# Typeform — Forms & Surveys

Typeform by Typeform SL holds a panel rating of 3/5 from 6 AI judges (category median 3/5), as of 2026-10-29. Provenance: EU-Made; sovereignty: not determined.

- Vendor: Typeform SL (https://www.typeform.com)
- Category: [Forms & Surveys](https://whats-best.ai/software/forms-and-surveys.md)
- Provenance (editorial classification): EU-Made
- Canonical page: https://whats-best.ai/software/forms-and-surveys/typeform
- Alternatives: https://whats-best.ai/software/forms-and-surveys/typeform/alternatives ([markdown](https://whats-best.ai/software/forms-and-surveys/typeform/alternatives.md))
- Data as of: 2026-11-04 · evaluated 2026-10-29 · oldest source captured 2026-10-28

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Typeform SL
- Headquarters: Not stated on the vendor’s pages as of 28 Oct 2026
- Data hosting: Not stated on the vendor’s pages as of 28 Oct 2026
- Free plan: Yes, per the vendor’s own page [S2]

## The panel's verdict

Typeform is a forms-and-surveys platform from Typeform SL of Barcelona, and the bench scores it highest on collection and workflows (6 to 7), crediting 28 question types, links, embeds, a 25,000-contact database with CSV import, file uploads, webhooks, a public API and Zapier. Consent and data protection also reaches 6 to 7, on a published data processing agreement with Standard Contractual Clauses, a named Data Protection Officer, AES-256 at rest and TLS 1.2 or higher in transit, and surveys that are anonymous by default and collect no IP addresses. Form building and hosting and administration cluster at 6. Analysis and reporting is the weakest area, and the bench genuinely splits from 4 to 6: judges writing for everyday reporting credit AI topic and sentiment detection, while judges needing research-grade output point to no public information on cross-tabulation, weighting, or SPSS and R exports, and no named export format. Sovereignty spans 5 to 7 over AWS hosting, an Enterprise-only EU data center choice and AI features governed by OpenAI's terms; pricing transparency spans 5 to 7 over Enterprise contact-sales gates.

**Speaks for it:**
- No-code drag-and-drop builder with 28 question types, conditional logic and branching, multilingual forms and a 3,000+ template library.
- Responses arrive by link, embed, payment and file upload into a 25,000-contact database, with webhooks, a public API, Zapier and named integrations including Google Sheets and Salesforce.
- Published data processing agreement with Standard Contractual Clauses, a named Data Protection Officer, AES-256 at rest and TLS 1.2 or higher in transit, and surveys anonymous by default that collect no IP addresses.
- Four plans priced publicly at 25, 49, 84 and 242 EUR/mo (Growth Flow after a 14-day trial with credit card required) with user counts and monthly response limits, and responses above the limit are simply not collected.
- AI detects topics and sentiment in open answers, NPS auto-calculates, and reports can be generated and shared.

**Held against it:**
- We found no public information on cross-tabulation, significance testing, weighting, or SPSS and R exports, and the response download's format is not named.
- Single sign-on, the choice of US or EU data center and custom domains sit on Enterprise at contact sales, and extra responses carry no public price.
- The service terms grant a worldwide, royalty-free, sublicensable licence over respondent data for providing and improving the service.
- Quantitative Insights is activated by default and its usage is governed by OpenAI's terms and conditions.
- We found no public information on offline or kiosk collection, reminder invitations on unique per-respondent links, or response quotas with closing rules.

**Best for:**
- You build branded event registrations, supplier onboarding or lead forms and need payments, file uploads and responses flowing into Google Sheets, HubSpot or Salesforce.
- You run NPS or pulse surveys and want auto-calculated scores, drop-off views, shareable reports and AI topic and sentiment summaries.
- You need a documented GDPR baseline for a compliance review — published DPA with SCCs, named DPO, anonymous-by-default surveys — with a US-or-EU data center choice available on Enterprise.

**Avoid if:**
- Your statistical colleagues need cross-tabulation, weighting or SPSS and R exports; analysis and reporting scores run as low as 4 on exactly those gaps.
- You cannot accept a worldwide, royalty-free, sublicensable licence over respondent data, or AI analysis governed by OpenAI's terms activated by default.
- You need enterprise controls without negotiating a contract, since single sign-on, the EU data center choice and custom domains sit on Enterprise at contact sales.

