# Jotform privacy rating

Online form builder from Jotform Inc. in San Francisco, with templates, payments, approvals and PDF tools. Form data can be stored on EU servers.

## Summary

Jotform scores 34 out of 100 (grade F) on the forms and surveys criteria. It meets 1 of 8 criteria: TLS configuration. It partly meets no ads or data sales, independent audit, transparency report and security headers. It does not meet open source, no trackers or telemetry and tells users about requests. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.

- Website: https://www.jotform.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Web, Android, iOS
- Home page trackers: Google Tag Manager
- Category: [Forms and surveys](https://privacyratings.com/forms/)
- Grade: F (34/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The privacy policy describes web traffic analytics tools and advertising networks that use cookies and page tags, and the website loads Google Tag Manager. | https://www.jotform.com/privacy/ |
| No ads or data sales | Partial | Funded by paid plans, and the privacy policy states that personal information and form data are not sold. Advertising networks use cookies to show Jotform ads on other websites. | https://www.jotform.com/privacy/ |
| Independent audit | Partial | States a SOC 2 environment for Enterprise customers and periodic penetration tests, but no report is published. | https://www.jotform.com/security/ |
| Transparency report | Partial | The privacy policy describes how legal and law enforcement requests are reviewed and what data may be produced, but no request counts are published. | https://www.jotform.com/privacy/ |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=www.jotform.com&hideResults=on |
| Security headers | Partial | Grade B (75/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=www.jotform.com |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/forms/jotform/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/forms/jotform.md