# Paperform privacy rating

Online form builder from Paperform Pty Ltd in Australia that combines forms with document-style pages, payments and bookings.

## Summary

Paperform scores 25 out of 100 (grade F) on the forms and surveys criteria. It meets 1 of 8 criteria: TLS configuration. It partly meets no ads or data sales and independent audit. It does not meet open source, no trackers or telemetry, transparency report, tells users about requests and security headers. It is based in Australia: Five Eyes member; CLOUD Act data access agreement with the US. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade D-.

- Website: https://paperform.co
- Jurisdiction: Australia. Five Eyes member. CLOUD Act data access agreement with the US.
- Platforms: Web
- Home page trackers: G2, Google Analytics, Google Tag Manager, Intercom (not scored)
- Category: [Forms and surveys](https://privacyratings.com/forms/)
- Grade: F (25/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The privacy policy describes cookies, pixel tags and third parties that provide advertising, and the website loads Google Analytics. | https://paperform.co/privacy/ |
| No ads or data sales | Partial | Funded by paid plans with no ads in forms, but the privacy policy describes remarketing through Google and Facebook and processing of personal data for targeted advertising, with an opt-out. | https://paperform.co/privacy/ |
| Independent audit | Partial | Completed a SOC 2 audit. The report is shared with customers, not published. | https://paperform.co/blog/paperform-has-achieved-soc-2-compliance/ |
| Transparency report | No | No transparency report is published. The privacy policy only says data may be disclosed in response to legal requirements or law enforcement requests. | https://paperform.co/privacy/ |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A | https://www.ssllabs.com/ssltest/analyze.html?d=paperform.co&hideResults=on |
| Security headers | No | Grade D- (25/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=paperform.co |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/forms/paperform/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/forms/paperform.md