GDPR Compliance

  • BenHope
    Asked on February 14, 2018 at 5:35 AM

    Hi, I see there are a number of replies Re: GDPR compliance suggesting that JotForm is not currently GDPR compliant, despite JotForm having the option to host forms in the EU.

    I have built sites for several companies incorporating JotForm. Some of these collect sensitive personal data via forms. I am now being asked to assist them in finding an alternative form provider so that they can remain compliant, which ideally I don't want to do given the flexibility/features of your platform.

    Please could you provide me with more information about why JotForm would currently fail to meet GDPR requirements (given that we can choose to host forms in the EU, I assume it is some other aspect of the regulations) and whether there are plans in place to address whatever this issue is?

    If you you are only able to direct me to your security updates page could you please let me know if there is any other way to escalate this query?

    Many thanks

    Ben

  • Richie JotForm Support
    Replied on February 14, 2018 at 9:24 AM

    I will forward your request to our second level. We will let you know as soon as we have any updates.

  • Emre SVP, Programs
    Replied on February 16, 2018 at 11:09 AM

    Hello Ben,

    Firstly, I want to say that JotForm is committed to being fully GDPR compliant by the May 25, 2018 deadline.

    Since GDPR enhances existing privacy protections, it implies new process and technical requirements to existing EU data privacy regulations. Before the deadline arrives, we plan to complete our final checks and announce our GDPR compliance to our users.




  • tina JotForm Developer
    Replied on April 13, 2018 at 4:38 AM

    Great news! JotForm is GDPR compliant now. You can find more details here: https://www.jotform.com/gdpr/

    Also, we offer data processing addendums (DPAs) for our customers that operate in the EU. If you would like to sign a DPA, Feel free to send your request: https://www.jotform.com/gdpr/dpa/