Website Builders
Webflow
Rest of world Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Webflow, Inc. · webflow.com
Compare with Wix → Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Webflow at a glance
- Vendor
- Webflow, Inc.
- Headquarters
- Not stated on the vendor’s pages as of 28 Oct 2026
- Data hosting
- Not stated on the vendor’s pages as of 28 Oct 2026
- Free plan
- Yes, per the vendor’s own page source, captured 28 Oct 2026
- Panel verdict
- The AI panel rates Webflow 2/5, the mean of 6 judges. Webflow is a visual website builder from Webflow, Inc., a Delaware corporation in San Francisco. how scores are made
- As of
- Vendor pages captured 28 Oct 2026; evaluated by the panel 29 Oct 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Webflow is a visual website builder from Webflow, Inc., a Delaware corporation in San Francisco. Editor and design scores highest, at 6-7: judges cite CMS localisation with independent per-locale publishing and locale subdirectories, a cloneable Made in Webflow gallery, code-component libraries bundled via the command line, GSAP animations, and an AI agent that customises components, styles, CMS content and pages. SEO and marketing, at 4-6, splits by buyer: five of six judges scored 6 for the documented answer-engine analytics — visibility scores, citation rates and bot traffic across ChatGPT, Claude, Gemini and Perplexity — while the small-business owner scored 4, finding no help for sitemaps, redirects or local search. Sovereignty is weakest at 0-1: the contracting entity sits in the USA, and we found no public information on hosting locations or subprocessors. Hosting and portability scores 3-4, documented as a webflow.io subdomain plus allowed domains with exports limited to analytics data; forms and business sits at 4, legal compliance at 3-4 with consent endpoints covering only Analyze and Optimize tracking. The only price statement is "Start for free".
Speaks for it
- CMS localisation publishes each locale independently, with locale subdirectories and localizable SEO metadata
- Answer-engine analytics are documented in depth: visibility scores, citation rates and bot traffic across ChatGPT, Claude, Gemini and Perplexity, readable through a read-only API
- Form submissions are stored centrally and manageable through a documented Data API — listable, filterable by form, paginated, updatable and deletable one by one
- Made in Webflow sites can be filtered as cloneable and then customised via MCP 2.0, with an AI agent adjusting components, styles, CMS content and pages
- Analytics and experiment data export nightly as typed tables to 20+ destinations including Snowflake, Google BigQuery and Amazon Redshift
Held against it
- Sovereignty scores of 0-1: the provider is a Delaware corporation, and we found no public information on where sites, form entries or visitor data are hosted, or on subprocessors
- Hosting is documented only as a webflow.io subdomain plus allowed domains, each with and without www; we found no public information on SSL, backups, storage limits or uptime
- The documented nightly export carries only Analyze and Optimize data — we found no public information on exporting a site's own pages, content or media
- Consent endpoints cover only Analyze and Optimize tracking, the sample cookie modal may not fully comply with all privacy laws, and GDPR and CCPA compliance is placed on the customer
- We found no public information on bookings, member areas, payments, spam protection or email notifications around forms
Best for
- You need a designer-grade multilingual site with independent publishing per locale and cloneable community templates as a starting point
- Your marketing team wants to track how ChatGPT, Claude, Gemini and Perplexity mention and cite your domain, with visibility and citation scores through an API
- You want form submissions held in a system your developers can list, update and delete through a documented API to feed a CRM
Avoid if
- You must keep visitor or patient data within the EU — the contracting entity is a Delaware corporation and we found no public information on data residency or subprocessors
- You need a documented exit path — the only documented export is analytics data to warehouses, and we found no public information on exporting pages, content or media
- You need cookie consent managed for the whole site out of the box — the documented consent endpoints cover only Analyze and Optimize tracking
- Your business depends on bookings, member areas or payments — we found no public information on these, only on the form-submissions API
The scores
| Criterion | Panel median |
|---|---|
| Editor, templates & design control | 3.5 of 5 |
| Hosting, domains & portability | 1.5 of 5 |
| SEO, analytics & visibility | 3 of 5 |
| Forms, bookings & business features | 2 of 5 |
| Imprint, privacy & cookie compliance | 1.5 of 5 |
| European sovereignty | 0.5 of 5 |
Editor, templates & design control
Show reasoningHide reasoning
How this is scored
How a site gets built and how far the owner can shape it: the editor (drag and drop, sections, AI drafts), the template range, responsive and mobile editing, fonts and brand styles, multilingual pages, custom code, and roles for collaborators or clients.
