SurveyMonkey and Privacy

Learn more about our privacy features

On May 25, 2018, the General Data Protection Regulation (GDPR) became law across the European Union and many other countries and jurisdictions are following suit with similar privacy laws like the California Consumer Privacy Act (CCPA).

Lock plus globe

At SurveyMonkey, we are committed to protecting the privacy of individuals, including our customers. And just as our focus on privacy didn’t start on May 25, 2018 with GDPR, it doesn’t end there either. Privacy and transparency are lifelong commitments for SurveyMonkey.

SurveyMonkey and GDPR whitepaper, download now

We see privacy regulation as affording us yet another opportunity to continue our tradition of protecting and giving you more control over both your organizational and personal data. We have outlined some specific aspects of our approach to privacy in our white paper.

SurveyMonkey is built for Enterprise with robust security and compliance features

  • ISO 27001 certified
  • EU US Privacy Shield Certified
  • PCI DSS 3.2
  • HIPAA compliant features for US health care customers.
  • SOC2 accredited data centers
  • Access control (authentication and authorization)
  • Single sign-on support
  • Data encryption at rest and in transit
  • Continuous network and security monitoring
  • Vulnerability management
  • Incident response and recovery
  • Security awareness training
  • Periodic independent 3rd-party security reviews and penetration testing
  • Multiple data centers to guarantee a secure and highly available service at scale
  • Select group of trusted security partners, to ensure our customers are always protected with the best-in-class security

Our legal center is more than a legal document. It puts all of our legal and privacy policies in a single place. Our Privacy Basics page gives you a snapshot of how we handle personal information and data, while the page design makes it easy for you to find the exact areas of our policies that concern you. We also offer various options on data processing terms for customers, depending on the plan or package you have selected, and where you are located. If you’ve purchased your plan from SurveyMonkey EU via our website, you can access our data processing addendum here. If you purchased your plan from SurveyMonkey Inc. and are a California user, you can access our CCPA Addendum here.  If you are an enterprise customer please refer to our Master Services Agreement.

We empower all of our customers to control their data through their account. As long as your account is active, you have full control over the specific types of data, and length of time you hold such data. For example, you can delete or export a single individual survey response from your account if required to do so. We honour all deletions from an account, and all account data which has been expunged by you is permanently deleted from our back-ups within 90 days. Get more details from our Help Center or read our white paper.

We’re making it easier for you to opt out of the emails from SurveyMonkey that you don’t want to see, or keep only the ones you do. No matter what area of our business you’re getting messages from, we’ve made it easy for you to choose which ones you see—or choose to see none at all.

We’re aware that many of our customers with EU users and EU affiliates would prefer that their data be hosted in the EU in mid-2019. This is currently available to new Enterprise customers - for more information contact us. Updates on when this data storage option will be available for existing customers will be provided through our website.

For more in-depth details, please download our white paper. And if you have additional questions, please contact us. All of our customer support representatives have received specialized training to make sure they can help you with whatever issue might arise.

woman icon

Get a platform that can grow and change along with your survey needs over time. Browse our plans to learn more about specific features.

organization icon

Manage your company’s data with advanced security and control, so you can enable your teams to share and collaborate safely.