# Webflow — Website Builders

Webflow by Webflow, Inc. holds a panel rating of 2/5 from 6 AI judges (category median 2.5/5), as of 2026-10-29. Provenance: Rest of world; sovereignty: not determined.

- Vendor: Webflow, Inc. (https://webflow.com)
- Category: [Website Builders](https://whats-best.ai/software/website-builder.md)
- Provenance (editorial classification): Rest of world
- Canonical page: https://whats-best.ai/software/website-builder/webflow
- Alternatives: https://whats-best.ai/software/website-builder/webflow/alternatives ([markdown](https://whats-best.ai/software/website-builder/webflow/alternatives.md))
- Data as of: 2026-11-04 · evaluated 2026-10-29 · oldest source captured 2026-10-28

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Webflow, Inc.
- Headquarters: Not stated on the vendor’s pages as of 28 Oct 2026
- Data hosting: Not stated on the vendor’s pages as of 28 Oct 2026
- Free plan: Yes, per the vendor’s own page [S1]

## The panel's verdict

Webflow is a visual website builder from Webflow, Inc., a Delaware corporation in San Francisco. Editor and design scores highest, at 6-7: judges cite CMS localisation with independent per-locale publishing and locale subdirectories, a cloneable Made in Webflow gallery, code-component libraries bundled via the command line, GSAP animations, and an AI agent that customises components, styles, CMS content and pages. SEO and marketing, at 4-6, splits by buyer: five of six judges scored 6 for the documented answer-engine analytics — visibility scores, citation rates and bot traffic across ChatGPT, Claude, Gemini and Perplexity — while the small-business owner scored 4, finding no help for sitemaps, redirects or local search. Sovereignty is weakest at 0-1: the contracting entity sits in the USA, and we found no public information on hosting locations or subprocessors. Hosting and portability scores 3-4, documented as a webflow.io subdomain plus allowed domains with exports limited to analytics data; forms and business sits at 4, legal compliance at 3-4 with consent endpoints covering only Analyze and Optimize tracking. The only price statement is "Start for free".

**Speaks for it:**
- CMS localisation publishes each locale independently, with locale subdirectories and localizable SEO metadata
- Answer-engine analytics are documented in depth: visibility scores, citation rates and bot traffic across ChatGPT, Claude, Gemini and Perplexity, readable through a read-only API
- Form submissions are stored centrally and manageable through a documented Data API — listable, filterable by form, paginated, updatable and deletable one by one
- Made in Webflow sites can be filtered as cloneable and then customised via MCP 2.0, with an AI agent adjusting components, styles, CMS content and pages
- Analytics and experiment data export nightly as typed tables to 20+ destinations including Snowflake, Google BigQuery and Amazon Redshift

**Held against it:**
- Sovereignty scores of 0-1: the provider is a Delaware corporation, and we found no public information on where sites, form entries or visitor data are hosted, or on subprocessors
- Hosting is documented only as a webflow.io subdomain plus allowed domains, each with and without www; we found no public information on SSL, backups, storage limits or uptime
- The documented nightly export carries only Analyze and Optimize data — we found no public information on exporting a site's own pages, content or media
- Consent endpoints cover only Analyze and Optimize tracking, the sample cookie modal may not fully comply with all privacy laws, and GDPR and CCPA compliance is placed on the customer
- We found no public information on bookings, member areas, payments, spam protection or email notifications around forms

**Best for:**
- You need a designer-grade multilingual site with independent publishing per locale and cloneable community templates as a starting point
- Your marketing team wants to track how ChatGPT, Claude, Gemini and Perplexity mention and cite your domain, with visibility and citation scores through an API
- You want form submissions held in a system your developers can list, update and delete through a documented API to feed a CRM

**Avoid if:**
- You must keep visitor or patient data within the EU — the contracting entity is a Delaware corporation and we found no public information on data residency or subprocessors
- You need a documented exit path — the only documented export is analytics data to warehouses, and we found no public information on exporting pages, content or media
- You need cookie consent managed for the whole site out of the box — the documented consent endpoints cover only Analyze and Optimize tracking
- Your business depends on bookings, member areas or payments — we found no public information on these, only on the form-submissions API

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Small-Business Owner | The Freelance Web Designer | The Marketing Lead | The Practice Owner | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Editor, templates & design control | 3.5/5 | 3.5/5 | 3/5 | 3/5 | 3.5/5 | 3.5/5 |
| Hosting, domains & portability | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 | 2/5 | 1.5/5 |
| SEO, analytics & visibility | 2/5 | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 |
| Forms, bookings & business features | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Imprint, privacy & cookie compliance | 1.5/5 | 1.5/5 | 2/5 | 1.5/5 | 2/5 | 1.5/5 |
| European sovereignty | 0.5/5 | 0.5/5 | 0/5 | 0.5/5 | 0.5/5 | n/r |
| Pricing transparency | n/r | n/r | n/r | n/r | n/r | n/r |
| **Weighted verdict** | **2/5** | **2.5/5** | **2/5** | **2/5** | **2/5** | **2/5** |

### The judges

- **The Small-Business Owner** (v1.0): Runs a joinery with six staff and builds the company website on a Sunday afternoon. Wants a template that looks like a craftsman and not like a start-up, to be found when someone nearby searches for a carpenter, an enquiry form that lands in the inbox, the imprint and cookie banner handled without a lawyer, and a price that is still clear in the second year.
- **The Freelance Web Designer** (v1.0): Builds about twenty sites a year for doctors, restaurants and consultants, and looks after them afterwards. Wants real control over layout, mobile breakpoints and type, reusable sections across client sites, a client login that cannot break the design, backups that restore in one click, and a way to take the site and its content elsewhere if the client or the tool changes.
- **The Marketing Lead** (v1.0): Owns the website of a forty-person engineering firm and is measured on enquiries, not on page views. Wants landing pages built without waiting for the agency, clean URLs, redirects and structured data, analytics that work without a consent wall in front of every visit, and form entries that reach the CRM instead of a shared mailbox.
- **The Practice Owner** (v1.0): Runs a physiotherapy practice with four therapists and a waiting list. Wants patients to book and cancel appointments online, a contact form that does not send health details around in plain email, a site an older patient can read and use, a cookie banner that holds up if the regulator asks, and the data kept in Europe.
- **The Data Protection Officer** (v1.0): Serves as external data protection officer for thirty small companies and reviews their websites once a year. Wants a consent banner that blocks scripts and embeds until the visitor agrees, fonts and maps that do not leave for the US on page load, a data processing agreement and subprocessor list that can be filed, form entries with a retention period, and hosting that is named rather than implied.
- **The Skeptic** (v1.0): Has seen "your website for 1 euro" renew at thirty, templates that only exist inside the builder, an export that turns out to be the blog posts alone, and a domain that costs a fee to move. Reads "GDPR compliant" next to a cookie banner that loads trackers before anyone clicks, and a subprocessor list that stops at the CDN — and asks what leaving would cost.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Example disclaimer: no [S10]
- Responsibility: GDPR · CCPA · yes [S10]

**Data**
- Execution retention: 90 · 120 · 90 [S6]
- Historical data included: no [S4]
- Schema by subscription: Exported data depends on subscription: Analyze customers get page views and elements clicked, Optimize customers get variations viewed, both get all data [S4]

**Integrations**
- API localized create: Create Items with allCmsLocales or cmsLocaleIds selector [S2]
- API localized read: List Items accepts comma-separated cmsLocaleId list; omits = primary locale [S2]
- API localized update: Update Item accepts itemId plus cmsLocaleId with translated fieldData [S2]
- API mcp: yes [S1]
- Auth: bearer [S7]
- Endpoint list: bot_traffic · bot_traffic_by_page · prompts · prompt_executions · visibility_score · visibility_breakdown · citation_rate · top_cited_domains · cited_paths · page_citation_share · competitor_citations · citations [S6]
- Error codes: 400 · 401 · 403 · 404 · 429 · 500 [S7]
- Existing cmp: OneTrust · TrustArc [S10]
- Forms API version: Data API · v2 [S9]
- Forms auth bearer: bearer_token [S9]
- Forms list submissions by site: formElementId · List Form Submissions by Site · yes [S9]
- Forms list submissions endpoint: /v2/sites/:site_id/forms/:form_id/submissions · GET · List form submissions for a given form ID within a specific site [S9]
- Forms offset parameter: yes · offset [S9]
- Forms pagination limit max: 100 · limit [S9]
- Forms required scope: forms:read [S9]
- Forms submission delete available: yes · DELETE /form submission [S9]
- Forms submission update available: yes · PATCH /form submission [S9]
- Mcp server available: MCP Server · yes [S9]
- Pagination cursors: single response · cursor · limit and offset · cursor [S6]
- Rate limits: 429 · per-minute Data API limit based on site plan · 1 [S6]

**Pricing**
- Free tier: yes [S1]
- Requirements: Analyze and/or Optimize add-on · eligible Enterprise plan [S4]

**Product**
- Aeo API readonly: yes [S6]
- Aeo entitlement required: sites:read · yes · yes [S6]
- AI agents: yes [S1]
- Analyze data exported: Analyze data export includes page view and element click data [S4]
- Answer engines tracked: chat-gpt · gemini · claude · perplexity [S6]
- API allow deny tracking: wf.allowUserTracking() · wf.denyUserTracking() [S10]
- API get user tracking choice: allow/deny choice · wf.getUserTrackingChoice() [S10]
- Bot filters: agent · indexer · training · multiple [S6]
- Bot tracking: yes [S6]
- Bot traffic not visitors: bot requests · yes [S6]
- Citation rate definition: share of citing responses that cited your domains, 0 to 1 [S6]
- Cli deprecated commands: Version 1 commands still work but emit deprecation warnings and will be removed in a future version [S5]
- Cli install command: npm install -g @webflow/webflow-cli@latest [S5]
- Cli nodejs minimum: 22.13.0 [S5]
- Cli renamed commands: webflow devlink import · webflow library share · webflow devlink bundle · webflow library bundle · webflow log · webflow library log · webflow cloud init · webflow cloud create [S5]
- Cloneable filter: Gallery can be filtered to show cloneable sites only [S11]
- Cms item limit: 100 [S2]
- Cms localization: CMS localization with locale-specific item variants managed via Data API [S2]
- Comments API available: Comments · yes [S9]
- Consent API endpoints: get consent status · allow user tracking · deny user tracking [S10]
- Consent marketplace apps: DataGrail · Finsweet · yes [S10]
- Consent scope: Analyze · Optimize [S10]
- Custom consent solution: yes [S10]
- Data exports description: Data Exports sends Webflow Analyze and Optimize data to a customer data warehouse such as Snowflake, Google BigQuery, or Amazon Redshift [S4]
- Designer API banner example: Designer API Playground · yes [S10]
- Destination count: OLAP data warehouses · OLTP databases · object storage · 20 [S4]
- Devlink bundle: webflow devlink bundle bundles a Code Component library locally without sharing it to Webflow [S5]
- Domains definition: yes · yes [S6]
- Export format: typed tables [S4]
- Export schedule: nightly · 24 [S4]
- Filter limits: 50 · 50 · 4 [S6]
- Form submission description: Get information about a given form submissio. [S8]
- Form submission endpoint deprecated: GET Form Submission · yes [S8]
- Gsap animation: yes · yes [S10]
- Locale identifiers: Get Site endpoint returns locales object with primary and secondary locales, each with id, cmsLocaleId, tag, subdirectory [S2]
- Locale publishing: yes [S2]
- Localization prerequisite: Localization must be enabled in Site settings within the Designer before API use [S2]
- Made in webflow gallery: Community showcase of accessibility-themed websites built in Webflow, with filtering for cloneable sites [S11]
- Mcp cloning: Webflow MCP 2.0 lets users clone Made in Webflow sites and customize components, styles, CMS content, and pages with an AI agent [S11]
- Optimize data exported: Optimize data export includes variation viewed data [S4]
- Organization info required: yes [S6]
- Prompt schedule: ChatGPT · Claude · Gemini · Perplexity · daily [S6]
- Site tracking prereq: yes [S10]
- Static content localization: Static page localization via Pages API including SEO metadata [S2]
- Supported destinations: Snowflake · Google BigQuery · Amazon Redshift · Databricks · PostgreSQL · MySQL · Amazon S3 · Google Cloud Storage [S4]
- Time window limits: 100 [S6]
- Timeseries granularity: day · week · Sunday · yes [S6]
- Visibility answer engines: chat-gpt · gemini · claude · perplexity [S7]
- Visibility endpoint entitlement: yes · yes [S7]
- Visibility max range: 100 [S7]
- Visibility org name requirement: yes [S7]
- Visibility required scope: sites:read [S7]
- Visibility score definition: share of responses mentioning organization or alias, 0 to 1 [S6]
- Visibility score endpoint: GET /v2/sites/:site_id/aeo/reports/visibility returns share of answer engine responses that mention your organization [S7]
- Visibility timeseries: day · week [S7]
- Visibility topic prompt filters: topicIds · promptIds · List Prompts · 50 [S7]
- Webflow cloud init: webflow cloud init initializes a Webflow Cloud app from a template [S5]

