No public evidenceJotform and GDPR
CertReports found no public GDPR evidence for Jotform as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 28 Jun 2018
- Expires or valid through
- 3 Jun 2027
- Scope
- When you use Jotform, we collect information relating to you and your use of our services from a variety of sources. These are listed in the privacy policy. Jotform treats your form questions and responses as information that is private to you, unless you have made your form questions and responses available via a public link. JotForm Inc. knows that, in many cases, you want to keep your form questions and responses (which we collectively refer to as “form data”) private. Unless you decide to share your form questions and/or responses with the public, such as by making the form questions and responses available via a public link, JotForm Inc. does not use your form data other than as described in this privacy policy, or unless we have your consent. We do not sell or make available your form data to third parties without your permission.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Jotform Inc.: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 99e8da7c86 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Jotform GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Form builders and surveys category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No Form builders and surveys vendor has GDPR evidence in the index yet.