryption of responses, documented data minimisation defaults, a DPA with audit rights and subprocessor change notice, records of consent kept with each response, and an independent audit of the privacy controls published.
The Market Researcher
A self-serve data processing agreement with standard contractual clauses, AES 256 encryption at rest and RSA in transit, consent questions whose skip logic disqualifies anyone answering No, creator-controlled retention and a 30-day commitment on rights requests are documented. We found no public information on an anonymous mode that drops IP addresses — the privacy notice describes using IP addresses for duplicate prevention and inferred location — nor on automatic deletion after a retention period, tracking-cookie controls or a named data protection officer. 5 7 16 17
The Operations Manager
An online data processing agreement with standard contractual clauses is offered to self-serve customers, consent statements with skip logic that removes non-consenting respondents are documented with worked examples, encryption in transit and at rest is stated, and rights requests get an answer within 30 days. We found no public information on automatic retention deletion, field-level protection of sensitive answers or a named data protection officer. 5 7 9 16 17
The HR Lead
Consent statements with skip logic that removes declining respondents, a disqualification page and example consent texts in German and English are well documented; an online DPA with standard contractual clauses, encryption in transit and at rest, creator-controlled retention and privacy-rights responses within 30 days are all stated. The concern for us: IP addresses are used for duplicate-response prevention and inferred location, and we found no public information on an anonymous mode that does not store them, on automatic deletion at a fixed period, or on cookie controls for the form itself. De-identified response data is also stated to be transferred to the United States and used to train models. 5 7 9 16 17
The Academic Researcher
There is a genuine consent mechanism — an intro page, a required yes/no consent question, and skip logic that disqualifies refusers, with example consent texts — alongside an online data processing agreement with automatic standard contractual clauses, AES 256 at rest, RSA 2048 in transit, and rights requests answered within 30 days. The ethics board will still ask about anonymity: the privacy notice documents IP addresses being used for duplicate prevention and de-identified response data being transferred to the US even from the EU data centre, and we found no public information on an anonymous mode, automatic deletion of responses after a retention period, or a named data protection officer. 5 6 7 16 17
The Data Protection Officer
A self-serve online data processing agreement with standard contractual clauses built in, documented consent statements whose skip logic disqualifies anyone who declines, and AES 256 at rest with RSA in transit are what I want before signing anything. But the privacy notice describes respondents' IP addresses being used for inferred location and duplicate-response prevention, retention is left to the creator rather than automatic deletion periods, and we found no public information on an anonymous mode, cookie controls on the forms, or a named data protection officer. 5 16 17 7 9
The Skeptic
An online data processing agreement with standard contractual clauses included automatically for self-serve customers, detailed consent-statement setup that can disqualify anyone answering No, AES-256 encryption at rest and encrypted transfer, a transfer impact assessment and a 30-day deadline on privacy-rights responses are real compliance material. But the privacy notice describes IP addresses being used for duplicate-response prevention and inferred location, and AI prompts and responses containing personal data are shared with AI vendors; we found no public information on an anonymous mode that does not store IP addresses, a named data protection officer, field-level encryption, or forms that set no tracking cookies by default. The customer gets tools to be lawful; the respondent's identifiers are still in play. 5 7 16 17
Hosting choice, teams & portability
Show reasoningHide reasoning
How this is scored
What the customer may choose about where and how the product runs and who uses it: a selectable data region or EU-only hosting, self-hosting or an on-premise edition, team workspaces with roles and permissions, single sign-on, an audit log, custom domains and white-labelling, and a complete export of forms and responses that another tool can import.
0 — A single-user tool with no export of forms or responses.
3 — Shared access for a team and a response export; data location, roles and single sign-on are not described.
5 — Hosting location stated with an EU option, team workspaces with at least two roles, single sign-on on a higher plan, a custom domain or removed vendor branding, and an export of all responses.
8 — EU-only hosting selectable per account or a self-hosted edition, granular roles per form or folder, SSO with SAML and user provisioning, an audit log, white-labelling, and forms and responses exportable in a documented format with an API.
10 — Full control over operation: an open-source or on-premise edition with feature parity, customer-chosen region per workspace, administrative APIs, a documented migration path in and out, and an uptime commitment with a published status history.
