FormAssembly is a powerful form builder that enables businesses to collect data, manage workflows, and automate processes, enhancing data collection and customer interactions.
FormAssembly is an enterprise-grade form builder and data collection platform that empowers businesses to capture clean, compliant data, automate workflows, and streamline processes from form creation to integration with systems like Salesforce and HubSpot. Its core value proposition lies in transforming static forms into intelligent, AI-assisted workflows that reduce manual data preparation by up to 43%, boost completion rates with features like configurable progress bars and conditional submit buttons, and ensure security through HIPAA compliance, FedRAMP authorization, and biometric mobile logins.[1][2][3] Key capabilities include a drag-and-drop builder with conditional logic, file-to-web form conversion from PDFs or CSVs via the agentic AI assistant Fai, advanced document generation with e-signatures, payment integrations like Stripe, and bi-directional connectors for real-time data syncing to spreadsheets or CRMs.[2][3][5]
Designed for enterprises, marketing teams, and compliance-focused organizations, it excels in use cases such as customer onboarding, contract management, event registrations, and digitizing paper processes while preventing duplicates in Salesforce or HubSpot.[4][6] What sets FormAssembly apart is its Atlas platform with Fai AI for automated workflow design, no-code scalability with unlimited forms and responses, and a focus on AI-ready data orchestration, making it a strategic tool for the AI era rather than just basic form building.[3][5][7]
Sources
FormAssembly explicitly states they do not use customer data for AI model training or fine-tuning. The privacy policy cl
No training on user data means no opt-out is necessary.
Moderate risk. Suitable for internal data but avoid confidential information.
FormAssembly explicitly states they do not use customer data for AI model training or fine-tuning. The privacy policy clearly commits to strict data security protocols and notes that third-party AI providers are contractually prohibited from using data for model training.
“[Privacy] "We do not use your data—including inputs or outputs—for the training or fine-tuning of AI models. These providers are contractually obligated to uphold strict data privacy standards and do not use your data for model training."”
The provided documents do not explicitly detail the scope of content licensing rights granted by users. While the privacy policy indicates FormAssembly acts as a data processor for clients and does not sell information, the specific license terms for user-generated content (forms, workflows, outputs) are not clearly defined in the available excerpts.
“Not found in documents”
FormAssembly shares data with limited third-party service providers (infrastructure, support, payment processing via Stripe) under contractual restrictions. However, the documents lack a comprehensive sub-processor list and specific details about all third parties. The policy states they maintain contracts restricting access but doesn't fully enumerate all sharing scenarios.
“[Privacy] "FormAssembly uses a limited number of third-party service providers to assist us in providing our services to customers... we maintain contracts with these third parties restricting their access, use, and disclosure of personal data."”
FormAssembly states data is retained 'as long as your account is active or as needed to provide you services' and will respond to deletion requests within 30 days. However, the retention policy is somewhat vague regarding backup data, archived data, and the exact timeline for purging after account termination.
“[Privacy] "We will retain your information for as long as your account is active or as needed to provide you services... If the Client requests FormAssembly Inc. to remove the data, we will respond to their request within 30 days."”
The privacy policy indicates FormAssembly acts as a data processor on behalf of clients and does not claim ownership of user-generated content. The company's primary function is to facilitate form use and store data for subscriber business purposes, implying the subscriber/company retains ownership.
“[Privacy] "We are a Web site host and our primary function as it relates to User data is to facilitate use of the forms and to store such User inputted data for use by the Subscriber for their business purposes."”
FormAssembly demonstrates strong compliance certifications including EU-U.S. Data Privacy Framework (DPF) certification, UK Extension to DPF, Swiss-U.S. DPF, Australian Privacy Act compliance, and mentions HIPAA, GDPR, and PCI DSS compliance on their website. They reference TRUSTe for dispute resolution and FTC jurisdiction.
“[Privacy] "FormAssembly complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF)... FormAssembly Inc. commits to comply with the Australian Privacy Act and the 13 Australian Privacy Principle (APP) guidelines."”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai