Data

Typeform and the GDPR: AI training, data location and DPA

Business: Doesn't train on your data. EU hosting only on higher plans · DPA in the terms.

Vendor: Typeform (TYPEFORM SL)Sales, marketing and supportChecked on How we check

Verdict

Is Typeform GDPR compliant?

Business

Business

Doesn't train on your data

EU hosting only on higher plans · DPA in the terms

Price: €84 / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Typeform train on your data?

Trains on your data by default?

Checked

Doesn't train on your data.

No. Typeform says none of its customers' data is used to train any model, whichever model powers the feature

Source: help.typeform.comQuestion 'Is the data used to train models?'Checked on

Location

Where does Typeform store your data?

Where data is stored by default

Checked

United States: data is hosted on AWS with the main servers in Virginia

Source: help.typeform.comQuestion 'Where do you store my data and how is it protected?'Checked on

EU hosting on this plan

Checked

EU hosting only on higher plans.

Not on Business: EU data hosting is for new customers on Enterprise or Growth Custom

Source: help.typeform.comQuestion 'Where do you store my data and how is it protected?'Second source: help.typeform.comChecked on

Contract

Does Typeform sign a data processing agreement?

Data processing agreement (DPA)

Checked

DPA in the terms.

Yes, without signing: Typeform's DPA (updated 20 Jul 2026) and Section 4 of its privacy policy apply to all customers; a custom signed DPA is only for Enterprise or Growth Custom

Source: help.typeform.comWhole articleSecond source: typeform.comChecked on

Processors

Who else handles Typeform data?

Sub-processors (companies that handle the data for them)

Checked

15 listed.

Public. Response data goes only to AWS (US, or EU for EU-hosted customers) unless optional features are used; 15 more for optional features such as AI (OpenAI, AWS, Google Cloud), integrations and enrichment; 27 distinct entries across all lists

Source: help.typeform.comTables 'Sub-processors that process response data', '…optional services' and '…process customer data'Checked on

EU–US Data Privacy Framework

Checked

EU or Swiss vendor.

Not applicable to the contracting company (EU-based vendor, TYPEFORM SL, Barcelona); no listing found for search term 'Typeform'

Source: typeform.comOpening paragraph naming TYPEFORM SLSecond source: dataprivacyframework.govChecked on

Retention

How long does Typeform keep your data?

How long data is kept

Checked

Kept as long as needed for the purposes collected; deleting the account deletes its personal data and the customer chooses deletion or return; backups kept 15 days

Source: help.typeform.comSection 'Data retention'Second source: typeform.comChecked on

Security

Which certifications and admin controls does Typeform have?

Security certifications

Checked

SOC 2 Type II; ISO/IEC 27001:2022, 27017:2015, 27018:2019 and 42001; audited against HIPAA

Source: help.typeform.comCertifications sectionChecked on

Admin controls for AI

Checked

Partly: admins can turn off AI-Powered Insights in Admin settings; no account-wide switch for Typeform's other AI features was found

Source: help.typeform.comParagraph on Smart Insights ('turn AI-Powered Insights off in your Admin settings')Checked on

Price

What does Typeform cost?

Price, as shown in Germany

Checked

€84 / mo.

EUR 84 per month billed yearly for the plan (5 users, 10,000 responses a month); VAT basis not stated

Source: typeform.comPlan card 'Business' with 'Yearly' selectedChecked on

Alternatives

Typeform alternatives that don't train on your data

Other sales, marketing and support tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • Pipedrive

    Growth · €39 / user / mo

    Says it doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✓

  • Attio

    Pro · €74 / user / mo

    Doesn't train on your dataEU hosting not documented · DPA on request

    ✓?✓✓✓

  • Dynamics 365 Sales

    Professional · €56.30 / user / mo

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓?✓

  • folk

    Standard · €22 / user / mo

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✕

  • GetResponse Email Marketing

    Marketer · €44.28 / mo

    Doesn't train on your dataEU hosting not documented · DPA on request

    ✓?✓✓✓

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices