Cognito Forms
Cognito Forms provides online form building tools with features like electronic signatures, workflow automation, and integrations for businesses across industries.
Subprocessors (14)
Processed Jul 23, 2026 · source disclosure ↗
| vendor | purpose | evidence |
|---|---|---|
| Validation assistance | “We use Stripe and Google Maps services to assist with the validation process, sharing only the minimal required information.” source | |
| Email Providers | “Cognito Forms uses MailChimp, an Intuit product, to send marketing emails to notify you about new features, changes to our terms, and other useful information about our services. MailChimp automatically manages our unsubscribe list, allowing you to easily unsubscribe from future communications at any time. MailChimp only uses the information we share with them to send these emails.” source | |
| transactional emails | “Cognito Forms uses Mailgun to send transactional emails from Cognito Forms to you and your customers on your behalf. These emails are specific to your organization, your forms, and your entries. Mailgun is the only transactional email provider used for organizations that have signed our HIPAA BAA, as we have a BAA with them covering email delivery. Mailgun only uses the information we share with them to send these emails.” source | |
| Email Providers | “Cognito Forms uses Mandrill to send transactional emails from Cognito Forms to you and your customers on your behalf. These emails are specific to your organization, your forms, and your entries. Mandrill only uses the information we share with them to send these emails.” source | |
| service monitoring | “Cognito Forms uses Microsoft Application Insights to monitor and assess the health of the services we provide in real time. App Insights logs tons of useful information, like requests to our servers, connections to third-party dependencies, and any errors that may occur during processing. This data includes information like the IP address, browser version, internal user id and organization id for each request—information typically found in web server logs. We actively monitor and review reports from App Insights to proactively address any issues as they occur. App Insights is a Microsoft Azure product and is governed by the same security measures as our production hosting environment.” source | |
| Hosting | “Secure hosting of Cognito Forms is essential to both us and our customers. That is why we entrust Microsoft, an industry leader in secure cloud hosting, to protect all of our customer data.” source | |
| payment processing | “PayPal is available as a payment provider option to our customers on the Team and Enterprise plans. When you first connect your forms to PayPal, we share your name, email address, and organization name with PayPal to facilitate quickly creating a new PayPal account.” source | |
| user onboarding and in-app messaging | “We use Pendo to deliver relevant messages, both in-app and via email, that help optimize your experience as a Cognito Forms user. These messages are based on actions you take while using Cognito Forms, making them both timely and topical. To enable such targeted communication, we send Pendo information about the actions you perform in our application such as plan level signups, form creation and feature usage.” source | |
| business data enrichment | “Cognito Forms uses People Data Labs, Inc. to provide business data enrichment in support of our internal operations (for example, maintaining accurate business records, analytics, and improving our Services). In connection with this service, we may share limited business-related information and receive additional business-related details associated with an organization. People Data Labs acts as our service provider/data processor and may process this information only to provide the service to Cognito Forms, consistent with our agreement and applicable law.” source | |
| Email Providers | “Cognito Forms uses Postmark, to send transactional emails from Cognito Forms to you and your customers on your behalf. These emails are specific to your organization, your forms, and your entries. Postmark only uses the information we share with them to send these emails.” source | |
| payment processing | “Square is available as a payment provider option to our customers on the Team and Enterprise plans. When you first connect your forms to Square, we share y” source | |
| Payment processing | “Stripe, a third-party PCI compliant payment processor, handles all interactions with credit card information on our behalf.” source | |
| customer reviews | “Trustpilot is a customer review management tool that helps us gather feedback from new customers to determine satisfaction with our product and services. We share the name and email address of new customers with Trustpilot to allow them to collect verified product reviews. Trustpilot only uses the information we share for this purpose.” source | |
| customer support | “Cognito Forms provides direct one-on-one support to all our customers, not a public forum free-for-all. We leverage Zendesk to provide email, chat and social media support for our customers. We use Pendo for user onboarding, in-app messaging and activity-related emails.” source |
-
Validation assistance
“We use Stripe and Google Maps services to assist with the validation process, sharing only the minimal required information.” source
-
Email Providers
“Cognito Forms uses MailChimp, an Intuit product, to send marketing emails to notify you about new features, changes to our terms, and other useful information about our services. MailChimp automatically manages our unsubscribe list, allowing you to easily unsubscribe from future communications at any time. MailChimp only uses the information we share with them to send these emails.” source
-
transactional emails
“Cognito Forms uses Mailgun to send transactional emails from Cognito Forms to you and your customers on your behalf. These emails are specific to your organization, your forms, and your entries. Mailgun is the only transactional email provider used for organizations that have signed our HIPAA BAA, as we have a BAA with them covering email delivery. Mailgun only uses the information we share with them to send these emails.” source
-
Email Providers
“Cognito Forms uses Mandrill to send transactional emails from Cognito Forms to you and your customers on your behalf. These emails are specific to your organization, your forms, and your entries. Mandrill only uses the information we share with them to send these emails.” source
-
service monitoring
“Cognito Forms uses Microsoft Application Insights to monitor and assess the health of the services we provide in real time. App Insights logs tons of useful information, like requests to our servers, connections to third-party dependencies, and any errors that may occur during processing. This data includes information like the IP address, browser version, internal user id and organization id for each request—information typically found in web server logs. We actively monitor and review reports from App Insights to proactively address any issues as they occur. App Insights is a Microsoft Azure product and is governed by the same security measures as our production hosting environment.” source
-
Hosting
“Secure hosting of Cognito Forms is essential to both us and our customers. That is why we entrust Microsoft, an industry leader in secure cloud hosting, to protect all of our customer data.” source
-
payment processing
“PayPal is available as a payment provider option to our customers on the Team and Enterprise plans. When you first connect your forms to PayPal, we share your name, email address, and organization name with PayPal to facilitate quickly creating a new PayPal account.” source
-
user onboarding and in-app messaging
“We use Pendo to deliver relevant messages, both in-app and via email, that help optimize your experience as a Cognito Forms user. These messages are based on actions you take while using Cognito Forms, making them both timely and topical. To enable such targeted communication, we send Pendo information about the actions you perform in our application such as plan level signups, form creation and feature usage.” source
-
business data enrichment
“Cognito Forms uses People Data Labs, Inc. to provide business data enrichment in support of our internal operations (for example, maintaining accurate business records, analytics, and improving our Services). In connection with this service, we may share limited business-related information and receive additional business-related details associated with an organization. People Data Labs acts as our service provider/data processor and may process this information only to provide the service to Cognito Forms, consistent with our agreement and applicable law.” source
-
Email Providers
“Cognito Forms uses Postmark, to send transactional emails from Cognito Forms to you and your customers on your behalf. These emails are specific to your organization, your forms, and your entries. Postmark only uses the information we share with them to send these emails.” source
-
payment processing
“Square is available as a payment provider option to our customers on the Team and Enterprise plans. When you first connect your forms to Square, we share y” source
-
Payment processing
“Stripe, a third-party PCI compliant payment processor, handles all interactions with credit card information on our behalf.” source
-
customer reviews
“Trustpilot is a customer review management tool that helps us gather feedback from new customers to determine satisfaction with our product and services. We share the name and email address of new customers with Trustpilot to allow them to collect verified product reviews. Trustpilot only uses the information we share for this purpose.” source
-
customer support
“Cognito Forms provides direct one-on-one support to all our customers, not a public forum free-for-all. We leverage Zendesk to provide email, chat and social media support for our customers. We use Pendo for user onboarding, in-app messaging and activity-related emails.” source