Website Builders
Framer
EU-Made Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Framer B.V. · www.framer.com
Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Framer at a glance
- Vendor
- Framer B.V.
- Headquarters
- Not stated on the vendor’s pages as of 28 Oct 2026
- Data hosting
- Not stated on the vendor’s pages as of 28 Oct 2026
- Free plan
- Yes, per the vendor’s own page source, captured 28 Oct 2026
- Panel verdict
- The AI panel rates Framer 3.5/5, the mean of 6 judges. Framer B.V. how scores are made
- As of
- Vendor pages captured 28 Oct 2026; evaluated by the panel 29 Oct 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Framer B.V. is a Dutch website builder with hosting, CMS and SEO built in; the persona-weighted totals run from 5.7 to 6.9. It is strongest on SEO and marketing, scored 9 across the board for sitemaps, automatic 301 redirects, JSON-LD structured data, cookie-free analytics and an AEO scanner, and on editor and design for a fully editable canvas, breakpoints, branching, staging and roles from viewer to administrator. Hosting and portability sits steady at 7: 99.99% uptime and instant rollbacks are stated, but the judges found no public information on exporting pages, content and media, or on mailboxes. The weak columns are legal compliance, sovereignty (a flat 5) and pricing transparency: the pages put GDPR responsibility for analytics data on the site owner, state that all services are hosted in AWS facilities in the United States, and show no plan prices. On forms and business the judges split: documented plugin depth earns the high mark, while no public information on where form entries are stored or for how long pulls the low one.
Speaks for it
- Editor and design scores 8-9 for a fully editable canvas, responsive breakpoints, branching with a staging environment, and roles from viewer to administrator
- SEO and marketing is scored 9 across the board, with auto-generated sitemaps and robots.txt, automatic 301 redirects, JSON-LD structured data and an AEO scanner
- Hosting is stated at 99.99% uptime with automatic SSL provisioning and instant rollbacks to any healthy version
- Built-in analytics are anonymized and cookie-free, so no consent banner is needed for them
- Form submissions and newsletter signups flow natively into nine named platforms, including Brevo, HubSpot and Mailchimp, without middleware
Held against it
- All services are stated to be hosted in AWS facilities in the United States, with additional infrastructure in Europe and Asia-Pacific
- The pages state that the site owner is responsible for GDPR compliance of analytics data
- We found no public information on plan prices for Basic or Pro — the only figures captured are a marketplace component at $12 and Enterprise quoted as "custom"
- We found no public information on exporting pages, content and media, or on mailboxes on your own domain
- The subprocessor list sits in the Trust Center, with no names or locations shown on the captured pages
Best for
- You want design-level control of the site, with roles separating who can edit content from who can change design and deploy
- Your growth depends on organic and AI-search visibility — SEO and marketing scored 9 across the board
- You want analytics without a cookie consent banner for them — the built-in analytics are anonymized and cookie-free
- Your form submissions should land directly in a CRM or newsletter platform — nine named integrations, no middleware
Avoid if
- You need your visitors' data hosted in Europe — the captured pages state all services are hosted in AWS facilities in the United States
- You expect the vendor's pages to carry the GDPR burden for your analytics — they state the site owner is responsible for compliance of analytics data
- Your rules require core form depth without third-party plugins — the 30-plus field types and five CAPTCHA options come from a marketplace forms plugin
The scores
| Criterion | Panel median |
|---|---|
| Editor, templates & design control | 4.5 of 5 |
| Hosting, domains & portability | 3.5 of 5 |
| SEO, analytics & visibility | 4.5 of 5 |
| Forms, bookings & business features | 3.5 of 5 |
| Imprint, privacy & cookie compliance | 2 of 5 |
| European sovereignty | 2.5 of 5 |
| Pricing transparency | 2 of 5 |
Editor, templates & design control
Show reasoningHide reasoning
How this is scored
How a site gets built and how far the owner can shape it: the editor (drag and drop, sections, AI drafts), the template range, responsive and mobile editing, fonts and brand styles, multilingual pages, custom code, and roles for collaborators or clients.
0 — Not a website editor; the product hosts files or code that are built elsewhere.
3 — An editor with a small set of templates and fixed layouts, where colours and texts change but structure, mobile view and languages are not described.
5 — A visual editor with a template gallery for several industries, layouts that adapt to mobile, brand colours and fonts, a blog, and the option to add pages in a second language or custom code snippets.
8 — Fine design control documented: free layout or section editing, separate mobile and breakpoint editing, reusable components or global styles, built-in multilingual sites with translated URLs, user roles for collaborators or clients, and site versions or history that can be restored.
10 — Design work at a professional level without leaving the tool: a design system with variables and components, interactions and animations, a CMS with custom collections, staging or branching before publishing, client handover with restricted editing, and the editor documented in depth.
The Small-Business Owner
The pages describe a fully editable design canvas with responsive breakpoints refined directly on canvas, a marketplace of templates, components and plugins, built-in localization with AI translation, roles and permissions for who may view, edit or deploy, plus branching and a staging environment, and every published version can be rolled back in seconds. For a Sunday-afternoon builder like me, agents that draft pages, rewrite copy and even run the CMS take the fear out of starting, and the free plan already allows up to three editors. 1 2 3 11
The Freelance Web Designer
This is the level of control I want for client work: layout, copy, images, responsive breakpoints and interactions refined directly on the canvas, staging and branching before publishing, instant rollbacks with full deployment history, and roles that separate who can edit content from who can touch design and deploys. CMS collections, localization as an add-on with AI translation, agent-generated code and a component marketplace round it out; the only professional item I found no public information on is a variables-based design system. 1 2 3 11
The Marketing Lead
Building happens on a fully editable canvas with responsive breakpoints, branching and a staging environment before publishing, and AI agents that update existing pages, CMS content and SEO details. Roles run from viewer to administrator, localization with locales plus AI translation is documented, and components and templates come from a large marketplace. I found no public information on design-system variables or translated URL structures, so this sits just below the top level. 1 2 3 8
The Practice Owner
The design side reads as genuinely professional: agents that build on a fully editable canvas, responsive breakpoints refined directly on the canvas, branching and a staging environment before publishing, roles from viewer to administrator, a CMS with collections, AI translation for whole sites, and Figma import. That means one of my therapists could edit text without wrecking the layout. A design system with variables and an explicit client-handover workflow are not documented, which keeps it just short of the top level. 1 2 3 17
The Data Protection Officer
Agents build on a fully editable canvas, responsive breakpoints are refined directly on the canvas, and there are roles from viewer to administrator, branches with a staging environment, instant rollbacks to any healthy version, and localization with AI translation — fine design control, documented. We found no public information on design-system variables, though components and templates circulate through a large marketplace. 1 2 3 8 11 17
The Skeptic
A fully editable design canvas with responsive breakpoints, branching and a staging environment, role-based permissions for collaborators, a visual CMS with collections, a component and template marketplace, and AI translation across locales — this reads like a professional design tool, not a template filler. Design-system variables and translated URLs for the multilingual sites are the only pieces we found no public information on, which keeps it just off the top. 1 2 3 17
Hosting, domains & portability
Show reasoningHide reasoning
How this is scored
What runs the site once it is built: included hosting, custom domains and domain registration, SSL, email mailboxes, speed (CDN, image optimisation), backups and restore, availability commitments — and whether pages, content and media can be exported when the owner moves on.
0 — No hosting; the product produces a design or files and the owner finds a host.
3 — Hosting on a subdomain with a custom domain on paid plans, but SSL, backups, storage limits and export are not described.
5 — Hosting included with a custom domain (or one included for a first year), free SSL, stated storage or bandwidth, a CDN or speed optimisation, automatic backups or a restore function, and an export of at least blog posts or content.
8 — Hosting described in depth: data-centre locations named, a stated uptime commitment, versioned backups with self-service restore, email mailboxes on the own domain, performance figures or Core Web Vitals addressed, and a documented export of pages, content and media.
10 — Hosting the owner can rely on and leave: an uptime SLA with credits, the hosting region selectable, DDoS and security measures named, a complete site export (code or standard formats) documented step by step, and domains transferable without fees or lock-in.
The Small-Business Owner
Hosting is included even on the free plan, a custom domain needs a paid plan, a free domain comes with any yearly plan via Hover, SSL is provisioned and renewed automatically from named certificate authorities, and 99.99% uptime is stated with AWS regions named, a CDN across 200+ edge locations, automatic image optimization, and continuous backups plus instant rollbacks. What keeps me cautious is leaving: we found no public information on exporting pages, content and media to another host, and none on email mailboxes on my own domain. 2 3 8 11 18
The Freelance Web Designer
Hosting is described in real depth: AWS data centres named with a primary region in the United States plus Europe and Asia-Pacific, 99.99% uptime, automatic SSL from Let's Encrypt and other authorities, edge image optimization in WebP and AVIF, published Core Web Vitals figures, DDoS shielding, instant rollbacks, and a free custom domain via Hover on yearly plans. What decides the score is portability: we found no public information on an export of pages, content and media, or on email mailboxes on the client's own domain — and a client who wants to leave is my first question. 1 3 8 11 12
The Marketing Lead
Hosting is included from the free plan with a custom domain, automatic SSL from multiple certificate authorities, a 99.99% uptime figure, DDoS shielding, atomic deploys and instant rollbacks with full deployment history, and the security page names AWS in the United States with additional infrastructure across Europe and Asia-Pacific, plus a free custom domain on yearly plans via the Hover partner. I found no public information on exporting pages, content and media when leaving, or on email mailboxes, which is what keeps me from relying on it fully. 1 8 11 12
The Practice Owner
Hosting is described properly: 99.99 percent uptime, free SSL on every plan with automatic provisioning and renewal, a global CDN serving WebP and AVIF, DDoS shielding, atomic deploys with instant rollbacks, and named AWS data centres in the United States with additional infrastructure in Europe and Asia-Pacific. For portability, though, we found no public information on exporting my pages, content and media, nor on mailboxes on my own domain — as an owner planning years ahead, that keeps this below the top band. 1 8 11 12 18
The Data Protection Officer
Hosting runs on named infrastructure — the security page states all services sit in AWS facilities in the United States with additional infrastructure across Europe and Asia-Pacific — with a stated 99.99% uptime, automatic SSL from several certificate authorities, a free custom domain via Hover on yearly plans, WebP/AVIF image optimisation and published Core Web Vitals figures. Instant rollbacks give a versioned restore of the site itself. We found no public information on mailboxes on the own domain or on a documented export of pages, content and media when the owner moves on. 1 3 8 11 12 18
The Skeptic
Hosting is documented with teeth: 99.99% uptime, AWS named with the United States as primary region plus infrastructure in Europe and Asia-Pacific, automatic SSL from several certificate authorities, WebP/AVIF image optimisation, DDoS shielding, and instant rollbacks with full deployment history. The portability half is where the pages go quiet — we found no public information on a documented export of pages, content and media, on email mailboxes at the own domain, or on what moving the domain away would cost. 1 6 8 11 18
SEO, analytics & visibility
Show reasoningHide reasoning
How this is scored
How the site is found and measured: page titles and descriptions, clean URLs and redirects, sitemaps and indexing, structured data, local SEO, page speed for search, built-in or connectable analytics, newsletter or social sharing, and guidance for the owner who is not an SEO.
0 — No search settings at all; pages cannot be given titles or descriptions.
3 — Page titles and descriptions can be edited, but sitemaps, redirects, analytics and indexing control are not described.
5 — Editable titles, descriptions and URLs, an automatic sitemap, 301 redirects, social sharing previews, built-in visitor statistics or a documented connection to an analytics tool, and SEO guidance or a checklist inside the product.
8 — SEO documented in depth: structured data, canonical and noindex control, robots.txt editing, image alt texts and compression, local business listings or a Google Business connection, multilingual SEO with hreflang, and privacy-friendly analytics without third-party cookies.
10 — Visibility as a strength: full technical SEO control including server-side rendering and speed figures, AI search or answer-engine readiness addressed, search data shown inside the editor, marketing tools (newsletter, campaigns, A/B tests) built in, and every setting explained in the help centre.
