Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Formspark

VERIFIED
Forms & surveys · Switzerland
Founded 2018 · formspark.io ↗

Developer form-backend (form-to-email API) flagged as Swiss; 20k+ customers, one-time-payment bundles, no UI.

Why this score?

Small Swiss-flagged developer form-backend service (Formspark, founded 2018, ~20k customers) sold as a no-UI form-to-email API with a one-time-payment bundle model; footer links to Privacy and GDPR docs but DPA, sub-processors, security, and imprint URLs were not resolvable at audit and the underlying hosting / data-residency story is not publicly disclosed — Switzerland adequacy decision keeps transfers legally clean but the score sits at 3/5 with a defensive minor CLOUD Act flag pending vendor disclosure.

SCORE
3.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
JUMP TO
OVERVIEW

About Formspark

Formspark is a developer-focused form backend that handles servers, databases, and analytics so the developer keeps full control over markup and styling. Founded in 2018 and trusted by more than 20,000 customers across React, Vue, Next.js, WordPress, Webflow, and static-site setups, the service is positioned as a Formspree alternative for solo developers, agencies, and freelancers. The MVP shortlist flags Formspark as Switzerland-based; the public marketing surface does not directly confirm a CH legal entity, so this listing is provisional and depends on vendor outreach for an accurate Imprint / Mentions légales. Compliance disclosures are thin at audit. The homepage footer references Terms, Privacy, and a GDPR section; the dedicated /privacy, /dpa, /security, and /imprint URLs all returned 404 to WebFetch, and the underlying hosting provider for form submissions is not publicly named. Without a published DPA artefact, a named sub-processors list, or an explicit hosting-region commitment, procurement-grade buyers cannot independently verify the EU/CH residency claim today. The CLOUD Act flag is set defensively to `minor` (no positive evidence of US-cloud at rest, but also no positive disclosure of EU-only stack). Pricing is unusual and EU-buyer-friendly: a free tier exists, and the paid bundle is US$25 (currently 50% off from US$50) for 50,000 submissions, 100 forms, and unlimited team members on a one-time payment basis — data bundles do not expire, and there is no recurring subscription. Best fit: indie developers and small agencies who need a no-frills form-to-email backend with one-time-payment economics. Procurement-grade buyers needing a self-served DPA, named sub-processors, and a confirmed EU hosting region should look at Tally (BE) or Tripetto FormBuilder SDK (NL self-host) in this category instead.
SUB-PROCESSORS

Sub-processor map · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-11).
FEATURES

Capability matrix

INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Pricing & tiers

FREEMIUM
from €23/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement — this caps the compliance score (see How we score).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    formspark.io/terms…
    Open ↗
ALTERNATIVES

Alternatives in this category