0 — Not a website editor; the product hosts files or code that are built elsewhere.
3 — An editor with a small set of templates and fixed layouts, where colours and texts change but structure, mobile view and languages are not described.
5 — A visual editor with a template gallery for several industries, layouts that adapt to mobile, brand colours and fonts, a blog, and the option to add pages in a second language or custom code snippets.
8 — Fine design control documented: free layout or section editing, separate mobile and breakpoint editing, reusable components or global styles, built-in multilingual sites with translated URLs, user roles for collaborators or clients, and site versions or history that can be restored.
10 — Design work at a professional level without leaving the tool: a design system with variables and components, interactions and animations, a CMS with custom collections, staging or branching before publishing, client handover with restricted editing, and the editor documented in depth.
The Small-Business Owner
There is a gallery of community-built sites I could clone and then restyle, with components, styles, CMS content and pages all changeable and AI assistance documented. Multilingual is genuinely worked out, with independent publishing per locale and locale subdirectories. Nothing on the captured pages describes mobile or breakpoint editing, user roles for collaborators, or a version history to restore. 11 2 5 10
The Freelance Web Designer
Real design machinery is documented: CMS collections with locale-specific variants that publish independently per language with their own subdirectories, a gallery filterable to cloneable sites that I can clone and customize with an AI agent, component libraries bundled through the CLI, and GSAP animations switched on in site settings. Separate mobile or breakpoint editing, client roles, and version history with restore are not described on the captured pages, which for handover work matters as much as the rest. 1 2 5 10 11
The Marketing Lead
The developer pages document a genuine design environment: a Designer where localization is switched on, a CMS with per-locale publishing and locale subdirectories, a community template gallery whose sites can be cloned and restyled with an AI agent, and GSAP animation support. That multilingual depth is professional grade, but we found no public information on mobile or breakpoint editing, collaborator roles, or version history, so design control beyond localization and templates stays unproven. 2 10 11
The Practice Owner
The captured pages show a visual Designer, a Made in Webflow gallery whose sites can be cloned and then customised in their components, styles, CMS content and pages, and a genuinely deep localisation system with independent per-locale publishing and language subdirectories. Custom code in the page header and GSAP animations are supported. We found no public information on mobile or breakpoint editing, collaborator roles, or restorable versions, so it sits in the middle band. 2 5 10 11
The Data Protection Officer
A designer product is documented through a CMS with independent per-locale publishing states and subdirectory URLs, cloneable Made in Webflow galleries, Code Component libraries bundled via the command line, GSAP animations enabled in site settings, and an AI agent that customises components, styles, CMS content and pages. The captured pages do not describe mobile or breakpoint editing, collaborator roles, or site versions and history that can be restored. 2 11 5 10
The Skeptic
The developer pages show serious design tooling: an end-to-end localization system with per-locale publishing, subdirectory URLs and localized SEO metadata, CMS collections, reusable code-component libraries bundled and shared through the CLI, GSAP animations and an AI agent that clones and customizes community sites, with a comments API for collaboration and custom code snippets in the site header. I found no public information on mobile or breakpoint editing, user roles for clients, or version history and restore. 2 5 10 11
Hosting, domains & portability
Show reasoningHide reasoning
How this is scored
What runs the site once it is built: included hosting, custom domains and domain registration, SSL, email mailboxes, speed (CDN, image optimisation), backups and restore, availability commitments — and whether pages, content and media can be exported when the owner moves on.
0 — No hosting; the product produces a design or files and the owner finds a host.
3 — Hosting on a subdomain with a custom domain on paid plans, but SSL, backups, storage limits and export are not described.
5 — Hosting included with a custom domain (or one included for a first year), free SSL, stated storage or bandwidth, a CDN or speed optimisation, automatic backups or a restore function, and an export of at least blog posts or content.
8 — Hosting described in depth: data-centre locations named, a stated uptime commitment, versioned backups with self-service restore, email mailboxes on the own domain, performance figures or Core Web Vitals addressed, and a documented export of pages, content and media.
10 — Hosting the owner can rely on and leave: an uptime SLA with credits, the hosting region selectable, DDoS and security measures named, a complete site export (code or standard formats) documented step by step, and domains transferable without fees or lock-in.
The Small-Business Owner
Sites run on a webflow.io subdomain plus my own allowed domains, and there is a free way to start. Nightly exports are described, but they carry analytics data to warehouses like Snowflake or BigQuery — I found no public information on SSL, backups, storage limits, or an export of the site's own pages, content and media. 6 1 4
The Freelance Web Designer
Sites run on a webflow.io subdomain plus custom allowed domains, and a CLI exists for bundling component libraries, but the captured pages describe no SSL, backups, restore, storage limits or uptime commitment. The documented export is analytics data sent nightly to a data warehouse rather than pages, CMS content or media, so I found no public information on taking a client's site itself elsewhere. 4 5 6
The Marketing Lead
Sites are hosted on a webflow.io subdomain with allowed custom domains, and a developer CLI plus nightly exports to warehouses like Snowflake exist — but those exports carry analytics and optimization data, not pages, content or media. We found no public information on SSL, backups, storage limits, uptime commitments or a full site export, which leaves hosting documented only at the subdomain-plus-custom-domain level. 4 5 6
The Practice Owner
Sites run on a webflow.io subdomain plus allowed custom domains, each with and without www — that is all the captured pages establish about hosting and domains. We found no public information on SSL, backups or restore, storage limits, uptime commitments or an export of the site's own pages and media; the documented nightly export covers only analytics and experiment data into external data warehouses. 4 6
The Data Protection Officer
Hosting appears in the documentation only as allowed domains plus a webflow.io subdomain, each with and without www; the captured pages do not describe SSL, backups, storage limits, uptime or data-centre locations. What is documented for export is Analyze and Optimize analytics, sent nightly as typed tables to warehouses such as Snowflake or BigQuery, and component libraries bundled locally through the command line — an export of the site's pages and media is not described. 6 4 5
The Skeptic
The only hosting facts are that sites run on a webflow.io subdomain plus allowed custom domains, with and without www. The captured pages are silent on SSL, backups, storage limits, uptime and data-centre location, and the documented export is analytics data as typed tables to a data warehouse on a nightly schedule — not the site's pages, content or media. Anyone planning to leave is planning blind. 4 6
SEO, analytics & visibility
Show reasoningHide reasoning
How this is scored
How the site is found and measured: page titles and descriptions, clean URLs and redirects, sitemaps and indexing, structured data, local SEO, page speed for search, built-in or connectable analytics, newsletter or social sharing, and guidance for the owner who is not an SEO.
0 — No search settings at all; pages cannot be given titles or descriptions.
3 — Page titles and descriptions can be edited, but sitemaps, redirects, analytics and indexing control are not described.
5 — Editable titles, descriptions and URLs, an automatic sitemap, 301 redirects, social sharing previews, built-in visitor statistics or a documented connection to an analytics tool, and SEO guidance or a checklist inside the product.
8 — SEO documented in depth: structured data, canonical and noindex control, robots.txt editing, image alt texts and compression, local business listings or a Google Business connection, multilingual SEO with hreflang, and privacy-friendly analytics without third-party cookies.
10 — Visibility as a strength: full technical SEO control including server-side rendering and speed figures, AI search or answer-engine readiness addressed, search data shown inside the editor, marketing tools (newsletter, campaigns, A/B tests) built in, and every setting explained in the help centre.
The Small-Business Owner
The analytics side is documented in real depth: page views and element clicks in Analyze, and a whole answer-engine API showing how ChatGPT, Claude, Gemini and Perplexity mention and cite my business. What a local carpenter actually needs is thinner — the pages give no sitemap, redirects or local-search help, and only hint that SEO metadata can be localized per language. 6 7 4 2
The Freelance Web Designer
Answer-engine analytics are documented in depth: bot traffic from OpenAI and Anthropic crawlers, visibility and citation scores across ChatGPT, Claude, Gemini and Perplexity readable through an API, plus built-in page-view data with export. SEO metadata can be localized per locale, but the captured pages say nothing about sitemaps, redirects, robots control or local listings, which caps this below the deeper technical-SEO level. 2 4 6 7
The Marketing Lead
This is the strongest area in the captured material: answer-engine analytics tracking how ChatGPT, Gemini, Claude and Perplexity mention and cite your domains, with visibility scores, competitor citations and daily prompt runs, plus page-view and element-click analytics exported nightly to a data warehouse. Localized SEO metadata for secondary locales is documented as well. I found no public information on page titles and descriptions, sitemaps, redirects or structured data, and those basics are what I need proven before moving a firm's domain. 2 4 6 7
The Practice Owner
Visibility is documented unusually deeply on the AI side: a built-in Analyze product reports page views and element clicks, and an AEO Analytics API measures bot traffic from crawlers such as OpenAI's or Anthropic's and how answer engines — ChatGPT, Claude, Gemini, Perplexity — mention and cite the site, with daily prompt runs and visibility and citation scores. SEO metadata can be localised per language. We found no public information on sitemaps, redirects or indexing control, so the classic search basics stay unproven. 2 6 7
The Data Protection Officer
Analytics are built in and deep: page views and element clicks flow through a documented API with nightly warehouse exports, and the answer-engine analytics report how crawlers from OpenAI or Anthropic visit the site and how ChatGPT, Claude, Gemini and Perplexity mention and cite it, down to visibility score, citation rate and bot categories. Static-page localisation updates SEO metadata per locale. We found no public information on sitemaps, redirects, structured data or indexing control. 6 7 2 4
The Skeptic
Answer-engine visibility is documented in real depth — a read-only analytics API for visibility scores, citation rates and bot traffic across ChatGPT, Claude, Gemini and Perplexity, with crawlers counted separately from visitors, and SEO metadata localizable per locale. The fundamentals a European owner asks about first — sitemaps, redirects, structured data, indexing control — are not described in the captured pages, and visitor statistics surface only as the Analyze add-on. 2 6 7
Forms, bookings & business features
Show reasoningHide reasoning
How this is scored
What the site does for the business beyond showing pages: contact and custom forms with spam protection and notifications, where form entries are stored, appointment bookings, member areas, events, integrations with CRM or calendar, payments and a small shop as an add-on — judged as features of a website, not as a shop system.
0 — No forms and no interactive features; the site shows pages only.
3 — A contact form that sends an email, with spam protection, storage of entries and further business features not described.
5 — Custom forms with several field types, spam protection and email notifications, entries stored or exportable, and at least one further business feature (bookings, member area, events or a small shop) described.
8 — Business features documented in depth: forms with conditional fields, file uploads and confirmation emails, appointment booking with calendar sync, member areas or gated pages, payments, integrations with named CRM, newsletter or automation tools, and an app or extension marketplace.
10 — The site runs a small business: forms, bookings, payments, invoices or memberships work together with consent and data retention settings per form, an API or webhooks for form data, and a documented integration ecosystem — while the shop stays one feature among several.
The Small-Business Owner
Form submissions are clearly stored and manageable: listable, filterable, paginated, updatable and deletable through a documented API, and a marketplace of third-party apps exists, shown for consent tools. I found no public information on spam protection, email notifications into my inbox, bookings, payments or CRM connections. 9 8 10
The Freelance Web Designer
Form submissions are stored and fully reachable through the Data API — listable per site or per form element, paginated, updatable and deletable — and a third-party app marketplace exists, with consent apps as one documented example. Spam protection, email notifications, bookings, member areas and payments are not described on the captured pages, so I cannot judge whether a client could take reservations or payments here. 8 9 10
The Marketing Lead
Form submissions live on the vendor's side and are fully reachable through an API — listable by site and by form with filtering and pagination, updatable and deletable under bearer auth — which is precisely the pipe I want for feeding a CRM instead of a shared mailbox. The captured pages stop at that interface, though: we found no public information on field types, spam protection, notifications, bookings, member areas, payments or named CRM integrations. 8 9
The Practice Owner
Form submissions are stored centrally and reachable through a documented API — listing by site or by form, paginated, with update and delete per submission — which at least means patient entries sit in a system I can manage and purge rather than only in an inbox. We found no public information on spam protection, email notifications or field types, and nothing on appointment booking, member areas, payments or a shop — and booking is what my practice actually needs. 8 9
The Data Protection Officer
Form submissions are stored and exposed through a documented Data API — listable, filterable by form, paginated, updatable and deletable one by one, which gives me the per-entry deletion handle I ask for. The captured pages do not describe field types, spam protection, notifications, or bookings, member areas and shop features. 9 8
The Skeptic
Form submissions are stored, listable, filterable by form, updatable and deletable through the Data API — real control over entries, and a marketplace with consent apps is named. But the captured pages never describe the forms themselves — field types, spam protection, notifications — nor bookings, member areas, events or payments. 8 9 10
Imprint, privacy & cookie compliance
Show reasoningHide reasoning
How this is scored
What the product does so that the owner's site is legal in Germany and the EU: an imprint page, privacy-policy and legal-text generators or partners, a cookie consent banner that blocks scripts until consent, GDPR-compliant forms, a data processing agreement for visitor data, fonts and media served without third-country transfers, and accessibility under the European Accessibility Act.