The Small-Business Owner
Titles and descriptions (even AI-improved), custom URLs and slugs, auto-generated sitemaps and robots.txt, automatic 301 redirects, structured data in JSON-LD, canonical URLs, indexing controls, alt texts and semantic HTML are all documented, the built-in analytics are anonymized and cookie-free, Google Analytics, Tag Manager, Semrush and Ahrefs can be connected, and a scanner even shows what AI search engines can find and cite. The one gap that hurts a joinery: we found no public information on local business listings or a Google Business connection. 1 4 13 17
The Freelance Web Designer
Technical SEO is documented in depth: auto-generated sitemaps and robots.txt plus uploadable well-known files, automatic 301 redirects, canonical URLs, indexing controls, JSON-LD structured data, alt texts and CDN-served WebP, and cookie-free built-in analytics with connections to Google Analytics and Tag Manager. Answer-engine readiness is a genuine strength — an AEO scanner, llms.txt support and an SEO audit agent, plus built-in A/B testing — though we found no public information on local business listings or hreflang-level multilingual SEO. 1 4 11 13 14
The Marketing Lead
Clean URLs and slugs, automatic 301 redirects, auto-generated sitemaps and robots.txt, canonical URLs, JSON-LD structured data and indexing controls are all documented, with Core Web Vitals figures shown, clean HTML output and smart pre-rendering. Analytics are built in, anonymised and cookie-free so no consent banner sits in front of my numbers, filterable by page, country, device, source and UTM, with A/B testing and funnels and Google Analytics or Tag Manager connections. An AEO scanner and llms.txt support cover answer-engine readiness; I found no public information on local business listings or newsletter campaign tooling. 1 4 11 13 14
The Practice Owner
Visibility is deep and documented: automatic sitemaps and robots.txt, automatic 301 redirects, JSON-LD structured data, canonical URLs, indexing controls, alt texts, Open Graph previews, built-in cookie-free analytics with stacked filters, connections to Google Analytics, Tag Manager, Semrush and Ahrefs, built-in A/B testing, and even a scanner showing what AI search engines can cite. What we found no public information on is local business listings or a Google Business connection — for a local practice that is the piece that matters most. 1 4 13 14 17
The Data Protection Officer
Titles, descriptions and custom URLs, auto-generated sitemaps and robots.txt, automatic 301 redirects, canonical and indexing controls, JSON-LD structured data and Open Graph previews are documented, plus an AEO scanner and llms.txt for answer-engine readiness. Built-in analytics are anonymised and run without cookies, with filters per page, country, device and source — exactly what I want to see for my clients' visitors. We found no public information on local business listings or a Google Business connection. 1 4 11 13 14 17
The Skeptic
Custom slugs, auto-generated sitemaps and robots.txt, automatic 301 redirects, canonical URLs, JSON-LD structured data, indexing controls, Open Graph previews, alt texts, Core Web Vitals figures, built-in cookie-free analytics with filters, Google Analytics and Tag Manager connections, an answer-engine scanner and A/B testing — nearly the full checklist. We found no public information on hreflang for the multilingual sites or a Google Business connection, so it stops short of the top. 1 4 13 14 17
Forms, bookings & business features
Show reasoningHide reasoning
How this is scored
What the site does for the business beyond showing pages: contact and custom forms with spam protection and notifications, where form entries are stored, appointment bookings, member areas, events, integrations with CRM or calendar, payments and a small shop as an add-on — judged as features of a website, not as a shop system.
0 — No forms and no interactive features; the site shows pages only.
3 — A contact form that sends an email, with spam protection, storage of entries and further business features not described.
5 — Custom forms with several field types, spam protection and email notifications, entries stored or exportable, and at least one further business feature (bookings, member area, events or a small shop) described.
8 — Business features documented in depth: forms with conditional fields, file uploads and confirmation emails, appointment booking with calendar sync, member areas or gated pages, payments, integrations with named CRM, newsletter or automation tools, and an app or extension marketplace.
10 — The site runs a small business: forms, bookings, payments, invoices or memberships work together with consent and data retention settings per form, an API or webhooks for form data, and a documented integration ecosystem — while the shop stays one feature among several.
The Small-Business Owner
Native forms offer 30+ field types including file uploads, conditional logic, multi-step flows, spam protection switched on by default with five CAPTCHA options, fourteen ready templates from contact and quote request to booking, and submissions flow natively into nine named tools such as Mailchimp, Brevo and HubSpot with delivery tracking in the plugin. But we found no public information on email notifications to my own inbox, appointment booking with calendar sync, or payments — the enquiry-in-the-inbox test I care about most is not answered by these pages. 2 14 16
The Freelance Web Designer
Forms are the strong suit: native forms with several field types and spam protection on by default, and through the marketplace a forms plugin with 30-plus field types, conditional logic, file uploads, multi-step flows, five CAPTCHA options and direct sends to Brevo, HubSpot, Mailchimp and six more named platforms. Beyond forms there is password-protected access for clients, ecommerce via integrations and built-in A/B testing; we found no public information on appointment booking with calendar sync, confirmation emails or member accounts, and the deep form capability comes from a third-party marketplace plugin rather than the platform itself. 1 2 3 14 16
The Marketing Lead
Native forms carry multiple field types and default spam protection with Basic and Advanced modes, and the forms plugin in the marketplace adds 30-plus field types, conditional show/hide logic, file uploads, multi-step forms, five CAPTCHA options and submission history with delivery tracking. Submissions and newsletter signups flow into nine named CRM and newsletter platforms including HubSpot and Mailchimp without middleware — exactly the pipe to a CRM I want instead of a shared mailbox. I found no public information on payments, member areas, confirmation emails or appointment booking with calendar sync. 1 2 14 16
The Practice Owner
Forms are strong: native forms with spam protection on by default, plus a marketplace forms plugin with 30-plus field types including date and time pickers, file uploads, conditional logic, five CAPTCHA options, submission tracking, and native connections to nine named CRM and newsletter platforms. An actual appointment booking with calendar sync is not documented, though — only a booking form template — and neither email notifications nor where native form entries are stored is described, so my patients' booking and cancellation flow would rest on integrations rather than a built-in system. 1 2 5 14 16
The Data Protection Officer
Forms are strong in themselves: over thirty field types including file uploads and e-signature, conditional logic with AND/OR rules, multi-step forms, spam protection on by default with five CAPTCHA options, and native CRM and newsletter integrations named one by one. We found no public information on bookings with calendar sync, payments or member areas — and, what I need to file for my clients, no public information on where form entries are stored or for how long they are kept. 2 11 14 15 16
The Skeptic
Forms are documented in real depth: thirty-plus field types, conditional logic with AND/OR rules, file uploads of any type, five CAPTCHA options, spam protection on by default, multi-step forms, submission tracking with delivery status, password-protected sites, and direct connections to nine named CRM and newsletter platforms with a plugin marketplace on top. Confirmation emails, payments on the site, and appointment booking with calendar sync are the pieces the captured pages do not show. 1 3 14 16
Imprint, privacy & cookie compliance
Show reasoningHide reasoning
How this is scored
What the product does so that the owner's site is legal in Germany and the EU: an imprint page, privacy-policy and legal-text generators or partners, a cookie consent banner that blocks scripts until consent, GDPR-compliant forms, a data processing agreement for visitor data, fonts and media served without third-country transfers, and accessibility under the European Accessibility Act.
0 — Nothing for the site's legal obligations; the owner is left to add every legal page and banner from outside.
3 — Pages for an imprint and privacy policy can be added by hand, and a simple cookie notice exists, but consent blocking, a data processing agreement and form data handling are not described.
5 — A cookie consent banner, a data processing agreement offered to customers, documented GDPR handling of form entries, and help for imprint and privacy pages (templates, a generator, a named legal-text partner or a help article).
8 — Compliance worked out for EU sites: a consent banner that blocks scripts and embeds until consent and logs it, legal texts kept current by a named provider or a warranty against cease-and-desist letters, fonts and maps served without US transfer, and accessibility features or an accessibility statement.
10 — Compliance as part of the product: consent management with granular categories and records, legal texts maintained for several EU countries, every embed and script assessed for consent, accessibility to WCAG 2.1 AA documented with tooling, and the vendor's share of liability stated in its terms.
