Data Processing Addendum

If your organization is on a Formz Business plan and needs a signed Data Processing Addendum ("DPA") for compliance purposes (e.g. GDPR Article 28), this page summarizes the terms we offer. Email support@joinformz.com to request a signed copy.

1. Roles

When you use Formz to build forms that collect personal data from your respondents, you act as the "Controller" of that data and Formz acts as the "Processor," processing personal data only on your instructions and only to provide the Service.

2. Scope of Processing

Formz processes the personal data your forms are configured to collect (form responses), and, where you enable it, wallet addresses or social-identity profile fields submitted by respondents through verification blocks. See our Privacy Policy for the full list of data categories.

3. Subprocessors

Formz uses the subprocessors listed in our Privacy Policy (Supabase, Vercel, Stripe, Resend, Sentry, Alchemy, TonAPI, and the social-OAuth providers you enable on a given form). We remain responsible for subprocessors' compliance with data protection obligations equivalent to those in this addendum.

4. Security Measures

Formz applies encryption in transit, role-based access control, row-level security at the database layer, server-side signature verification for wallet and OAuth identity claims, and per-route rate limiting. See our Privacy Policy for more detail.

5. Assistance with Data Subject Rights

Formz provides self-serve data export and account deletion tools, and will provide reasonable assistance to Controllers in responding to data subject requests (access, deletion, correction, portability) concerning data processed through the Service.

6. International Transfers

Where personal data is transferred outside the European Economic Area or United Kingdom, Formz relies on appropriate safeguards such as standard contractual clauses, consistent with our Privacy Policy.

7. Requesting a Signed DPA

Business-plan customers who need a formally executed DPA (e.g. an EU Standard Contractual Clauses annex) should contact support@joinformz.com.