Vendor profile
Jotform: where is customer data stored and processed?
Jotform stores customer data primarily on Google Cloud in Iowa, USA, with hourly replication to AWS in Virginia, USA, for customers outside EU/EEA. Customers who enable the EU option get storage and backup in Frankfurt, Germany, but the vendor does not confirm that processing stays there, and the processing location in Germany is not confirmed. Data processing agreement is signed but not read in full, and it says data is processed in the USA and sometimes elsewhere, including the UK and Turkey, unconfirmed. Support staff in the USA can see data when customers share it. Sub-processors such as OpenAI, Deepgram, ElevenLabs and Twilio are listed without location, and identity, notifications, AI processing and telemetry have no stated location.
Checked 12 October 2026 · based on the vendor's own public documents
See the map and sources
Where data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|
| Storage | Germany | –
Only for customers in other regions: USA |
|---|
| Processing | Germany | USA, United Kingdom, Turkey
Only for customers in other regions: USA |
|---|
| Backup | Germany | –
Only for customers in other regions: USA |
|---|
| Support | – | –
Only for customers in other regions: USA |
|---|
Ownership and agreements
| Owner | JOTFORM LTD (United Kingdom) |
|---|
| Headquarters | USA |
|---|
| Data processing agreement | Exists, but is not public |
|---|
| Certifications | SOC 2, PCI DSS |
|---|
Sub-processors (7)
| Name | Country | Purpose |
|---|
| Amazon Web Services | – | Data storage (IaaS/PaaS) |
| Deepgram | – | AI voice technology |
| ElevenLabs | – | AI voice technology |
| Google LLC / Google Cloud EMEA Limited / Google Australia Pty Ltd / Google Cloud | – | Data storage, AI, Google Workspace, Google Analytics |
| OpenAI | – | AI (artificial intelligence) |
| Twilio | – | AI-based customer engagement |
Sources