The Small-Business Owner
There is a proper data processing agreement built on Article 28(3) of the GDPR under Dutch law, the built-in analytics use no cookies or tracking so no banner is needed for them, and the help centre covers accessibility thoroughly — ARIA labels, contrast checks, tab order, semantic tags, reduced motion. But these pages state that I as the site owner am responsible for GDPR handling, and we found no public information on an imprint or privacy-policy generator, a named legal-text partner, or a consent banner that blocks third-party scripts like maps until consent. 4 7 13 17 18
The Freelance Web Designer
The processor side is solid — a data processing agreement built on Article 28 GDPR with the Dutch supervisory authority named, cookie-free analytics the vendor says need no consent banner, and an accessibility help section covering ARIA labels, contrast ratios, tab order and reduced motion. But for a German client's obligations we found no public information on a consent banner that blocks third-party scripts, an imprint or legal-text generator, or GDPR handling of form entries, and the vendor states that the site owner is responsible for privacy-law compliance of the site. 4 7 13 17 18
The Marketing Lead
A data processing agreement is published with Article 28 terms, 72-hour breach notification and the Dutch data protection authority named, and the built-in analytics use no cookies or tracking technologies so no consent banner is needed for them — though the site owner is explicitly told they remain responsible for GDPR handling of analytics data. Accessibility is documented in depth in the help centre (alt tags, ARIA labels, contrast ratio, tab order, reduced motion). I found no public information on an imprint or privacy-policy generator, a consent banner that blocks third-party scripts, or GDPR handling of form entries. 4 7 13 17 18
The Practice Owner
The processor side is solid — a published data processing agreement under Article 28 with Dutch law, 72-hour breach notification, and analytics that are anonymised, cookie-free and called GDPR-compliant — and the accessibility help is real, covering alt texts, ARIA labels, contrast checking before publishing, tab order and reduced motion, which serves my older patients well. But we found no public information on a cookie consent banner that blocks scripts until consent, nor on any help with an imprint or privacy-policy text, and the captured pages state plainly that the site owner is responsible for GDPR compliance of the analytics data. 4 5 7 13 17
The Data Protection Officer
The Article 28 processing agreement is published with SCC modules and 72-hour breach notification, analytics run without cookies, and the help centre carries articles on contrast ratios, ARIA labels, tab order and reduced motion. However, the analytics page only states that no cookie consent banner is needed for their own analytics, and the SEO pages put GDPR responsibility for analytics data on the site owner. We found no public information on a consent banner that blocks third-party scripts and embeds until consent, or on help with imprint and privacy pages. 4 5 6 13 17 18
The Skeptic
A data processing agreement built on Article 28(3) with Dutch governing law and a named supervisory authority, cookie-free GDPR-compliant analytics marketed as needing no consent banner, opt-in-only third-party CAPTCHA services, and an accessibility help section covering alt tags, ARIA labels, contrast checks, tab order and reduced motion. But the pages state plainly that the site owner is responsible for GDPR compliance, and we found no public information on an imprint or privacy-policy generator, a consent banner that blocks third-party scripts, or a legal-text partner. 4 6 7 13 17 18
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where the sites, the form entries and the visitor data are hosted, and who the subprocessors are (hosting, CDN, email delivery, analytics, payments, AI features). Independently sourced by the sovereignty pipeline; the data subjects here are the owner's own visitors and customers, so the whole chain counts, not only the editor.
0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.
5 — EU hosting available or an EU contracting entity, a data processing agreement offered, but parts of the chain (CDN, email, analytics, AI features, support) run through non-EU providers or the subprocessors are listed without locations.
8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated.
10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, data export and deletion documented, and certifications published with their scope rather than implied.