0 — Nothing for the site's legal obligations; the owner is left to add every legal page and banner from outside.
3 — Pages for an imprint and privacy policy can be added by hand, and a simple cookie notice exists, but consent blocking, a data processing agreement and form data handling are not described.
5 — A cookie consent banner, a data processing agreement offered to customers, documented GDPR handling of form entries, and help for imprint and privacy pages (templates, a generator, a named legal-text partner or a help article).
8 — Compliance worked out for EU sites: a consent banner that blocks scripts and embeds until consent and logs it, legal texts kept current by a named provider or a warranty against cease-and-desist letters, fonts and maps served without US transfer, and accessibility features or an accessibility statement.
10 — Compliance as part of the product: consent management with granular categories and records, legal texts maintained for several EU countries, every embed and script assessed for consent, accessibility to WCAG 2.1 AA documented with tooling, and the vendor's share of liability stated in its terms.
The Small-Business Owner
The consent tooling that is documented covers only Webflow's own Analyze and Optimize tracking — for everything else I am told to set up my own banner or bring a third-party platform like OneTrust, TrustArc, DataGrail or Finsweet. The vendor's own example consent modal is flagged as possibly not complying with all privacy laws, with GDPR and CCPA responsibility placed on me. I found no public information on imprint or privacy-policy help, a data processing agreement, or accessibility tooling beyond a gallery of accessibility-themed community sites. 10 11
The Freelance Web Designer
Consent tooling is present but do-it-yourself: tracking consent APIs that apply only to Analyze and Optimize, wiring for OneTrust or TrustArc, marketplace apps with setup guides, and a worked cookie-modal example whose own disclaimer says it may not fully comply with all privacy laws, with the vendor stating it is the customer's responsibility to determine which requirements apply. I found no public information on imprint or privacy-policy help, a data processing agreement, or consent blocking with logging. 10 11
The Marketing Lead
Consent help exists but is scoped narrowly: the documented consent endpoints apply only to the vendor's own Analyze and Optimize tracking, and the guidance says to set up your own banner or platform otherwise, by way of marketplace apps like DataGrail and Finsweet or integrations with OneTrust and TrustArc. The vendor's own example carries a warning that it may not fully comply with privacy laws, and GDPR and CCPA compliance responsibility is placed on the customer. We found no public information on imprint or privacy-policy support, a data processing agreement, or consent that blocks scripts until given. 10 11
The Practice Owner
The consent documentation names GDPR and CCPA but states it is my responsibility to determine which requirements apply, and the sample cookie consent modal ships with a warning that it may not fully comply with privacy laws. The consent APIs cover only the vendor's own Analyze and Optimize tracking — without those, the guidance says you must set up your own banner — though marketplace consent apps such as DataGrail and Finsweet with setup guides are a documented route. We found no public information on imprint or privacy-policy help, a data processing agreement, or consent logging, and a gallery of accessibility-themed community sites is not an accessibility statement. 10 11
The Data Protection Officer
Consent tooling is documented: APIs to read a visitor's consent state and to allow or deny tracking, marketplace apps such as DataGrail and Finsweet, a code-snippet route for OneTrust or TrustArc, and example code for an animated cookie modal. The vendor itself writes that the endpoints apply only to Analyze and Optimize tracking, that customers otherwise must set up their own banner, that the example may not fully comply with all privacy laws, and that determining GDPR and CCPA requirements is the customer's responsibility. We found no public information on a data processing agreement, imprint or privacy-policy help, fonts and maps served without US transfer, or an accessibility statement beyond a community gallery of accessibility-themed sites. 10 11
The Skeptic
