GDPR & privacy compliance guides
Practical articles on GDPR compliance, encrypted form builders, and EU data sovereignty — written for European businesses and their developers.
Is Google Forms GDPR Compliant? The Real Answer
It depends on your account: Workspace offers a DPA and EU data regions, free accounts don't. What to check, what to do, and when an EU tool fits better.
Read article →GDPR form builder: 5 things to check before you sign up
Not every form builder that claims GDPR compliance actually delivers it. Here's a practical checklist for evaluating any form tool before processing personal data.
Read article →Is Typeform GDPR Compliant in 2026? Data Residency, DPA & Tracker Analysis
Typeform is partially GDPR compliant — but only on Business and Enterprise plans with EU data residency enabled. 2026 breakdown: what the Typeform DPA covers, US infrastructure as the default, third-party analytics scripts on the form player, and when Typeform is (and isn't) an acceptable choice for EU data.
Read article →Is JotForm GDPR compliant? 2026 Analysis: EU Data Residency & DPA
JotForm offers a DPA and optional EU data residency — but neither is the default. 2026 breakdown: which plans include EU hosting, what JotForm's DPA covers, third-party trackers on the form player, and when JotForm is and isn't acceptable for GDPR.
Read article →Is Microsoft Forms GDPR compliant? Data Residency & EU Data Boundary Explained
Microsoft Forms is used by millions of EU organisations, but its data residency guarantees are more limited than Microsoft's marketing suggests. We examine the EU Data Boundary, official DPA terms, and what EU businesses really need to know.
Read article →Is SurveyMonkey GDPR compliant?
SurveyMonkey is one of the world's most popular survey tools. But for EU organisations collecting personal data, does it meet GDPR requirements? We examine data residency, DPA terms, and key risks.
Read article →Is Wufoo GDPR or HIPAA Compliant in 2026? No — Here's Why
Wufoo is not GDPR compliant (no DPA on standard plans, no EU data residency) and not HIPAA compliant (no BAA available on any plan). 2026 breakdown of every compliance gap, what the SurveyMonkey acquisition means for your data, and what EU and US healthcare organisations should use instead.
Read article →Is Cognito Forms GDPR compliant?
Cognito Forms is popular with nonprofits, schools, and small businesses — but for EU organisations collecting personal data, does it meet GDPR requirements? We examine data residency, DPA status, and compliance risks.
Read article →Is Paperform GDPR compliant?
Paperform is popular with consultants and agencies — but for EU organisations collecting personal data, does it meet GDPR requirements? We examine data residency, DPA terms, and key risks.
Read article →DSGVO-konformer Produktkonfigurator: Worauf B2B-Unternehmen achten müssen
Ein Produktkonfigurator sammelt Kundendaten, Spezifikationen und oft auch sensible Geschäftsinformationen. So bauen Sie einen Produktkonfigurator, der DSGVO-konform, EU-gehostet und verschlüsselt ist.
Read article →Is Tally GDPR Compliant in 2026? DPA, EU Data Residency & Real Risks
Is Tally GDPR compliant? The honest answer: conditionally, with caveats. 2026 breakdown: what Tally's DPA actually covers, the EU data residency gap, US sub-processors, and when EU organisations should use a stricter alternative.
Read article →Is Gravity Forms GDPR or HIPAA compliant? 2026 Analysis
Gravity Forms is the most widely used WordPress form plugin in Europe — but GDPR and HIPAA compliance depend on far more than the plugin itself. We examine hosting, DPA, BAA availability, encryption, and what EU WordPress sites need to know.
Read article →Is HubSpot Forms GDPR compliant?
HubSpot is used by thousands of European businesses for lead capture and contact forms — but its US-based data storage defaults, embedded tracking pixel, and manual DSAR workflow create real GDPR exposure. We examine HubSpot's EU data residency option, DPA, cookie consent gaps, and what EU organisations need to know.
Read article →