Zum Inhalt springen
EU VETTED

Survicate

Formulare & Umfragen · Polen
Gegründet 2013 · survicate.com

Warsaw-based Polish in-product survey and NPS platform on AWS-EU, ISO 27001 + SOC 2 + HIPAA-aligned.

Survicate bietet EU-Hosting in Irland, doch ein US-Mutterkonzern oder Unterauftragsverarbeiter hinterlässt ein materielles CLOUD-Act-Risiko. Gelistet unter Formulare & Umfragen.

Bewertungsnotizen

Warsaw-based Polish survey platform (Survicate S.A., KRS 0001021023, founded 2013 by Kamil Rejent, Polish-investor cap table including PFR Ventures) with strong ISO 27001 + SOC 2 + PCI-DSS + HIPAA attestation, TLS 1.2 / AES-256, SSO and SAML, and a publicly readable DPA at /data-processing-agreement/, but customer data is hosted on Amazon Web Services in the EU region, which is a US-owned hyperscaler at rest, and the published provider list routes survey response text to OpenAI LLC (US) for AI summarisation and to Anthropic PBC (US) for an AI assistant, alongside a further ~15 US recipients; per the strict CLOUD Act stance this is material CLOUD Act exposure despite the EU-owned ownership and enterprise-grade certifications. The DPA itself names no sub-processors and points to a list that is only published inside the Privacy Policy PDF.

Befund

CLOUD Act
Eigentümer
Unterauftragsverarbeiter
— nicht offengelegt

Geprüfte Signale

Jurisdiktion
  • EU-/Angemessenheits-Hosting: Ja
  • EU-/Angemessenheits-Betreiber: Ja
  • Keine US-CLOUD-Act-Exposition: Nein
Transparenz
  • Öffentlicher AVV: Ja
  • Unterauftragsverarbeiter offengelegt: Ja
  • Open-Source-Clients: Nein
  • Zertifizierung durch Dritte: Ja
Springen zu

Über Survicate

Survicate is a Warsaw-based Polish in-product feedback and survey platform founded in 2013 by Kamil Rejent. The product covers in-product surveys, NPS / CSAT / CES tracking, website pop-ups, email and link surveys, and a Research Hub for centralised insights, and is used by more than 2,000 digital businesses including Spotify, Automattic, Vercel, and Amplitude. The company has raised approximately US$1M across several investors including Airbridge Equity Partners, ARIA Fund, Di Volio, Newberg Investments, and PFR Ventures (the Polish state-owned venture arm), keeping the cap table firmly Polish and EU-aligned.

The security posture is unusually rich for a vendor at this size: ISO/IEC 27001, SOC 2, PCI-DSS, HIPAA, and GDPR alignment are all attested on the public security page; TLS 1.2 in transit and AES-256 at rest; single sign-on with workspace-level or full-workspace SAML; role-based access controls; workspace isolation; 24/7 monitoring; continuous third-party penetration testing; and an explicit commitment that customer data never trains AI models. That last commitment is narrower than it reads: the sub-processor table inside the privacy policy names OpenAI LLC (USA) for AI-assisted search and text-response summarisation, explicitly covering the text respondents write in surveys, and Anthropic PBC (USA) for an AI text assistant, so response content is processed by US AI vendors even though it is not used to train them. The other red flag for a strict-CLOUD-Act EU buyer is the underlying infrastructure: customer survey data is hosted on Amazon Web Services in the EU region, a US-owned hyperscaler that, under our parent-jurisdiction stance (Schrems II / Microsoft Ireland v US), counts as material CLOUD Act exposure regardless of EU placement. This is material CLOUD Act exposure despite the otherwise enterprise-grade certifications and tooling.

Pricing is quoted in USD and positioned mid-market: Growth starts at US$114/month billed annually, with Pro at US$349/month and Enterprise at US$569/month above it; the sales-only entry tier is no longer shown on the pricing page. A 10-day free trial requires no credit card and allows up to 25 responses plus 100 Research Hub data points. Best fit: mid-market product teams in DACH, France, Poland, and the Nordics that want EU-incorporated ownership, full ISO 27001 + SOC 2 attestation, SSO, and audit logging, and can accept AWS-EU as the underlying hosting layer. Buyers who must avoid US-owned hyperscalers entirely should look at Formdesk (NL), or run LimeSurvey or Formbricks self-hosted on EU infrastructure, all listed in this category.

Unterauftragsverarbeiter-Karte · nicht offengelegt

Anbieter veröffentlicht keine Liste der Unterauftragsverarbeiter. Schrems-II-Konformität und CLOUD-Act-Risiko lassen sich ohne sie nicht unabhängig prüfen.

Rahmenwerke & Zertifizierungen

ISO/IEC 27001
Aktiv
SOC 2
Aktiv
Hinweis · US-Rahmenwerk

Funktionsmatrix

Tabelle 1Funktionen von Survicate

Integration & Zugriff

REST API Ja
SSO (SAML / OIDC) Ja

Compliance & Governance

Audit log Ja
Self-host / on-prem option Nein

Preise & Tarife

ab 98 €/Monat
Kostenpflichtig · jährliche Abrechnung
Preisseite ansehen

Öffentliche Dokumente

  • Auftragsverarbeitungsvertrag (AVV)
    survicate.com/data-processing-agreement…
    Öffnen
  • Liste der Unterauftragsverarbeiter
    assets.survicate.com/docs…
    Öffnen
  • Nutzungsbedingungen
    survicate.com/terms…
    Öffnen

Alternativen in dieser Kategorie

  • Findmind
    Schweiz
    EU-ansässig
    Öffentl. AVV: Nein Subprozessoren: Nein Open Source: Nein
  • Formbricks
    Deutschland · 63 €/Mt.
    EU-gehostet
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Ja
  • Formdesk
    Niederlande · 5.42 €/Mt.
    EU-souverän
    Öffentl. AVV: Ja Subprozessoren: Nein Open Source: Nein
Alle formulare & umfragen-Alternativen ansehen