Subprocessors
Last updated: October 2026
These are the services that handle data on our behalf when you use FormVault. The list is written from what the application does today. See our privacy policy for how we use data, and our security page for how it is protected.
| Service | Purpose | Based | Data |
|---|---|---|---|
| Hetzner Online GmbH (servers, Object Storage) | Hosting of the application and database; storage of files uploaded to forms. | Germany | Everything FormVault stores: account details, forms, encrypted submissions, IP address and user agent recorded with submissions, audit log entries, and uploaded files. |
| FjordID (self-hosted Keycloak) | Sign-in and identity for FormVault accounts. | Self-hosted by the same operator as FormVault | User identifier, email address, display name. Passwords are held by FjordID, not by FormVault. |
| Umami (self-hosted, analytics.fjordid.eu) | Cookieless, aggregate page-view analytics on formvault.eu. | Self-hosted by the same operator as FormVault | Page views of the marketing site and app. No cookies. |
| Brevo (SMTP email relay) | Sending email: new-submission notifications, digests, account follow-ups and contact-form messages. | France | Recipient email address, form name, submission ID and time. Contact-form emails carry the message the sender wrote. Submission answers are not included in notification emails. |
| Mistral AI (api.mistral.ai) | AI features, used only when a signed-in user triggers them: form generation, field-label suggestions and summarising open-text answers. | France | The prompt or field label typed by the user. For summaries: the form name and the text, select and email answers of up to 50 submissions (each answer cut to 400 characters), sent decrypted from our server. This can include respondents' personal data. |
Agreements with these providers
We have not yet verified the data processing agreement status of Brevo and Mistral AI, and we do not claim that one is in place. This matters most for Mistral AI, which receives respondents' answers when a user asks for a summary. If you do not want respondent answers sent to an AI provider, do not use the summarise feature.
Destinations you configure
A form owner can set a webhook URL, a Slack incoming webhook or a notification email address. Submission data sent there goes to a destination you chose, which is not a FormVault subprocessor.
Not used
No payment provider is live. Form pages set no cookies and load no third-party trackers.
Questions
Email support@formvault.eu.