{
  "slug": "google-forms",
  "category": "forms",
  "name": "Google Forms",
  "description": "Google's online form and survey builder, part of Google Workspace. Responses are stored in the creator's Google account and can be exported to Google Sheets.",
  "website": "https://workspace.google.com/products/forms/",
  "license": null,
  "platforms": [
    "web"
  ],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "F",
  "score": 38,
  "coverage": 100,
  "summary": "Google Forms scores 38 out of 100 (grade F) on the forms and surveys criteria. It meets 3 of 8 criteria: transparency report, tells users about requests and security headers. It partly meets independent audit and TLS configuration. It does not meet open source, no trackers or telemetry and no ads or data sales. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade B and Mozilla HTTP Observatory grade A+.",
  "url": "https://privacyratings.com/forms/google-forms/",
  "markdown": "https://privacyratings.com/forms/google-forms/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://policies.google.com/privacy",
      "note": "Google collects activity data across its services and uses it for analytics and personalized ads."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "no",
      "evidence": "https://policies.google.com/privacy",
      "note": "Free for personal accounts and funded by Google's advertising business, which uses activity data across services."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://cloud.google.com/security/compliance/soc-3",
      "note": "Google Workspace, which includes Forms, has third-party SOC 2 audits. Only the SOC 3 summary report is public."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://transparencyreport.google.com/user-data/overview",
      "note": "Publishes counts of government requests for user data and how often data is disclosed, updated twice a year."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://policies.google.com/terms/information-requests",
      "note": "Google emails the user before disclosing information unless legally prohibited or in emergencies."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=docs.google.com&hideResults=on",
      "note": "Grade B"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=docs.google.com",
      "note": "Grade A+ (110/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    }
  },
  "tests": {
    "ssllabs": "B",
    "observatory": "A+",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Google Fonts",
        "host": "fonts.gstatic.com",
        "effect": "none"
      },
      {
        "name": "Google Tag Manager",
        "host": "www.googletagmanager.com",
        "effect": "no"
      }
    ],
    "tested_at": "2026-10-01T06:38:55.558Z"
  },
  "last_modified": "2026-10-01T06:56:31Z"
}