The Small-Business Owner
The contracting entity is Framer B.V. in Amsterdam with a published Chamber of Commerce number, the data processing agreement is governed by Dutch law with standard contractual clauses and the Dutch data protection authority named, and ISO 27001:2022 and SOC 2 Type 2 are attested. But the security and privacy pages state that all services run in Amazon Web Services facilities in the United States, with additional infrastructure in Europe and Asia-Pacific, and the subprocessor list sits in the Trust Center with no locations given on these pages — my visitors' data would run on US-primary infrastructure. 5 7 8 18
The Freelance Web Designer
The contracting entity is European — Framer B.V. of Amsterdam, named in the data processing agreement under Dutch law — with ISO 27001:2022 and SOC 2 Type 2 stated, a published DPA and sub-processors maintained in the Trust Center. But the captured pages state that all services are hosted in AWS facilities in the United States with CloudFront acceleration, and the sub-processor list with its locations was not among the captured evidence, so the chain for my clients' visitor data runs primarily outside the EU. 5 7 8 18
The Marketing Lead
The contracting entity is Framer B.V. in Amsterdam with a Dutch Chamber of Commerce number, Dutch law and Amsterdam courts govern the data processing agreement, and ISO 27001:2022 plus SOC 2 Type 2 are stated. But the security page says all of Framer's services are hosted in AWS facilities in the United States with additional infrastructure across Europe and Asia-Pacific, and a sub-processor list is said to live in the Trust Center while the captured pages do not show which providers or locations make up the chain — a US-primary chain keeps this mid-table for my visitors' data. 5 7 8 18
The Practice Owner
The contracting entity is Framer B.V. in Amsterdam under Dutch law with the Dutch data protection authority named, a data processing agreement is published, and ISO 27001:2022 and SOC 2 Type 2 are stated. However, the captured pages state that all services are hosted in AWS facilities in the United States with additional infrastructure in Europe and Asia-Pacific, so my patients' data would not sit in Europe; sub-processors are said to be listed in a Trust Center, but their locations are not shown in what I read. 5 6 7 8 18
The Data Protection Officer
The contracting entity is Framer B.V. in Amsterdam under Dutch law with the Dutch data protection authority named, a published processing agreement with standard contractual clauses, and ISO 27001:2022 and SOC 2 Type 2 attested. But the vendor's own security page states all services are hosted in AWS in the United States, and we found no public information on a customer's site or form entries being hosted in a European region. The sub-processor list sits in the Trust Center, with no names or locations of sub-processors shown on the captured pages, so it cannot be filed as it stands. 5 6 7 8 18
The Skeptic
The contracting entity is Framer B.V. in Amsterdam with a Chamber of Commerce number, the data processing agreement is published, ISO 27001:2022 and SOC 2 Type 2 are attested, and transfers ride on the EU-US Data Privacy Framework or standard contractual clauses under Dutch law. But all services are stated to be hosted in AWS facilities in the United States — Europe and Asia-Pacific are described as additional — and the sub-processor list sits in a Trust Center whose locations the captured pages do not show. 5 7 8 18
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real cost over two or three years from public pages alone: the monthly price per plan, the introductory price and how long it lasts, the renewal price after it, setup fees, minimum term and notice, domain and mailbox renewals, transaction fees on sales, and which features (ad removal, extra languages, bookings, more storage) cost extra.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free plan is shown, but what the plans include, what they cost after the first term or how the cost scales is unclear.
5 — Plans are public with prices and their main inclusions, but at least one commonly needed piece (the price after an introductory offer, domain renewal, a mailbox, transaction fees, an add-on) is unpriced or hard to find.
8 — Every plan priced publicly with the introductory price, its duration and the regular price after it, setup fee, minimum term and notice period, domain and add-on prices listed, and VAT treatment stated.
10 — Complete price computability: the cost of a given site over several years derivable from public pages, with every add-on, renewal, transaction and support fee, the cancellation terms and what happens to the site and domain after cancellation published.
The Small-Business Owner
The pricing page documents a free plan, each plan's inclusions (bandwidth, CMS collections, editors, monthly credits, analytics history), monthly billing with sales tax added at checkout, a bandwidth-overage grace of one month and a 14-day refund in the EU, and the terms allow cancelling any time before the renewal date with no notice period. But we found no public information on the monthly price figures for the plans, on what the advanced hosting, A/B testing and localization add-ons cost, or on what the free domain via Hover renews at — I could not pencil out my second year from these pages. 3 6 11
The Freelance Web Designer
The captured pricing page details what each plan includes — bandwidth, CMS collections, editor seats, credits, add-ons — and the terms are public and fair: cancellation any time before renewal with no notice period, a 14-day refund for EU customers, annual plans auto-renewing in twelve-month terms, sales tax added at checkout. But we found no figures for the Basic or Pro plan prices on the captured pages, and no prices for the localization, advanced hosting or A/B testing add-ons or for renewing the free custom domain that comes with yearly plans. 3 6 11
