Data Processing Agreements, Storage, and Transfers (EU)

It's our priority to protect your privacy and handle your data securely. We generally provide services to customers located outside of the United States (US) and Canada from our subsidiary in Ireland, Momentive Europe UC. This subsidiary is regulated under the Irish and European data protection laws and requirements.

TIP! For questions and concerns regarding data transfers to the United States, check out the FAQs in our Legal Center.

Jump to...


Data Storage

As a global company, Momentive has data centers in the US, Ireland, and Canada. Most European customer data lives on servers in the US, as outlined in our Privacy Notice and white paper. We rely on inter-company agreements including standard contractual clauses to transfer your personal data to our servers in the US maintained by our US parent company, Momentive Inc.

We provide customer support services from our US, European, Australian, and Canadian offices to ensure around-the-clock coverage. Some data may be exported or accessed for legitimate and beneficial purposes to provide support from outside of Europe.


EU-US and Swiss-US Privacy Shields

Momentive was certified under and complies with both the EU-US and Swiss-US Privacy Shield programs, which legalized the collection, use, transfer, and retention of personal data from Europe to the US. This method for transfer of personal data has been invalidated by the European courts and so we now direct our customers to our Data Processing Agreements (DPA) with SCCs section below.


Data Processing Agreement

SurveyMonkey offers a Data Processing Agreement (DPA), which includes the EU approved Standard Contractual Clauses/Model Clauses referred to in the GDPR for all customers.

Our DPA is available for download after you complete an application—choose the applicable section below. We’ll email the account holder to notify them once the DPA is successfully applied to their account. Please add our IP addresses and domains to your allow list to make sure you can get the email.

DPA for individual accounts

Our DPA is an agreement between an individual account holder and Momentive. The account email address indicates the individual account holder.

Complete our application form to review the DPA and apply it to an account.

If multiple people at an organization have their own SurveyMonkey account, each person needs to fill out the application to apply the DPA to their respective account.

DPA for teams

Our DPA is an agreement between an account holder and Momentive. Unless you have an Enterprise account, the account email address indicates the account holder, rather than a company or organization the account holder may work for.

You can list the email addresses of other users in your team to also apply the DPA to those respective accounts, otherwise each account holder needs to fill out the application.

Complete our application form to review the DPA and apply it to an account.


Apply, Wufoo, and TechValidate

Customer data for SurveyMonkey Apply (formerly known as FluidReview) is stored on servers located in Canada or the US. Apply customers should be aware that for certain reasons their data may still be accessed in the US. For example, we provide customer support and billing support from our US offices.

With the exception of Apply, the information provided on this page applies to all other Momentive products, like Wufoo and TechValidate.


European customers can learn about where SurveyMonkey stores customer data, Data Processing Agreements (DPA), and the EU-US Privacy Shield and Swiss-US Privacy Shield.

Get answers