Findmind
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based This listing EU-operated, with at most minor or transient US exposure.
-
EU-Hosted EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Swiss research-focused online survey tool operated by Fabian Keller since 2009; used by University of Zurich researchers.
Findmind is a European service hosted in Switzerland, with at most minor, transient US exposure under the CLOUD Act. It is listed under Forms & surveys.
Assessment notes
Swiss research-focused survey tool operated by Fabian Keller as a sole proprietor since 2009. Switzerland holds an EU adequacy decision and the customer base is heavily academic (used by the University of Zurich), but the public site does not expose a formal DPA, sub-processors list, hosting disclosure, or imprint with CHE registration number; with no positive evidence of US-cloud at rest the CLOUD Act flag is set defensively to minor, pending vendor disclosure of hosting provider and written DPA.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned EU-incorporated and EU-controlled; no significant US ownership.
-
European This listing Swiss/EEA-owned, with no significant US ownership; treated as European.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
- Sub-processors
- — not disclosed
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: Not assessed
-
Public DPA: No
-
Sub-processors disclosed: No
-
Open-source clients: No
-
Third-party certification: No
Jump to
About Findmind
Findmind is a Swiss online survey tool operated by Fabian Keller as a single-operator service since 2009. The product is positioned for academic and market research workflows (multilingual surveys, multiple question types, graphical reports, Excel/Word export, custom banners and images) and is referenced inside the University of Zurich's Banking & Finance research-tools catalogue, which is a strong (if niche) credibility signal for procurement teams in higher education. The footer copyright reads "© Fabian Keller 2009–2023", suggesting a minimally-maintained but stable product surface.
For an EU-sovereignty audit the listing sits in the "other (Switzerland)" tier. Switzerland is not an EU member but holds an EU adequacy decision under Art. 45 GDPR (renewed by the European Commission), so cross-border transfers between EU and CH do not require SCCs, a legally clean position. What is not exposed on the public website at audit time is the rest of the procurement-grade chain: there is no resolvable DPA URL, no public sub-processors page, no explicit hosting-provider disclosure, no security overview, and no imprint with a CHE Handelsregister number; the legal-entity structure looks like a sole proprietorship rather than an AG or GmbH. With no positive evidence of US-owned hyperscaler use we set CLOUD Act exposure defensively to minor, but procurement-led buyers should request the underlying hosting provider and a written DPA before signing.
Pricing was not captured at audit (the public landing page rendered only a browser-compatibility notice to WebFetch); the product positions itself as "free/cheap" with a freemium model in CHF and EUR. Best fit: Swiss academic researchers, German-speaking market-research teams, and SMBs that want a simple Swiss-incorporated survey tool with multilingual question support. Procurement-grade buyers requiring named hosting + DPA should prefer Tally (BE) or Tripetto (NL) in this category, both audited below.
Sub-processor map · not disclosed
Frameworks & certifications · none listed
Capability matrix
Table 1Capabilities of Findmind
Integration & access
Compliance & governance
Pricing & tiers
Public documents
-
missingData Processing Addendum (DPA)— missing
-
missingSub-processors list— missing
Alternatives in this category
-
Germany · €63/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: Yes -
-
Netherlands · €5.42/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: No Open source: No -
-
Belgium · €21/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Formbricks
Germany
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: Yes
|
€63/mo |
Formdesk
Netherlands
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: No
Open source: No
|
€5.42/mo |
Formspark
Belgium
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€21/mo |