The Market Researcher
Three team roles with separate admin rights, single sign-on with SCIM provisioning through an identity provider, white-label branding and a custom subdomain are documented, and accounts can sit in US, Canadian or EU data centres — though the EU centre is Enterprise-only and data cannot be migrated back on downgrade. We found no public information on an audit log or a documented API for exporting SurveyMonkey forms and responses as such; the response exports cover CSV, PDF, PPT, XLS and SPSS. 3 6 18 19
The Operations Manager
Three team roles with per-survey sharing, SCIM provisioning against an identity provider, single sign-on on the Enterprise plan, white-label branding, a custom subdomain and response exports in documented formats give me the team controls I need. The EU data center is Enterprise-only and downgrade means opening a new US-hosted account with no data migration, and we found no public information on an audit log. 3 6 18 19
The HR Lead
Team roles (Primary Admin, Full User, Analyst), two seat types, SSO on Enterprise and SCIM provisioning with an identity provider like Azure AD are documented, plus white-label branding, a custom subdomain and exports to CSV, PDF, PPT, XLS and SPSS. An EU data centre exists but is reserved for Enterprise customers, data cannot be migrated back if you downgrade, and accounts opened before 2019 cannot move at all; we found no public information on an audit log or a self-hosted edition. EU storage being a sales conversation rather than a plan choice is what caps this for a 600-person German company. 3 6 14 18 19
The Academic Researcher
A choice of US, Canada or EU data centre is described, together with three team roles, single sign-on, SCIM provisioning against Azure Active Directory, white-label branding on Team Premier and a custom subdomain on Enterprise, plus response exports in CSV, XLS, PDF and PPT. The EU data centre is Enterprise-only, and the pages state that downgrading from Enterprise means opening a new US account because data cannot be migrated; we found no public information on an audit log or an API for the core survey product. 3 6 7 18 19
The Data Protection Officer
US, Canada and EU data centres are offered, with three team roles, documented SCIM provisioning, SSO on the Enterprise plan, white-labelling, and exports across CSV, XLS, PDF, PPT and SPSS. The EU data centre is reserved for Enterprise customers and data cannot be migrated if you downgrade, and we found no public information on an audit log or a self-hosted edition. 6 18 19 3 14
The Skeptic
Three named roles plus contributor seats restricted to a single survey area, SSO on Enterprise, SCIM provisioning with an identity provider, white-labelling, custom subdomains and exports to CSV, XLS, PDF and SPSS give a documented team and portability story. The European data centre is Enterprise-only, cannot be migrated if you downgrade, and excludes accounts opened before 2019 entirely, with US storage as the default. We found no public information on an audit log, a self-hosted edition, or SAML by name. 3 6 7 14 18 19
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where forms and responses are hosted, and who the subprocessors are (hosting, email delivery, payment providers, analytics, AI features). Independently sourced by the sovereignty pipeline; responses often carry personal and sometimes special-category data, so the whole chain counts, not only the database.
0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.
5 — EU hosting available and an EU contracting entity or EU representative, but parts of the chain (email, analytics, AI features, support) run through non-EU providers without a stated safeguard.
8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated.
10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, data export and deletion documented, and certifications published with their scope rather than implied.
