Is the Prepopulate app an external service?

Is it privacy (ie HIPAA, or GDPR) compliant? Just wondering if the data is run on Jotform servers or it is an external entity that created an app and the data is stored or passing through external servers?

This is our official app created by our developers and it's hosted into JotForm servers. Just FYI, this app doesn't store or save the entered data. They are only used for generation purposes. You can also write sample data and edit it manually after you copied the generated URL.