About GDPR Compliance
The GDPR is a regulation in EU law on data protection and privacy for all individuals within the European Union (EU) and the European Economic Area (EEA). The regulation came into effect on May 25, 2018, and imposes strict rules on organizations that collect, store, and process personal data, with the aim of protecting the privacy and rights of individuals.
Importance of GDPR Compliance
GDPR sets the rules for how personal data should be collected, stored, and used across the EU. It protects user rights and holds businesses accountable — making it a key part of any privacy-first platform.

Protects the privacy of users
GDPR helps to ensure that individuals have control over their personal data and are aware of how it is being collected, processed, and stored.

Builds trust with users
By being GDPR compliant, we demonstrate our commitment to protecting the personal data of our users, which helps to build trust with them.

Avoid Penalties
Non-compliance with GDPR can result in significant penalties, including fines of up to €20 million or 4% of annual global turnover, whichever is greater.
MakeForms & GDPR Compliance
At MakeForms, we take GDPR compliance seriously, and we are committed to protecting our users’ personal data. Here are the key aspects of our GDPR compliance:

Data Storage
Our servers are hosted in the EU to ensure that all the data we collect is stored within the EU. Additionally, all our data subprocessors, including OVH, AWS, and MongoDB, are GDPR-compliant and use EU-based servers to store data.

GDPR Representative
We have appointed an EU-based GDPR representative to ensure compliance with GDPR regulations and to act as a point of contact for our users.

GDPR Assessment
We have completed a thorough GDPR assessment to ensure compliance with all GDPR requirements. Our users can request the assessment report by dropping an email to support@Makeforms.io
Data Protection Addendum (DPA)
We offer a Data Protection Addendum (DPA) to our users who need to establish GDPR compliance for their businesses.Our DPA is a legally binding agreement that outlines the specific measures we have taken to protect our users’ personal data and ensure compliance with GDPR regulations. It also includes provisions for data processing, data retention, and data security.
By signing our DPA, our users can establish that they are using a GDPR compliant form builder tool, which can be showcased to their auditors and customers as proof of their commitment to data protection.
If you need a DPA for your business, please contact us at support@makeforms.io, and we would be happy to provide you with more information and assistance.
MakeForms is compliant with
With MakeForms, be assured that you are not just data residency compliant. But also, compliant with the most stringent compliance frameworks
HIPAA Compliance
MakeForms handles sensitive health data securely and meets US healthcare requirements.
ISO 27001 : 2013
Follow international cloud security best practices for safer form data management.
GDPR UK Compliant
Follow UK data privacy rules with full control over where and how form data is stored.
Start Building
GDPR Compliant Online Forms
Create powerful forms with logic, branching, alerts, and more.
No credit card required. Just start building.