The Market Researcher
The chain is disclosed in unusual detail: a subprocessor list with each provider's location, an Irish contracting entity for EEA, UK and Swiss customers, an online data processing agreement with transfer impact assessments, and named AWS infrastructure with an Ireland option. Storage defaults to the US, the EU data centre is Enterprise-only and covers specified data types, and the email, SMS and AI vendors are US-based with de-identified response data transferable to the US; we found no public information on ISO 27001 or SOC 2 certification. 5 6 7 8 9
The Operations Manager
European customers contract with SurveyMonkey Europe UC in Dublin, a data processing agreement is published and the subprocessor list names every provider with its locations. Storage defaults to US data centers, the EU data center is Enterprise-only, and even then AI prompts and de-identified data go to the US while email, SMS, support and AI subprocessors are all US-based, so the chain is far from European end to end. 5 6 7 9
The HR Lead
The rest-of-world contracting entity is SurveyMonkey Europe UC in Dublin with an Irish-entity DPA for EEA customers, the subprocessor list is published with locations and a PDF download, and standard contractual clauses plus Data Privacy Framework certification are stated. But storage defaults to the US, the EU data centre is Enterprise-only, and the chain runs through US providers for hosting (AWS), email (SparkPost), SMS (Twilio), AI (OpenAI, Anthropic), analytics (Snowflake) and support (Salesforce), with survey prompts sent to a US AI vendor and de-identified responses transferred to the US from the EU data centre. We found no public information on security certifications such as ISO 27001 or SOC 2. 5 6 7 9
The Academic Researcher
European customers contract with SurveyMonkey Europe UC in Dublin, the subprocessor list is published with names and locations, and a data processing agreement with standard contractual clauses and Data Privacy Framework certification exists. However, US data centres are the default, the EU centre is restricted to Enterprise customers, de-identified responses and AI prompts still travel to the US, and central subprocessors — AWS, OpenAI, Twilio, SparkPost, Salesforce — are US-based; we found no public information naming ISO 27001 or SOC 2 certifications. 5 6 8 9
The Data Protection Officer
The Irish entity SurveyMonkey Europe UC contracts customers outside the US and Brazil, subprocessors are published with locations and purposes, and the online agreement carries the transfer mechanisms with a transfer impact assessment. Against that, storage defaults to US data centres, the EU centre is Enterprise-only with AI prompts processed by a US vendor and de-identified EU responses still transferred to the US, while email, SMS, AI and support all run through US subprocessors; we found no published ISO 27001 or SOC 2 certification on the captured pages. 5 6 8 9 7
The Skeptic
An Irish contracting entity for EEA customers with a Dublin imprint, company register entry and VAT number, a published subprocessor list with locations, and an online DPA are real European anchors — but the default storage is a US data centre, the European option is an Enterprise upsell, and even EU-hosted accounts have AI prompts processed by a US vendor and de-identified response data transferred to the US for product improvement. The chain is transparent but heavily American: email via Sparkpost, SMS via Twilio, AI via OpenAI and Anthropic, support via Salesforce, hosting on AWS — a US company with Irish regions — plus remote access from outside the data centre's location. We found no public information on ISO 27001 or SOC 2 certifications; the entity is European, the data flows are not. 5 6 8
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone: price per plan and per user, response or submission limits and what happens above them, which features (logic, branding removal, SSO, EU hosting, analysis modules) need a higher plan, add-ons, minimum term and the free tier's limits.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free tier exists, but how cost scales with users, responses or features is unclear.
5 — Plans are public with prices and their main limits (users, responses, forms), but at least one commonly needed piece (SSO, EU hosting, extra responses, branding removal) is unpriced or "on request".
8 — Every plan priced publicly with its limits, overage or extra-response prices, feature differences per plan in a comparison table, billing period, VAT treatment and cancellation terms stated.
10 — Complete price computability: annual cost derivable for a given number of users, responses and features, with every add-on, enterprise option, support level and data-return term published.
The Market Researcher
Team Advantage at €30 per user per month and Team Premier at €75 per user per month are published with minimum users, annual billing, 50,000 and 100,000 responses per year, and €0.10 per additional response, plus tax treatment, auto-renewal, cancellation and refund rules and the free tier's deletion behaviour above its response limit. The Enterprise plan, where EU hosting and single sign-on sit, is contact-sales only, and Audience responses are sold separately without a published price. 3 9
The Operations Manager
Team plans are public at €30 and €75 per user per month, billed annually from three users, with 50,000 and 100,000 responses per year and €0.10 per additional response, plus stated tax treatment, auto-renewal and cancellation terms — I can nearly compute my annual cost, and the €0.10 response overage is a clear price rather than a surprise. Enterprise is priced only through a demo, and we found no public price for a single-user paid plan. 3 9
