Learn more about our privacy features.


On 25 May 2018, the General Data Protection Regulation (GDPR) became law across the European Union, and many other countries and jurisdictions are following suit with similar privacy laws, like the California Consumer Privacy Act (CCPA).

At SurveyMonkey, we work to protect our customers’ privacy. Our focus on privacy didn’t start on 25 May 2018 with GDPR, and our programme continues to evolve. We have achieved ISO 27701 certification for our role as a processor of personally identifiable information.

A screenshot titled SurveyMonkey and GDPR, with a white paper download link icon

We see privacy regulation as affording us yet another opportunity to continue our tradition of protecting and giving you more control over both your organisational and personal data. We have outlined some specific aspects of our approach to privacy in our white paper.

SurveyMonkey is built for enterprise, with robust security and compliance features

  • ISO 27001 certified
  • ISO 27701 certified
  • EU US Privacy Shield Certified
  • PCI DSS 3.2
  • HIPAA-compliant features for US health care customers
  • SOC2-accredited data centres
  • Access control (authentication and authorisation)
  • Single sign-on support
  • Data encryption at rest and in transit
  • Continuous network and security monitoring
  • Vulnerability management
  • Incident response and recovery
  • Security awareness training
  • Periodic independent third-party security reviews and penetration testing
  • Multiple data centres to guarantee a secure and highly available service at scale
  • A select group of trusted security partners, to ensure that our customers are always protected with the best-in-class security

Our legal centre is more than a legal document; it puts all of our legal and privacy policies in a single place. Our Privacy Basics page gives you a snapshot of how we handle personal information and data, while the page design makes it easy for you to find the exact areas of our policies that concern you. We also offer various options on data processing terms for customers, depending on the plan or package you have selected and where you are located. To learn more about how we safely transfer data across borders, see our EU Data Transfer Statement and Subprocessor List. To see how we protect your data, see our Data Processing Agreement or Trust Centre. If you are an enterprise customer, please refer to our Master Services Agreement.

We empower all of our customers to control their data via their account. As long as your account is active, you will have full control over the specific types of data and the length of time this data is held. For example, you can delete or export a single individual survey response from your account if required to do so. We honour all deletions from an account, and all account data which has been expunged by you will be permanently deleted from our backups within 90 days. Get more details from our Help Centre or read our white paper.

We’re making it easier for you to opt out of the emails from SurveyMonkey that you don’t want to see or to keep only the ones you do. Regardless of which business area you’re receiving messages from, we’ve made it easy for you to choose which ones you see. Alternatively, you can choose to see none at all.

We’re aware that many of our customers with EU users and EU affiliates prefer their data to be hosted in the EU, and this is currently available to new Enterprise customers. Please contact us for more information. Updates about when this data storage option will be available for existing customers will be provided via our website.

For more in-depth details, please download our white paper. And if you have any additional questions, please contact us. All of our customer support representatives have received specialised training to make sure they can help you with whatever issue might arise.

Get a platform that can grow and evolve according to your survey needs over time. Browse our plans to learn more about specific features.

Manage your company’s data with advanced security and control so that you can enable your teams to share and collaborate safely.