Aller au contenu
EU VETTED

Survicate

Formulaires & sondages · Pologne
Fondé en 2013 · survicate.com

Warsaw-based Polish in-product survey and NPS platform on AWS-EU, ISO 27001 + SOC 2 + HIPAA-aligned.

Survicate propose un hébergement européen en Irlande, mais une maison mère ou un sous-traitant américain laisse une exposition matérielle au CLOUD Act. Référencé dans la catégorie Formulaires & sondages.

Notes d’évaluation

Warsaw-based Polish survey platform (Survicate S.A., KRS 0001021023, founded 2013 by Kamil Rejent, Polish-investor cap table including PFR Ventures) with strong ISO 27001 + SOC 2 + PCI-DSS + HIPAA attestation, TLS 1.2 / AES-256, SSO and SAML, and a publicly readable DPA at /data-processing-agreement/, but customer data is hosted on Amazon Web Services in the EU region, which is a US-owned hyperscaler at rest, and the published provider list routes survey response text to OpenAI LLC (US) for AI summarisation and to Anthropic PBC (US) for an AI assistant, alongside a further ~15 US recipients; per the strict CLOUD Act stance this is material CLOUD Act exposure despite the EU-owned ownership and enterprise-grade certifications. The DPA itself names no sub-processors and points to a list that is only published inside the Privacy Policy PDF.

Constats

CLOUD Act
Actionnariat
Sous-traitants
— non divulgué

Signaux vérifiés

Juridiction
  • Hébergement UE / adéquation: Oui
  • Opérateur UE / adéquation: Oui
  • Aucune exposition au CLOUD Act: Non
Transparence
  • DPA public: Oui
  • Sous-traitants divulgués: Oui
  • Clients open source: Non
  • Certification tierce: Oui
Aller à

À propos de Survicate

Survicate is a Warsaw-based Polish in-product feedback and survey platform founded in 2013 by Kamil Rejent. The product covers in-product surveys, NPS / CSAT / CES tracking, website pop-ups, email and link surveys, and a Research Hub for centralised insights, and is used by more than 2,000 digital businesses including Spotify, Automattic, Vercel, and Amplitude. The company has raised approximately US$1M across several investors including Airbridge Equity Partners, ARIA Fund, Di Volio, Newberg Investments, and PFR Ventures (the Polish state-owned venture arm), keeping the cap table firmly Polish and EU-aligned.

The security posture is unusually rich for a vendor at this size: ISO/IEC 27001, SOC 2, PCI-DSS, HIPAA, and GDPR alignment are all attested on the public security page; TLS 1.2 in transit and AES-256 at rest; single sign-on with workspace-level or full-workspace SAML; role-based access controls; workspace isolation; 24/7 monitoring; continuous third-party penetration testing; and an explicit commitment that customer data never trains AI models. That last commitment is narrower than it reads: the sub-processor table inside the privacy policy names OpenAI LLC (USA) for AI-assisted search and text-response summarisation, explicitly covering the text respondents write in surveys, and Anthropic PBC (USA) for an AI text assistant, so response content is processed by US AI vendors even though it is not used to train them. The other red flag for a strict-CLOUD-Act EU buyer is the underlying infrastructure: customer survey data is hosted on Amazon Web Services in the EU region, a US-owned hyperscaler that, under our parent-jurisdiction stance (Schrems II / Microsoft Ireland v US), counts as material CLOUD Act exposure regardless of EU placement. This is material CLOUD Act exposure despite the otherwise enterprise-grade certifications and tooling.

Pricing is quoted in USD and positioned mid-market: Growth starts at US$114/month billed annually, with Pro at US$349/month and Enterprise at US$569/month above it; the sales-only entry tier is no longer shown on the pricing page. A 10-day free trial requires no credit card and allows up to 25 responses plus 100 Research Hub data points. Best fit: mid-market product teams in DACH, France, Poland, and the Nordics that want EU-incorporated ownership, full ISO 27001 + SOC 2 attestation, SSO, and audit logging, and can accept AWS-EU as the underlying hosting layer. Buyers who must avoid US-owned hyperscalers entirely should look at Formdesk (NL), or run LimeSurvey or Formbricks self-hosted on EU infrastructure, all listed in this category.

Carte des sous-traitants · non divulgué

L'éditeur ne publie pas de liste de sous-traitants. La conformité Schrems II et l'exposition au CLOUD Act ne peuvent pas être vérifiées indépendamment sans elle.

Référentiels & certifications

ISO/IEC 27001
Active
SOC 2
Active
Information · cadre US

Matrice de fonctionnalités

Tableau 1Fonctionnalités de Survicate

Intégration & accès

REST API Oui
SSO (SAML / OIDC) Oui

Conformité & gouvernance

Audit log Oui
Self-host / on-prem option Non

Tarifs & paliers

à partir de 98 €/mois
Payant · facturé annuellement
Voir la page tarifs

Documents publics

  • Contrat de sous-traitance (DPA)
    survicate.com/data-processing-agreement…
    Ouvrir
  • Liste des sous-traitants
    assets.survicate.com/docs…
    Ouvrir
  • Conditions d'utilisation
    survicate.com/terms…
    Ouvrir

Alternatives dans cette catégorie

  • Findmind
    Suisse
    Basé UE
    DPA public: Non Sous-traitants: Non Open source: Non
  • Formbricks
    Allemagne · 63 €/mois
    Hébergé UE
    DPA public: Oui Sous-traitants: Oui Open source: Oui
  • Formdesk
    Pays-Bas · 5.42 €/mois
    Souverain UE
    DPA public: Oui Sous-traitants: Non Open source: Non
Voir toutes les alternatives formulaires & sondages