The HR Lead
The team plans are public — Team Advantage at €30 per user per month from 3 users billed annually with 50,000 responses a year, Team Premier at €75 per user per month with 100,000 responses a year and €0.10 per additional response — with taxes excluded, auto-renewal and cancellation terms stated, and the free tier's over-limit behaviour explicit (responses hidden and deleted unless you upgrade). But SSO and the choice of a US, Canada or EU data centre appear only in the Enterprise plan, which the pricing page presents as "get a demo" for 5+ users, priced on request. For a buyer who must have EU hosting for works-council-approved surveys, the real annual cost is not computable from the public pages. 1 3 9
The Academic Researcher
Team Advantage at €30 per user per month and Team Premier at €75 per user per month, each billed annually from three users with 50,000 and 100,000 responses per year and €0.10 per additional response, are published, and the terms state that prices exclude taxes, how auto-renewal and cancellation work, and that free-plan responses over the limit are hidden and deleted. Single sign-on and the EU data centre sit on the Enterprise plan behind a sales call, and we found no public information on a price for the individual paid plan. 3 9
The Data Protection Officer
Team plans are public at €30 and €75 per user per month with 50,000 and 100,000 responses a year, €0.10 per additional response, and tax treatment, renewal and cancellation terms all stated. The Enterprise tier that carries SSO and the EU data centre is contact-sales only, and the individual plan's price and the free tier's response limit are not on the captured pages. 3 9
The Skeptic
Team Advantage is €30/user/month from 3 users billed annually with 50,000 responses per year, Team Premier is €75/user/month with 100,000 responses per year, over-limit responses are priced at €0.10 per additional response, prices are stated exclusive of taxes, and auto-renewal, mid-cycle refund rules and price-change terms are all published. But the plan carrying SSO and the EU data centre is listed as "Get a demo", and we found no public information on an Individual plan price or the free tier's response-limit figure, only that over-limit free responses are hidden and deleted. A buyer can price the teams; the features that decide where the data lives sit behind a sales conversation. 3 6 9
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined ⚠ unverified | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined ⚠ unverified | — | uncited Report an error |
| Hosting options | Not determined ⚠ unverified | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined ⚠ unverified | — | uncited Report an error |
| Transfer impact assessment | Not determined ⚠ unverified | — | uncited Report an error |
Questions about SurveyMonkey
Is SurveyMonkey European?
No. whats-best.ai classifies SurveyMonkey as Rest of world.
Where does SurveyMonkey store data?
Not stated on the vendor’s pages as of 28 Oct 2026.
Does SurveyMonkey have a free plan?
Not stated on the vendor’s pages as of 28 Oct 2026.
What are the best alternatives to SurveyMonkey?
As of 3 Nov 2026, the panel rates Formbricks (4/5), easyfeedback (3.5/5) and Netigate (3.5/5) highest among the other 19 Forms & Surveys products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Formbricks (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: SurveyMonkey alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 28 Oct 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Data processing agreement, Transfer impact assessment, Legal entity, Hosting location, Hosting options. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 19 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 8 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 5 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 pricing fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 5 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (19)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage www.surveymonkey.com Checked 28 Oct 2026 Details →
- 2 Features page www.surveymonkey.com Checked 28 Oct 2026 Details →
- 3 Pricing page www.surveymonkey.com Checked 28 Oct 2026 Details →
- 4 Trust centre www.surveymonkey.com Checked 28 Oct 2026 Details →
- 5 Subprocessor list www.surveymonkey.com Checked 28 Oct 2026 Details →
- 6 Data centre overview www.surveymonkey.com Checked 28 Oct 2026 Details →
- 7 Privacy policy www.surveymonkey.com Checked 28 Oct 2026 Details →
- 8 Legal notice www.surveymonkey.com Checked 28 Oct 2026 Details →
- 9 Terms of service www.surveymonkey.com Checked 28 Oct 2026 Details →
- 10 Form & survey building — found from sitemap help.surveymonkey.com Checked 28 Oct 2026 Details →
- 11 Form & survey building — found from sitemap help.surveymonkey.com Checked 28 Oct 2026 Details →
- 12 Distribution, response collection & workflows — found from sitemap help.surveymonkey.com Checked 28 Oct 2026 Details →
- 13 Distribution, response collection & workflows — found from sitemap help.surveymonkey.com Checked 28 Oct 2026 Details →
- 14 Survey analysis & reporting — found from sitemap help.surveymonkey.com Checked 28 Oct 2026 Details →
- 15 Survey analysis & reporting — found from sitemap help.surveymonkey.com Checked 28 Oct 2026 Details →
- 16 Consent, GDPR & respondent data — found from sitemap help.surveymonkey.com Checked 28 Oct 2026 Details →
- 17 Consent, GDPR & respondent data — found from sitemap help.surveymonkey.com Checked 28 Oct 2026 Details →
- 18 Hosting choice, teams & portability — found from sitemap help.surveymonkey.com Checked 28 Oct 2026 Details →
- 19 Hosting choice, teams & portability — found from sitemap help.surveymonkey.com Checked 28 Oct 2026 Details →