GDPR & EU hosting
Questionful is operated by a German sole proprietorship and hosted in the EU. You can request deletion of your account and data at any time, and a data processing agreement is available on request.
Security
Security you can check.
A short, specific list of what Questionful actually does to protect your data and your respondents', no certifications we don't hold, no controls we haven't built.
Ask us a security questionEncrypted in transit
Every connection runs over HTTPS. Passwords are stored hashed, never in plain text, and card details never reach our servers. Payments are handled by Stripe.
Account security
Two-factor authentication by emailed six-digit code, a confirmation email on sign-up and on every email change, and your current password required before changing your email or password. Sign in with Google is supported.
Protected public forms
Cloudflare Turnstile blocks automated submissions, upload and download endpoints are rate limited per IP, a form holds at most 2000 files, and the renderer can be restricted to the domains you name.
Private file storage
Files respondents upload are never served from a public URL. They sit on private object storage in the EU, encrypted at rest, and reading one needs a session with access to the form or a signed link. Knowing a file ID is not enough.
Audit trail
Every change to a form is recorded with the actor and a timestamp, kept for a retention period you configure, and visible from the form itself.
Shared workspaces
Team workspaces on the Teams plan keep forms with the workspace rather than an individual, with owner and member roles and invitations by email.
Responsible disclosure
A published security contact and a commitment to acknowledge every report within two business days. We are a small team and we would rather hear it from you first.
Reporting & Disclosure
Found a vulnerability?
We appreciate responsible disclosure. Please email support@questionful.org with a detailed description and steps to reproduce. We commit to acknowledging your report within two business days.
Get started free