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Market Researcher | The Operations Manager | The HR Lead | The Academic Researcher | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Form & survey building | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 |
| Distribution, response collection & workflows | 3.5/5 | 3/5 | 3/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| Survey analysis & reporting | 2.5/5 | 2.5/5 | 2.5/5 | 2/5 | 3/5 | 3/5 |
| Consent, GDPR & respondent data | 3/5 | 3/5 | 3/5 | 3.5/5 | 3/5 | 3.5/5 |
| Hosting choice, teams & portability | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 |
| European sovereignty | 3/5 | 2.5/5 | 3/5 | 3/5 | 3.5/5 | 2.5/5 |
| Pricing transparency | 3/5 | 3/5 | 2.5/5 | 3/5 | 3.5/5 | 3/5 |
| **Weighted verdict** | **3/5** | **3/5** | **3/5** | **3/5** | **3/5** | **3/5** |

### The judges

- **The Market Researcher** (v1.0): Runs customer and brand studies for a mid-sized consumer-goods company, three waves a year in four languages. Wants logic and quotas that keep the sample clean, invitations with reminders, cross-tabs and NPS without exporting to a spreadsheet first, and open answers grouped into themes before the board meeting.
- **The Operations Manager** (v1.0): Replaces paper and PDF forms at a service company: event registrations, supplier onboarding, damage reports with photos, order requests with a payment. Wants forms a colleague can build without IT, file uploads, a submission that lands in the right inbox and the CRM or spreadsheet without copy and paste, and a price that does not jump when the response count does.
- **The HR Lead** (v1.0): Runs the yearly engagement survey and pulse checks for a German company of six hundred, with the works council reading every question. Wants anonymity that is real and stated, results hidden below a minimum group size, reports per department that managers can read, and answers that are deleted when the agreement with the works council says so.
- **The Academic Researcher** (v1.0): Runs questionnaire studies at a European university and has to satisfy the ethics board before the first respondent sees a question. Wants complex branching, randomisation and validated scales, an informed-consent page that is part of the instrument, exports to SPSS and R with labels intact, and a licence the faculty can host or at least keep in the EU.
- **The Data Protection Officer** (v1.0): Signs off every form tool a department wants to use and has found health data in a feedback form before. Wants a data processing agreement and a subprocessor list on the vendor's own pages, consent fields and an anonymous mode that drops IP addresses, retention periods that delete on their own, EU hosting the customer can choose, and roles that keep responses away from people who do not need them.
- **The Skeptic** (v1.0): Has seen a "free form builder" put its logo on every customer survey and charge per response the month the campaign worked. Reads "GDPR compliant" with no data processing agreement behind it, "anonymous" surveys that still log IP addresses, "EU hosting" on the enterprise plan only, and AI analysis features with no word on where the answers go — and asks whether the responses can leave with the customer.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Access controls: yes · yes · yes · yes [S5]
- Audit certifications: yes · yes · copies of audit reports/certifications [S5]
- Audit rights: yes · 1 · yes [S5]
- Backups: yes · yes · daily · yes [S5]
- Breach notification: without undue delay, within GDPR deadlines [S5]
- CCPA notice: yes [S4]
- Certifications: SOC 2 Type II · ISO/IEC 27001:2022 · ISO/IEC 27017 · ISO/IEC 27018 · ISO/IEC 27701 · CSA STAR · HIPAA · yes [S4]
- Complaint authority: Spanish Data Protection Agency [S4]
- DPA available: yes · data controller · data processor [S4]
- DPA reference: yes [S7]
- Employee confidentiality: yes [S5]
- Encryption: AES-256 · TLS 1.2 or higher · yes [S5]
- GDPR HIPAA: yes · yes [S2]
- GDPR HIPAA plans: yes · Enterprise · Enterprise · yes · Enterprise [S3]
- Penetration testing: yes · yes [S5]
- Personnel access controls: yes · yes · yes · yes [S4]
- Scc law: Kingdom of Spain · Spanish law [S5]
- Scc module4: transfers outside EEA when GDPR-based transfer unavailable · 4 [S5]
- Security features: yes · yes · yes [S2]
- Sensitive data: yes [S5]
- Subprocessor consent: yes [S7]
- Subprocessor liability: yes · yes [S5]
- Supervisory authority: Spanish Data Protection Agency [S5]
- Transfer frequency: continuous [S5]
- Trust center: https://trust.typeform.com [S4]
- UK addendum: yes · Information Commissioner [S5]

