Hosted forms: share a link, collect answers in the EU

• Event sign-ups and registrations
• Intake or onboarding forms sent by email
• Feedback forms linked from a receipt or invoice
• A QR code on a poster or a product
• A contact form before your website exists

• Spam filtering on every form: a honeypot, plus optional Cloudflare Turnstile.
• An email notification for each answer, plus webhooks and integrations from Professional.
• Every answer stored in Sweden, with CSV export and a retention period you control.
• Pages, an optional page builder at formward.eu/p/your-page: headings, text, images and several forms on one page, with a theme. On your own domain from Professional.

A hosted form and an embedded form are the same form. When you get a website, point your own <form> at the form's endpoint and keep the same submissions, recipients and history.

Free includes unlimited hosted form links and one published page, with an auto-generated address and Formward branding. Hosted answers count toward the same monthly allowance (50 on Free). A custom page address starts on Personal; removing the branding starts on Professional. The plans page has the full list.

Research surveys that need response quotas, randomised question order or complex branching. Hosted forms collect answers; they are not a survey tool.

Formward stores submissions, file attachments and backups in Sweden, on servers run by Hostup AB. Notification email goes out through Mailjet from an EU data centre. Submitter IP addresses are replaced with a keyed HMAC-SHA-256 hash on receipt, so the raw address is never written to disk. On Professional and Business, AI features run on Mistral AI in France and can be switched off per form.

Data leaves the EU only where you send it: a notification inbox hosted outside the EU, a webhook URL, a Slack channel or a Google Sheet. Cloudflare Turnstile is a US service, and it is off unless you switch it on for a form. The details are in the sub-processor register, the data residency page and the published DPA. For the wider picture, see GDPR form backend.