Data Processing Agreements, Storage, and Transfers (EU)

It's our priority to protect your privacy and handle your data securely. We generally provide services to customers located outside of the United States (US) and Canada from our subsidiary in Ireland, SurveyMonkey Europe UC. This subsidiary is regulated under the Irish and European data protection laws and requirements.

Jump to...


Data Storage

As a global company, SurveyMonkey has data centers in the US, Ireland, and Canada. Most European customer data lives on servers in the US, as outlined in our Privacy Policy and white paper. We rely on inter-company agreements including standard contractual clauses to transfer your personal data to our servers in the US maintained by our US parent company, SurveyMonkey Inc.

We provide customer support services from our US, European, Australian, and Canadian offices to ensure around-the-clock coverage. Some data may be exported or accessed for legitimate and beneficial purposes to provide support from outside of Europe.


EU-US and Swiss-US Privacy Shields

SurveyMonkey was certified under and complies with both the EU-US and Swiss-US Privacy Shield programs, which legalized the collection, use, transfer, and retention of personal data from Europe to the US. This method for transfer of personal data has been invalidated by the European courts and so we now direct our customers to our Data Processing Agreements (DPA) with SCCs section below.


Data Processing Agreement

SurveyMonkey offers a Data Processing Agreement (DPA), which includes the EU approved Standard Contractual Clauses/Model Clauses referred to in the GDPR for individual customers on paid plans.

Our DPA is available for download after you complete an application—choose the applicable section below. We’ll email the account holder to notify them once the DPA is successfully applied to their account. Please whitelist our IP addresses and domains to make sure you can get the email.

DPA for individual accounts

Our DPA is an agreement between an individual account holder and SurveyMonkey. The account email address indicates the individual account holder.

Complete our application form to review the DPA and apply it to an account.

If multiple people at an organization have their own SurveyMonkey account, each person needs to fill out the application to apply the DPA to their respective account.

DPA for teams

Our DPA is an agreement between an account holder and SurveyMonkey. Unless you have an Enterprise account, the account email address indicates the account holder, rather than a company or organization the account holder may work for.

You can list the email addresses of other users in your team to also apply the DPA to those respective accounts, otherwise each account holder needs to fill out the application.

Complete our application form to review the DPA and apply it to an account.


Apply, Wufoo, and TechValidate

Customer data for SurveyMonkey Apply (formerly known as FluidReview) is stored on servers located in Canada or the US. Apply customers should be aware that for certain reasons their data may still be accessed in the US. For example, we provide customer support and billing support from our US offices.

With the exception of Apply, the information provided on this page applies to all other SurveyMonkey products, like Wufoo and TechValidate.


European customers can learn about where SurveyMonkey stores customer data, Data Processing Agreements (DPA), and the EU-US Privacy Shield and Swiss-US Privacy Shield.

Get answers