Consent management applies only to the vendor's own Analyze and Optimize tracking; everyone else is told to "set up your own consent management banner or platform", and the sample cookie modal ships with a disclaimer that it "may not fully comply with all privacy laws". GDPR is named, then declared the customer's responsibility, with OneTrust, TrustArc, DataGrail and Finsweet offered as the practical route. I found no public information on imprint or privacy-policy help, a data processing agreement, or consent blocking of scripts, and the only accessibility fact is a community gallery of accessibility-themed sites. 10 11
European sovereignty
panel opinion
n/r
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where the sites, the form entries and the visitor data are hosted, and who the subprocessors are (hosting, CDN, email delivery, analytics, payments, AI features). Independently sourced by the sovereignty pipeline; the data subjects here are the owner's own visitors and customers, so the whole chain counts, not only the editor.
0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.
5 — EU hosting available or an EU contracting entity, a data processing agreement offered, but parts of the chain (CDN, email, analytics, AI features, support) run through non-EU providers or the subprocessors are listed without locations.
8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated.
10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, data export and deletion documented, and certifications published with their scope rather than implied.
The Small-Business Owner
The provider is named as Webflow, Inc., a Delaware corporation in San Francisco, so the contracting side sits outside the EU. I found no public information on where sites, form entries or visitor data are hosted, on the subprocessors in the chain, or on a data processing agreement, and the consent documentation leaves GDPR compliance to me as the site owner. 1 10
The Freelance Web Designer
The provider named in the terms is Webflow, Inc., a Delaware corporation in San Francisco, so the contracting entity sits outside the EU. The captured pages describe no hosting location for sites or form data, no subprocessor list and no data processing agreement, and the consent documentation puts the determination of privacy-law requirements on the customer. 4 10
The Marketing Lead
The provider is named as Webflow, Inc., a Delaware corporation based in San Francisco, so the contracting entity sits outside the EU. Hosting locations, the subprocessor chain and any data processing agreement covering the owner's visitor data are not documented in the captured pages. 1
The Practice Owner
The provider named in the terms is Webflow, Inc., a Delaware corporation in San Francisco, so the contracting entity is American, and we found no public information pointing to European hosting, ownership or data residency for sites, form entries or visitor data. The captured pages name no subprocessors, and we found no public information on a data processing agreement. For a practice that must keep patient data in Europe, there is nothing here to rely on. 1 10
The Data Protection Officer
The provider is documented as Webflow, Inc., a Delaware corporation in San Francisco, and the documented data chain runs through US providers: tracked prompts are run daily through ChatGPT, Claude, Gemini and Perplexity, and analytics exports go to destinations like Snowflake, Google BigQuery, Amazon Redshift and Amazon S3. We found no public information on where sites and form entries are hosted, on a subprocessor list, or on a data processing agreement. 1 6 4
The Skeptic not rated — no public information
I found no public information on where sites and visitor data are hosted, on the contracting entity's jurisdiction, or on a single subprocessor behind hosting, delivery, analytics or the AI features. The captured pages are developer documentation and the vendor homepage; none names a data location or a processing chain. 1 4 6 10
Pricing transparency
not rated — the vendor publishes no price
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real cost over two or three years from public pages alone: the monthly price per plan, the introductory price and how long it lasts, the renewal price after it, setup fees, minimum term and notice, domain and mailbox renewals, transaction fees on sales, and which features (ad removal, extra languages, bookings, more storage) cost extra.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free plan is shown, but what the plans include, what they cost after the first term or how the cost scales is unclear.
5 — Plans are public with prices and their main inclusions, but at least one commonly needed piece (the price after an introductory offer, domain renewal, a mailbox, transaction fees, an add-on) is unpriced or hard to find.
