# Formassembly

Formassembly (formassembly.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/formassembly
- Documents last verified: 2026-09-29
- Transparency rating: 89/100 (how much it publishes, not how secure it is)
- Cite as: Formassembly, Third Party Index, https://thirdpartyindex.com/vendors/formassembly (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://security.formassembly.com/ | 2026-09-29 | 2026-09-29 |
| Subprocessor list | https://security.formassembly.com/?itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57 | 2026-09-29 | 2026-09-29 |
| Data processing addendum | https://www.formassembly.com/data-processing-agreement/ | 2026-09-29 | 2026-09-29 |
| Privacy policy | https://www.formassembly.com/privacy-policy/ | 2026-09-29 | 2026-09-29 |
| Terms | https://www.formassembly.com/terms-of-service/ | 2026-09-29 | 2026-09-29 |
| Security page | https://www.formassembly.com/product/security/ | 2026-09-29 | 2026-09-29 |
| Status page | https://status.formassembly.com/ | 2026-09-29 | 2026-09-29 |

## Subprocessors (3)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Cloud infrastructure services providing hosting, data storage, and computing resources for platform operations. | USA | 2026-09-29 |
| [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) | AI-based Form Generation | US | 2026-09-29 |
| [Pendo.io](https://thirdpartyindex.com/vendors/pendo.md) | Product analytics and user experience platform for tracking user behavior and optimizing product adoption. | USA | 2026-09-29 |

Read from ([evidence](https://thirdpartyindex.com/evidence/16839)). CSV: https://thirdpartyindex.com/vendors/formassembly/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2, ISO/IEC 27001, PCI DSS, TX-RAMP ([evidence](https://thirdpartyindex.com/evidence/16845))
- Claimed: GDPR, CCPA/CPRA, Data Privacy Framework ([evidence](https://thirdpartyindex.com/evidence/16845))

## Listed as a subprocessor by (1)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [Flywire](https://thirdpartyindex.com/vendors/flywire.md): Form for collecting opportunity information

## Service status

Incidents it reported on its own status page.

- Last 90 days: 9 reported incidents (1 major or critical, 6 minor, 2 with no impact stated)
- Typical time to resolve: 5 h 14 min
- 2026-09-16: Salesforce Connector Authorization Issues Following Recent Salesforce Outage (no impact stated)
- 2026-09-16: Salesforce Service Disruption (minor)
- 2026-08-28: Form-level Salesforce Connector and Email Notifications Delayed Processing on Submission (minor)
- 2026-08-24: Platform Slowness and Possible Gateway Errors (minor)
- 2026-08-20: Gov Cloud accounts: File Uploads breaking responses (minor)
- 2026-08-19: Salesforce Marketing Cloud Connectors Unavailable (major)
- 2026-08-18: Form-Level Salesforce Connector and Email Notifications Not Processing Upon Submission (minor)
- 2026-08-13: Form-level Salesforce Connector and Email Notifications Delayed Processing on Submission (minor)

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api