**Data**
- Account deletion: yes [S4]
- Backup retention google data: 15 [S4]
- Copy not guaranteed: no [S7]
- Deletion on termination: delete or return · yes [S5]
- Encryption at rest: AES-256 · AWS Key Management Service (KMS) [S4]
- Encryption in transit: TLS 1.2 · TLS 1.3 [S4]
- Inactive free user deletion: 24 [S5]
- Inactivity termination months: free plan · 24 [S7]
- License respondent data: worldwide, royalty-free, sublicensable, transferable · providing · improving Services (aggregated basis) [S7]
- License user submissions: worldwide, irrevocable, non-exclusive, royalty-free, perpetual, sublicensable, transferable [S7]
- Ownership user submissions: no [S7]
- Retention after deletion: legal compliance / Privacy Notice · yes [S7]
- Retention contractual: 5 [S4]
- Retention period: as long as the data exporter requires the services [S5]
- Storage infrastructure: production VPC · Google Calendar scheduler block OAuth data · PostgreSQL on AWS RDS [S4]
- User rights: withdraw consent · access · rectification · erasure · restriction of processing · objection · data portability [S4]

**Hosting**
- Eea processing: UK · EEA [S4]
- International transfer mechanism: Standard Contractual Clauses [S4]
- US customers processing: US customers · UK · EEA · US [S4]

**Integrations**
- API webhooks: yes · yes [S3]
- Connect panel: Connect panel for integrating with tech tools [S13]
- Google sheets: native Google Sheets integration [S8]
- Named apps: Zapier · Google Sheets · Slack · HubSpot · Klaviyo · Salesforce [S2]
- Named apps: Airtable · Google Sheets · Hubspot · Pipedrive · Mailchimp · Slack · Calendly · Salesforce · Google Analytics · Google Tag Manager · Meta Pixel [S3]
- No code integrations: hundreds · yes [S2]
- Public API: yes [S7]
- Signin providers: Microsoft · Google · Gravatar (Automattic) [S4]
- Social media platforms: yes [S7]
- Trello: Trello integration with real-time responses [S8]
- Webhooks: yes [S7]
- Zapier: 500 [S3]
- Zapier: Zapier connection to hundreds of tools [S8]

**Legal**
- Claims time limit US: 1 [S6]
- Commercial registry: B-421911 · 145 · 43262 · Commercial Registry of Barcelona [S6]
- Dispute waiver: TYPEFORM US LLC · yes · yes [S7]
- Domains: www.typeform.com · www.videoask.com [S6]
- DPA entity: www.typeform.com · www.videoask.com · TYPEFORM SL [S5]
- DPA last updated: 2026-07-20 [S5]
- Effective date: 2024-04-21 [S7]
- Entity: TYPEFORM, S.L. · Via Augusta 29 - 31, 08006 – Barcelona (Spain) · Spain [S4]
- Entity name: TYPEFORM SL · Spain [S6]
- Exporter identity: TYPEFORM, S.L. · B65831836 · Via Augusta 29 - 31, 08006 – Barcelona · Spain · Commercial Registry of Barcelona, page B-421911, folio 145, volume 43262 [S5]
- Jury trial waiver: yes · yes [S6]
- Liability cap: fees paid in preceding 12 months [S7]
- Min age: 14 · yes [S6]
- Non US governing law: Spanish law [S6]
- Policy last updated: 2024-03-14 [S4]
- Pricing change discretion: yes [S6]
- Registered address: Via Augusta 29 - 31, 08006 – Barcelona (Spain) [S6]
- Services agreement precedence: yes [S6]
- Tax id: B65831836 [S6]
- Tou last updated: 2024-03-08 [S6]
- US embargo restriction: yes [S6]
- US governing law: State of Delaware [S6]
- US joint controllers: offer/sell plans and commercial follow-up for US customers · Typeform SL · Typeform US LLC [S4]
- Videoask support email: support@videoask.com [S6]