## Questions

### Is Webflow European?

No. whats-best.ai classifies Webflow as Rest of world.

### Where does Webflow store data?

Not stated on the vendor’s pages as of 28 Oct 2026.

### Does Webflow have a free plan?

Yes. Webflow has a free plan, per [the vendor’s page captured 28 Oct 2026](https://whats-best.ai/evidence/12021).

### What are the best alternatives to Webflow?

As of 4 Nov 2026, the panel rates [Duda (3.5/5)](https://whats-best.ai/software/website-builder/duda), [Wix (3.5/5)](https://whats-best.ai/software/website-builder/wix) and [WordPress.com (3.5/5)](https://whats-best.ai/software/website-builder/wordpress-com) highest among the other 17 Website Builders products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Framer](https://whats-best.ai/software/website-builder/framer) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Webflow alternatives](https://whats-best.ai/software/website-builder/webflow/alternatives).

## Head-to-head

- [Webflow vs Wix](https://whats-best.ai/compare/webflow-vs-wix.md)

## What this page leaves out

- 17 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 10 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://webflow.com/ (checked 2026-10-28)
- [S2] Editor, templates & design control — found from sitemap: https://developers.webflow.com/data/docs/working-with-the-cms/localization (checked 2026-10-28)
- [S3] Editor, templates & design control — found from sitemap: https://developers.webflow.com/designer/reference/user-changes-cms-page (checked 2026-10-28)
- [S4] Hosting, domains & portability — found from sitemap: https://developers.webflow.com/browser/data-exports (checked 2026-10-28)
- [S5] Hosting, domains & portability — found from sitemap: https://developers.webflow.com/cli/migration (checked 2026-10-28)
- [S6] SEO, analytics & visibility — found from sitemap: https://developers.webflow.com/data/docs/working-with-aeo-analytics (checked 2026-10-28)
- [S7] SEO, analytics & visibility — found from sitemap: https://developers.webflow.com/data/reference/aeo-analytics/get-visibility-score (checked 2026-10-28)
- [S8] Forms, bookings & business features — found from sitemap: https://developers.webflow.com/data/reference/forms/form-submissions/get-submission (checked 2026-10-28)
- [S9] Forms, bookings & business features — found from sitemap: https://developers.webflow.com/data/reference/forms/form-submissions/list-submissions (checked 2026-10-28)
- [S10] Imprint, privacy & cookie compliance — found from sitemap: https://developers.webflow.com/browser/reference/consent-management (checked 2026-10-28)
- [S11] Imprint, privacy & cookie compliance — found from sitemap: https://webflow.com/made-in-webflow/accessibility (checked 2026-10-28)

---

Cite as: whats-best.ai, "Webflow — Website Builders", AI panel analysis, as of 2026-11-04. https://whats-best.ai/software/website-builder/webflow

Corrections: https://whats-best.ai/correct/1129?target=page