The Marketing Lead
Plan inclusions are public in detail — bandwidth, CMS collections, monthly credits, editors, analytics history, free-plan limits — with monthly billing per selected cycle, sales tax added at checkout, a 14-day refund for EU and Turkey customers, cancellation at any time before renewal with no notice period, and a free custom domain on yearly plans. But the captured pricing page shows no currency price for the Basic or Pro plans (Enterprise is quoted only as "custom"), and the advanced hosting, localization and A/B testing add-ons carry no visible prices, so I cannot compute a two-year cost from public pages. 3 6 11
The Practice Owner
The plan structure is public and unusually detailed: free-plan limits, credits, editors billed per seat, bandwidth, analytics history, add-ons for advanced hosting, A/B testing and localisation, a free domain with any yearly plan, EU and Turkey 14-day refunds, monthly or annual terms with cancellation any time before renewal and no notice period, and a note that sales tax is added at checkout. But we found no public information on the monthly plan prices themselves, nor on introductory versus renewal pricing, add-on prices or domain renewal — so I cannot compute what three years would cost my practice. 3 6 11
The Data Protection Officer
Plan inclusions are public down to bandwidth, CMS collections, credits and editor seats, billing runs monthly by the selected cycle with sales tax added at checkout, cancellation is possible at any time before renewal without notice, and EU buyers get a 14-day refund. We found no public information on the monthly price of the Basic and Pro plans, on introductory versus renewal pricing, or on the price of the add-ons (localization, advanced hosting, A/B testing) and of domain renewal after the free first year via Hover. The only price figures captured are a marketplace component at 'Buy for $12' and 'Custom' for Enterprise. 3 6 11 15
The Skeptic
The captured pricing page details plan inclusions — bandwidth, CMS collections, pages, editor seats, credits — along with billing cycles, automatic renewal, cancellation before the renewal date with no notice period, an EU 14-day refund window, a bandwidth grace month, and a free domain with any yearly plan via Hover. But the only price figures anywhere in the captures are a "$12" marketplace component and "custom" for Enterprise: the monthly prices of Basic and Pro, the add-on prices for advanced hosting, localization and A/B testing, and the domain's renewal price after the free year are not shown, so a two-year cost is not computable from these pages. 3 6 11 15
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined ⚠ unverified | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined | — | uncited Report an error |
| Hosting options | Not determined | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined ⚠ unverified | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about Framer
Is Framer European?
Yes. whats-best.ai classifies Framer as EU-Made.
Where does Framer store data?
Not stated on the vendor’s pages as of 28 Oct 2026.
Does Framer have a free plan?
Yes. Framer has a free plan, per the vendor’s page captured 28 Oct 2026.
What are the best alternatives to Framer?
As of 4 Nov 2026, the panel rates Duda (3.5/5), Wix (3.5/5) and WordPress.com (3.5/5) highest among the other 17 Website Builders products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Hostinger Website Builder (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Framer alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 28 Oct 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Legal entity, Data processing agreement. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 19 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 13 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 6 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 6 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (18)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage www.framer.com Checked 28 Oct 2026 Details →
- 2 Features page www.framer.com Checked 28 Oct 2026 Details →
- 3 Pricing page www.framer.com Checked 28 Oct 2026 Details →
- 4 SEO features page www.framer.com Checked 28 Oct 2026 Details →
- 5 Privacy policy www.framer.com Checked 28 Oct 2026 Details →
- 6 Terms naming the legal entity www.framer.com Checked 28 Oct 2026 Details →
- 7 Data processing agreement (dpa) www.framer.com Checked 28 Oct 2026 Details →
- 8 Security page www.framer.com Checked 28 Oct 2026 Details →
- 9 Editor, templates & design control — found from sitemap www.framer.com Checked 28 Oct 2026 Details →
- 10 Editor, templates & design control — found from sitemap www.framer.com Checked 28 Oct 2026 Details →
- 11 Hosting, domains & portability — found from sitemap www.framer.com Checked 28 Oct 2026 Details →
- 12 Hosting, domains & portability — found from sitemap www.framer.com Checked 28 Oct 2026 Details →
- 13 SEO, analytics & visibility — found from sitemap www.framer.com Checked 28 Oct 2026 Details →
- 14 SEO, analytics & visibility — found from sitemap www.framer.com Checked 28 Oct 2026 Details →
- 15 Forms, bookings & business features — found from sitemap www.framer.com Checked 28 Oct 2026 Details →
- 16 Forms, bookings & business features — found from sitemap www.framer.com Checked 28 Oct 2026 Details →
- 17 Imprint, privacy & cookie compliance — found from sitemap www.framer.com Checked 28 Oct 2026 Details →
- 18 Imprint, privacy & cookie compliance — found from sitemap www.framer.com Checked 28 Oct 2026 Details →