**Pricing**
- Auto renewal: monthly · annual · yes [S7]
- Basic features: Unlimited typeforms · AI-powered form creation · Conditional logic · Webhooks & integrations [S11]
- Basic includes: 1 · 100 [S3]
- Basic price: EUR · 25 · monthly [S3]
- Billing dispute window days: 30 [S7]
- Business features: Everything in Plus · Drop-off rates · Conversion tracking · Priority support and live chat [S11]
- Business includes: 5 · 10000 [S3]
- Business price: EUR · 84 · monthly [S3]
- Enterprise summary: 6+ users, SSO, dedicated support; contact sales for pricing [S3]
- Free plan: yes · yes [S11]
- Free plan available: yes [S3]
- Free tier: Basic Subscription · yes [S7]
- Free tier: yes [S10]
- Growth flow: Growth Flow · 5 · 14 · 0 · 10000 · yes · 242 [S11]
- Growth flow features: Enrich 1,500 responses /mo · Smart Insights · Contacts & Automations add-on included for free · Multi-language forms · Salesforce integration · Email and text (SMS) follow-ups · Priority support and live chat [S11]
- Growth flow price: EUR · 14 · yes · 242 [S3]
- Max monthly responses: 2500 · 750 · 50000 · 50000 [S3]
- Plan availability: Plus and above · Growth Flow [S9]
- Plus features: Everything in Basic · Remove Typeform branding · Custom subdomain [S11]
- Plus includes: 3 · 1000 [S3]
- Plus price: EUR · 49 · monthly [S3]
- Pro thank you screen: Thank You screen redirect is a PRO feature [S8]
- Proplus account required: PRO+ Typeform account and Axeptio account [S12]
- Refund policy: no [S7]
- Talent plan: 119 [S3]
- Yearly discount: 30 [S11]
- Yearly discount label: Yearly labeled Save 30% [S3]

**Product**
- Add ons: >responses · additional Authorized Users · other features · yes · Settings menu [S7]
- Addon contacts automations 12000: monthly · 66 · all plans except Free, Basic, and Plus · 12000 [S3]
- Addon contacts automations 2400: monthly · 21 · all plans except Free and Basic · 2400 [S3]
- Addon contacts custom: annually · Enterprise and Growth Custom plans · custom [S3]
- AI analysis: topic detection · sentiment detection · Ask AI questions about data [S10]
- AI forms: AI forms and automated workflows platform [S1]
- AI insights: AI automatically detects key topics and sentiments [S13]
- AI powered tools: yes [S2]
- AI recommendations: auto-generated performance reports · drop-off tracking · AI-assisted survey optimization recommendations [S10]
- AI survey builder: generative AI survey builder [S13]
- Analytics builtin: yes [S10]
- Analytics features: yes · yes · yes [S3]
- Analytics reporting: auto-generated reports · survey analysis · data visualization · AI-assisted reporting · drop-off tracking [S2]
- Anonymity conditions: anonymous and untraceable · no personally identifying fields · no URL tracking parameters [S13]
- Anonymous by default: yes [S13]
- Anonymous limitation: no [S13]
- Authentication provider: yes · authentication · Okta, Inc. [S7]
- Autobranding: applied after onboarding survey with valid URL or Brandkit use · autobranding · BrandFetch [S7]
- Automatic cookie detection: Widget automatically detects and displays cookies in use [S12]
- Automation by score: yes · yes [S11]
- Beta services no SLA: no [S7]
- Branding features: yes · yes · yes [S3]
- Breach remedy days: 10 [S7]
- CCPA notice: yes [S5]
- Conditional logic: yes · yes [S2]
- Custom domain enterprise: Enterprise · yes [S3]
- Custom logic: yes · yes [S13]
- Customizable messages: Cookie widget messages are fully customizable [S12]
- Customization: branding of themes, fonts, layouts, logo, brand kits [S2]
- Data categories: name · surname · email address · telephone number · other ID details · employees · candidates · prospects · clients [S5]
- Data enrichment: yes · yes [S4]
- Data processing instructions: Processing only on documented customer instructions [S5]
- Data subject requests: Data subject requests forwarded to the customer [S5]

