m

Data Processing Agreements, Storage, and Transfers (EU)

It’s our priority to protect your privacy and handle your data securely. We generally provide services to customers located outside of the United States from our subsidiary in Ireland, SurveyMonkey Europe UC. This subsidiary is regulated under the Irish and European data protection laws and requirements.

Jump to...

 

Data Storage

SurveyMonkey stores European customer data on servers in the United States (US), as outlined in our Privacy Policy. This means you’ve consented to your personal data being transferred onto servers in the US maintained by our US parent company, SurveyMonkey Inc. We're hoping to offer a European data storage solution in the near future.

As a global company, we provide customer support services from our US, European, Australian, and Canadian offices to ensure around-the-clock coverage. Some data may be exported or accessed for legitimate and beneficial purposes to provide support from outside of Europe.

 

EU-US and Swiss-US Privacy Shields

SurveyMonkey is certified under and complies with both the EU-US and Swiss-US Privacy Shield programs (privacyshield.gov), which legalize the collection, use, transfer, and retention of personal data from Europe to the United States.

For more details, review the Privacy Shield section of our Privacy Policy and our Privacy Shield Certification. If you require an addendum to comply with transfer obligations, please fill out this form.

 

Data Processing Agreement

As an alternative to Privacy Shield, SurveyMonkey offers a Data Processing Agreement (DPA), which includes GDPR clauses and Standard Contractual Clauses/Model Clauses for individual customers on paid plans.

Our DPA is available for download after you complete an application—choose the applicable section below. We’ll email the account holder to notify them once the DPA is successfully applied to their account. Please whitelist our IP addresses and domains to make sure you can get the email.

DPA for individual accounts

Our DPA is an agreement between an individual account holder and SurveyMonkey. The account email address indicates the individual account holder.

Complete our application form to review the DPA and apply it to an account.

If multiple people at an organization have their own SurveyMonkey account, each person needs to fill out the application to apply the DPA their respective account.

DPA for teams

Our DPA is an agreement between an account holder and SurveyMonkey. Unless you have an Enterprise account, the account email address indicates the account holder, rather than a company or organization the account holder may work for.

You can list the email addresses of other users in your team to also apply the DPA to those respective accounts, otherwise each account holder needs fill out the application.

Complete our application form to review the DPA and apply it to an account.

DPA and free accounts

At this time our DPA is only applicable to paid plans. That said, you can still use SurveyMonkey since we built the data processing terms required by GDPR into our Terms of Use, which forms your contract with SurveyMonkey.

 

Apply, Wufoo, and TechValidate

Customer data for SurveyMonkey Apply (formerly known as FluidReview) is stored on servers located in Canada. Apply customers should be aware that for certain reasons their data may still be accessed in the US. For example, we provide customer support and billing support from our US offices.

With the exception of Apply, the information provided on this page applies to all other SurveyMonkey products, like Wufoo and TechValidate.

 

European customers can learn about where SurveyMonkey stores customer data, Data Processing Agreements (DPA), and the EU-US Privacy Shield and Swiss-US Privacy Shield.

Get answers