8 — Every plan priced publicly with the introductory price, its duration and the regular price after it, setup fee, minimum term and notice period, domain and add-on prices listed, and VAT treatment stated.
10 — Complete price computability: the cost of a given site over several years derivable from public pages, with every add-on, renewal, transaction and support fee, the cancellation terms and what happens to the site and domain after cancellation published.
The Small-Business Owner
A free start is shown, and the pages reveal the product is priced in pieces — site plans, an eligible Enterprise plan, and Analyze or Optimize add-ons. I found no public information on the figures themselves: monthly prices, renewals, minimum terms or add-on costs, so I could not begin to compute my second-year cost. 1 4 6
The Freelance Web Designer
The homepage shows only "Start for free", and the developer pages reveal that data exports require the Analyze and/or Optimize add-on on an eligible Enterprise plan, so add-ons and tiers gate features. No plan prices, renewal or notice terms, domain or mailbox costs, or VAT treatment appear on the captured pages, so I could not compute a client's two-year cost. 1 4
The Marketing Lead
The only pricing signal captured is a "Start for free" invitation, alongside requirements naming an eligible Enterprise plan and Analyze and Optimize add-ons. No plan prices, minimum terms, renewal prices or add-on costs are documented, so a two- or three-year cost for a given site cannot be computed from public pages. 1 4
The Practice Owner
The only price statement we found is "Start for free" on the homepage; no plan prices, inclusions, term lengths or renewal costs appear in the captured pages. The data-export documentation does reveal the commercial structure — an Analyze and/or Optimize add-on on top of an eligible Enterprise plan — but with no figures attached, so I cannot compute what a site would cost my practice over two years. 1 4
The Data Protection Officer
The only pricing statement captured is 'Start for free'; we found no public information on plan prices, term lengths, renewals or add-on costs. Access to analytics and data export is gated on an 'Analyze and/or Optimize add-on' and 'an eligible Enterprise plan', so even the feature set a buyer needs is unpriced on the captured pages. 1 4
The Skeptic
"Start for free" is the only price statement on the captured homepage; the developer pages speak in gates instead — data exports require "the Analyze and/or Optimize add-on and an eligible Enterprise plan" — with no figures for any plan, add-on, renewal or term. A buyer cannot price the first year, let alone three, from these pages. 1 4
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined | — | uncited Report an error |
| Hosting options | Not determined | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about Webflow
Is Webflow European?
No. whats-best.ai classifies Webflow as Rest of world.
Where does Webflow store data?
Not stated on the vendor’s pages as of 28 Oct 2026.
Does Webflow have a free plan?
Yes. Webflow has a free plan, per the vendor’s page captured 28 Oct 2026.
What are the best alternatives to Webflow?
As of 4 Nov 2026, the panel rates Duda (3.5/5), Wix (3.5/5) and WordPress.com (3.5/5) highest among the other 17 Website Builders products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Framer (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Webflow alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 28 Oct 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 17 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 10 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (11)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage webflow.com Checked 28 Oct 2026 Details →
- 2 Editor, templates & design control — found from sitemap developers.webflow.com Checked 28 Oct 2026 Details →
- 3 Editor, templates & design control — found from sitemap developers.webflow.com Checked 28 Oct 2026 Details →
- 4 Hosting, domains & portability — found from sitemap developers.webflow.com Checked 28 Oct 2026 Details →
- 5 Hosting, domains & portability — found from sitemap developers.webflow.com Checked 28 Oct 2026 Details →
- 6 SEO, analytics & visibility — found from sitemap developers.webflow.com Checked 28 Oct 2026 Details →
- 7 SEO, analytics & visibility — found from sitemap developers.webflow.com Checked 28 Oct 2026 Details →
- 8 Forms, bookings & business features — found from sitemap developers.webflow.com Checked 28 Oct 2026 Details →
- 9 Forms, bookings & business features — found from sitemap developers.webflow.com Checked 28 Oct 2026 Details →
- 10 Imprint, privacy & cookie compliance — found from sitemap developers.webflow.com Checked 28 Oct 2026 Details →
- 11 Imprint, privacy & cookie compliance — found from sitemap webflow.com Checked 28 Oct 2026 Details →