**Subprocessors**
- Affiliates: engineering, marketing & sales and customer success support services · TYPEFORM US LLC · TYPEFORM UK Limited · Typeform DE GmbH [S5]
- Categories: hosting and infrastructure providers · audience analytics tools · product and user experience analytics tools · security of systems · subscription, accounting and billing management · auditing and consulting services · marketing campaign m… [S4]
- List URL: https://help.typeform.com/hc/en-us/articles/360029617191-What-other-companies-do-we-share-data-with- [S5]
- Objection period: 15 · yes [S5]
- Videoask named: Amazon Web Services Inc. · hosting · Auth0, Inc. · user authentication · Slack Technologies, LLC [S5]

**Support**
- Business priority: Business · Growth Flow · priority support · live chat [S3]
- Developers API: Developers / API resource listed [S8]
- Developers API: yes [S11]
- Enterprise tier: highest tier of support on Enterprise [S3]
- Help center: Help center · Community · Tutorials [S8]
- Help center: Typeform Help Center · VideoAsk Help Center · contact forms [S7]
- Privacy contact channels: Typeform Contact Form · VideoAsk Contact Form · Help Center Contact Support link · gdpr@typeform.com [S4]
- Standard support: yes · Enterprise only · yes · yes [S3]
- Videoask email: support@videoask.com [S7]

61 more facts on the canonical page: https://whats-best.ai/software/forms-and-surveys/typeform

## Questions

### Is Typeform European?

Yes. whats-best.ai classifies Typeform as EU-Made.

### Where does Typeform store data?

Not stated on the vendor’s pages as of 28 Oct 2026.

### Does Typeform have a free plan?

Yes. Typeform has a free plan, per [the vendor’s page captured 28 Oct 2026](https://whats-best.ai/evidence/11826).

### What are the best alternatives to Typeform?

As of 3 Nov 2026, the panel rates [Formbricks (4/5)](https://whats-best.ai/software/forms-and-surveys/formbricks), [easyfeedback (3.5/5)](https://whats-best.ai/software/forms-and-surveys/easyfeedback) and [Netigate (3.5/5)](https://whats-best.ai/software/forms-and-surveys/netigate) highest among the other 19 Forms & Surveys products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Formbricks](https://whats-best.ai/software/forms-and-surveys/formbricks) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Typeform alternatives](https://whats-best.ai/software/forms-and-surveys/typeform/alternatives).

## Head-to-head

- [Typeform vs Tally](https://whats-best.ai/compare/tally-vs-typeform.md)
- [Typeform vs Jotform](https://whats-best.ai/compare/jotform-vs-typeform.md)

## What this page leaves out

- 46 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 9 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 data fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 5 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://www.typeform.com/ (checked 2026-10-28)
- [S2] Features page (surveys): https://www.typeform.com/surveys (checked 2026-10-28)
- [S3] Pricing page: https://www.typeform.com/pricing (checked 2026-10-28)
- [S4] Privacy policy: https://www.typeform.com/legal/privacy-policy (checked 2026-10-28)
- [S5] Data processing agreement: https://www.typeform.com/legal/data-processing-agreement (checked 2026-10-28)
- [S6] Legal notice: https://www.typeform.com/legal/legal-notice-terms-of-use (checked 2026-10-28)
- [S7] Terms of service: https://www.typeform.com/legal/service-terms-and-conditions (checked 2026-10-28)
- [S8] Distribution, response collection & workflows — found from sitemap: https://www.typeform.com/invitations (checked 2026-10-28)
- [S9] Distribution, response collection & workflows — found from sitemap: https://www.typeform.com/contacts-and-automations (checked 2026-10-28)
- [S10] Survey analysis & reporting — found from sitemap: https://www.typeform.com/reporting (checked 2026-10-28)
- [S11] Survey analysis & reporting — found from sitemap: https://www.typeform.com/nps-form-builder (checked 2026-10-28)
- [S12] Consent, GDPR & respondent data — found from sitemap: https://www.typeform.com/connect-integration/add-a-cookie-widget-to-your-typeforms-to-comply-with-the-gdpr (checked 2026-10-28)
- [S13] Consent, GDPR & respondent data — found from sitemap: https://www.typeform.com/guides/anonymous-survey (checked 2026-10-28)

---

Cite as: whats-best.ai, "Typeform — Forms & Surveys", AI panel analysis, as of 2026-11-04. https://whats-best.ai/software/forms-and-surveys/typeform

Corrections: https://whats-best.ai/correct/1102?target=page