Data protection
GDPR-friendly form data handling
Collect responses on an EU-hosted platform with access controls, private file storage, and clean delete and export, so you can meet your GDPR obligations.
If you collect personal data through forms, GDPR is not optional. You need to know where the data lives, who can reach it, and how to remove it when someone asks. Formius is built with EU data protection in mind and hosts your data in the EU, so the platform gives you the controls that let you do your part.
These are features that help you meet your GDPR obligations, not a substitute for them. You remain the data controller for the responses you gather. What Formius provides is the technical footing: EU hosting, strict per-owner access, private file storage, and straightforward ways to delete or export what you hold.
Your data stays in the EU
Formius is designed around EU data protection and hosts your form definitions and responses in the EU. Keeping data inside the EU removes one of the most common friction points in GDPR work: reasoning about where personal data physically sits and whether it has left the region.
You still decide what to ask for. The less personal data a form requests, the less you have to protect, so data minimisation starts with how you write the form, and Formius keeps the storage side inside the EU.
Only you can see your responses
Access is controlled by row-level security at the database level. Each owner sees only their own forms and their own responses, enforced by the database itself rather than by application code that could be bypassed. Uploaded files are held in a private storage bucket that is never publicly listable, so an attachment cannot be discovered or guessed from the outside.
- Row-level security scopes every read and write to the owner of the form.
- Uploaded files live in a private bucket, reached only through short-lived signed links, never a public directory.
- Sharing a form with a teammate is explicit, so access is something you grant rather than a default.
Delete and export on request
GDPR gives people the right to have their data erased and the right to obtain a copy of it. Formius supports both. You can permanently delete a form and its data through a confirmation flow, so removal is deliberate and hard to trigger by accident. You can also export response data when you need to produce or hand over what you hold.
Because deletion is permanent and routed through a confirmation step, you keep a clear, auditable action for erasure requests rather than an ambiguous archive that quietly retains data.
You only store data from confirmed owners
Every submission goes through email verification: a response only counts after the person clicks the link sent to their own address. This means you are not accumulating unconfirmed or spoofed records, and the personal data you keep belongs to people who confirmed their own email. That is cleaner data to hold and easier to stand behind if a request or audit comes.
Frequently asked questions
- Is Formius GDPR certified?
- Formius does not claim any formal certification. It is built with EU data protection in mind and provides features that help you meet your GDPR obligations, such as EU hosting, access controls, and deletion and export. You remain the data controller for the responses you collect.
- Where is my form data stored?
- Formius hosts your form definitions and responses in the EU. Uploaded files are kept in a private storage bucket that is not publicly listable.
- Can other users see my responses?
- No. Access is enforced by row-level security in the database, so each owner sees only their own forms and responses. Access to a form is shared only when you explicitly grant it to a teammate.
- How do I delete personal data on request?
- You can permanently delete a form and its data through a confirmation flow. The confirmation step makes erasure deliberate, and the deletion is permanent rather than a hidden archive.
- Can I export the data I have collected?
- Yes. You can export response data, which helps when you need to produce or hand over a copy of what you hold.
- Does Formius reduce the amount of unverified data I store?
- Yes. Every submission requires email verification, so a response only counts after the person confirms their own address. You store data from confirmed owners rather than unverified or spoofed records.
Related features
- Verified responsesEvery submission is confirmed by a one-click email link, so the responses you keep are real.
- Team sharingShare a form and its responses with teammates at the right level of access, without handing out a shared login.
- Responses dashboardSee every form and its response count at a glance, then read individual answers without leaving Formius.
Build your first form in minutes
Start a 7-day free trial and put gdpr compliance to work on a real form today.
Start your free trial