Zum Inhalt springen
EU VETTED

Formbricks

Formulare & Umfragen · Deutschland
Gegründet 2022 · formbricks.com

German open-source experience-management platform (Formbricks GmbH, Kiel) for link, website and in-product surveys; AGPLv3, self-hostable.

Formbricks bietet EU-Hosting in Deutschland, doch ein US-Mutterkonzern oder Unterauftragsverarbeiter hinterlässt ein materielles CLOUD-Act-Risiko. Gelistet unter Formulare & Umfragen.

Bewertungsnotizen

German GmbH (Kiel) shipping an AGPLv3 open-source survey/forms platform with a publicly-downloadable DPA (sub-processors in Annex IV) and SOC 2 Type II, but the managed Formbricks Cloud runs on AWS in Germany for database + email at rest, with Stripe (US), Google Cloud, Sentry, PostHog EU and, since mid-2026, Cloudflare Inc. as a global CDN and reverse proxy alongside it, and US VC (OSS Capital) on the cap table, EU-headquartered but US-VC-funded with material CLOUD Act exposure for the managed cloud; self-hosting the AGPLv3 build on EU infrastructure removes the AWS and US sub-processor exposure entirely.

Befund

CLOUD Act
Eigentümer
Unterauftragsverarbeiter
8 · 6 US

Geprüfte Signale

Jurisdiktion
  • EU-/Angemessenheits-Hosting: Ja
  • EU-/Angemessenheits-Betreiber: Ja
  • Keine US-CLOUD-Act-Exposition: Nein
Transparenz
  • Öffentlicher AVV: Ja
  • Unterauftragsverarbeiter offengelegt: Ja
  • Open-Source-Clients: Ja
  • Zertifizierung durch Dritte: Ja
CLOUD Act je nach Betrieb

Die Exposition hängt davon ab, wie Sie dieses Produkt betreiben.

Gehostetes SaaS (Standard)

Anbieterbetrieben: die unten genannten Unterauftragsverarbeiter gelten.

Selbst gehostet (Open Source)

Auf eigener EU-Infrastruktur betreiben: Sie kontrollieren Hosting und jeden Unterauftragsverarbeiter.

Springen zu

Über Formbricks

Formbricks is a German open-source experience-management platform operated by Formbricks GmbH (Kuhnkestr. 6, 24118 Kiel), founded in 2022 by Johannes Dancker and Matti Nannt. It positions itself as the open-source Qualtrics alternative and covers link surveys, website and in-product (in-app) surveys, and email-embedded feedback forms, with event-triggered targeting, user segmentation, conditional logic, multi-language surveys, file uploads, webhooks, and SDKs. The full core application is licensed under AGPLv3 on GitHub and is fully self-hostable.

For an EU-sovereignty audit the ownership tier is eu_hq_us_funded: Formbricks is a German GmbH but is backed by OSS Capital (a US open-source-focused VC), Flex Capital, and the GitHub Accelerator, with angels including Tom Preston-Werner (GitHub) and Peer Richelsen (Cal.com). The managed Formbricks Cloud (app.formbricks.com) is hosted in Frankfurt, Germany on Amazon Web Services, which handles the database and email at rest. The DPA is publicly downloadable without signup and lists its Annex IV sub-processors: AWS (DE region), PostHog (DE region), Stripe (US), Sentry (DE region), Brevo (EU), Google Cloud (EU, opt-in and stated not to touch respondent data), Plain (UK, customer support), and Cloudflare, Inc., which now sits in front of the whole application as CDN, reverse proxy and DDoS protection; Chatwoot has been dropped. No AI provider, no captcha vendor and no separate file-upload storage provider appears anywhere in the annex, which is unusual in this category. The company holds SOC 2 Type II and states ISO 27001 is in progress. Per the directory's strict CLOUD Act stance (provider parent jurisdiction matters more than data-centre region), AWS at rest plus the US sub-processors plus US-VC ownership make this material CLOUD Act exposure for the managed cloud. Self-hosting the AGPLv3 build on EU-incorporated infrastructure (Hetzner, OVHcloud, Scaleway) removes the AWS and US sub-processor exposure entirely, making the customer the sole data controller.

Pricing: a free Hobby tier (250 responses/month, 1 workspace); Pro at US$74/month for 2,000 responses and 3 workspaces; Scale at US$325/month for 5,000 responses and 5 workspaces. Both paid figures are monthly-billing rates, with annual offered as two months free, and the default cloud region is Germany. Self-hosting is free under AGPLv3. Best fit: privacy-conscious product teams and EU developers replacing Qualtrics or Qualaroo for in-product surveys, or wanting a GDPR-compliant, self-hostable feedback layer. The self-host path is the procurement-grade option.

Unterauftragsverarbeiter-Karte · 8

Quelle
  • AWS US
    Vereinigte Staaten

    Database and email delivery (data storage; Germany)

  • Cloudflare US
    Vereinigte Staaten

    CDN, reverse proxy, DDoS protection and application security (global)

  • Google Cloud US
    Vereinigte Staaten

    Smart functionality (opt-in; does not touch respondent data; EU)

  • PostHog EU US
    Vereinigte Staaten

    Product analytics (anonymized IP and device information; Germany)

  • Sentry US
    Vereinigte Staaten

    Error tracking and diagnostics

  • Stripe US
    Vereinigte Staaten

    Payment processing

  • Brevo EU
    Frankreich

    Marketing/communication and admin notifications

  • Plain non-US
    Vereinigtes Königreich

    Customer support (UK; replaced Chatwoot, removed from Annex IV before 2026-08)

Quelle: veröffentlichte Unterauftragsverarbeiter-Liste des Anbieters, gelesen am 26 Aug 2026.

6 von 8 Unterauftragsverarbeitern sind in US-Eigentum oder haben ihren Sitz in den USA. CLOUD-Act-Risiko anwendbar.

Rahmenwerke & Zertifizierungen

SOC 2
Aktiv
Hinweis · US-Rahmenwerk

Funktionsmatrix

Tabelle 2Funktionen von Formbricks

Integration & Zugriff

REST API Ja
SSO (SAML / OIDC) Ja

Compliance & Governance

Audit log Nein
Self-host / on-prem option Ja

Preise & Tarife

ab 63 €/Monat
Freemium
Preisseite ansehen

Öffentliche Dokumente

  • Auftragsverarbeitungsvertrag (AVV)
    formbricks.com/dpa…
    Öffnen
  • Liste der Unterauftragsverarbeiter
    formbricks.com/dpa…
    Öffnen
  • Nutzungsbedingungen
    formbricks.com/terms…
    Öffnen

Alternativen in dieser Kategorie

  • Findmind
    Schweiz
    EU-ansässig
    Öffentl. AVV: Nein Subprozessoren: Nein Open Source: Nein
  • Formdesk
    Niederlande · 5.42 €/Mt.
    EU-souverän
    Öffentl. AVV: Ja Subprozessoren: Nein Open Source: Nein
  • Formspark
    Belgien · 21 €/Mt.
    EU-gehostet
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Nein
Alle formulare & umfragen-Alternativen ansehen