Fillout
Fillout is an all-in-one online form, survey and quiz builder that generates forms with AI from a description, a PDF or a Google Form, then routes responses into Airtable, Notion, HubSpot and dozens of other business tools.
What is Fillout?
Fillout is a web platform for creating forms, surveys and quizzes, published by Restly, Inc. (d.b.a. Zite), a Delaware company. Its stated positioning is the all-in-one form solution: six product bricks announced as one, namely Forms, Scheduling, PDF, Payments, Workflows and Signatures. The product launched around 2022 and, according to a company post from October 2024, has shipped 49 major updates and 3 new products since. Fillout claims more than 100,000 organizations, millions of forms served, an average rating of 4.8 out of 5 across hundreds of reviews, and that a Fillout form is completed every second.
The editor itself is no-code: drag and drop, 50+ field types, conditional logic, calculations and scoring, answer piping, prefilled and hidden fields. AI sits on top of that foundation rather than replacing it. The AI Form Builder, AI Survey Maker, AI Quiz Maker and AI Signature Maker generate a form from a description, from pasted questions, from an imported Google Form or from a PDF; the product page credits ChatGPT for the generation, and the declared AI subprocessors are OpenAI, Microsoft Azure for EU customers, and Anthropic for the Zite editing experience. Workflows can also call AI to summarize, classify or extract information from submissions, and a Fillout AI agent is announced on the home page.
Customization runs deep: prebuilt or custom themes, fonts, logo, colors, custom CSS, white-labeling down to the favicon, and a custom domain. Forms travel by link, QR code, email or embed, in popup, slider, side-tab or full-screen mode. Teams get workspaces, real-time collaborative editing, granular permissions, two-factor authentication and audit logs.
On security, Fillout holds SOC 2 Type 2, encrypts data in transit with TLS 1.2 and at rest with AES, runs daily encrypted backups and a bug bounty program, and hosts on AWS through Render. Data residency is the United States by default, with the EU, the United Kingdom, Australia or Canada available depending on the contract. A documented REST API lists forms, retrieves metadata and submissions, creates or deletes submissions and manages webhooks. The commercial model never charges per seat: seats are unlimited on every plan and pricing scales with response volume. A sister product, Zite, builds applications on the same infrastructure and the same subprocessors.
What it does
- Generate a form, survey or quiz with AI from a written description, pasted questions, an imported Google Form or a PDF
- Build and refine forms in a no-code drag-and-drop editor with 50+ field types, conditional logic, calculations and scoring
- Send responses straight to Airtable, Notion, Google Sheets, HubSpot, Salesforce or a webhook
- Collect payments inside the form through Stripe, with no commission added by Fillout
- Book appointments with Fillout Scheduling, generate PDFs and collect signatures
- Automate the follow-up with approval workflows, custom emails and Slack notifications, including AI steps that summarize, classify or extract
- Publish and measure: public link, QR code, popup, slider, side-tab or full-screen embed, custom domain, summary page and analytics
When to use Fillout / When not to
A quick filter to help you decide if Fillout is the right fit.
When to use Fillout
- Teams that collect the same data over and over: leads, job applications, event registrations, customer feedback and orders.
- Airtable, Notion and SmartSuite users who want responses to land directly in the database they already work in.
- Organizations that want to invite everyone without per-seat billing, since seats are unlimited on every plan.
- Buyers with security requirements: SOC 2 Type 2, SSO, granular permissions, audit logs and EU hosting are all documented.
- Public-sector, legal-aid and nonprofit teams, the kind of customers featured on the site (Fairfax County elections, A2J Tech legal kiosks, associations).
- No-code builders and automation consultants who assemble forms, integrations and workflows for clients.
When not to use Fillout
- Anyone who needs a native mobile app: Fillout is web-only, with no iOS or Android application.
- Users looking for a browser extension or a desktop application, neither of which exists.
- Small budgets that require EU data residency: EU hosting starts at the Team plan ($300 per month) and must be requested from support.
- Existing accounts that expect their past submissions to follow them to the EU region: they do not migrate, and Zite Databases and Zite Apps become unavailable there.
- Procurement teams that need a signed Data Processing Agreement or a written commitment on model training before they can sign: neither is published.
- Teams on entry plans that need form analytics, drop-off tracking or a custom domain, which start at the Business plan ($75 per month).
- Anyone under 18: the minimum age set by the terms is 18.
How to use Fillout
A typical end-to-end flow, from setup to results.
- Try the AI Form Builder straight away: it generates a form from a prompt with no sign-up needed.
- Create an account on Fillout to save, publish and manage your forms.
- Pick a starting point: describe the form you want, paste your questions, import an existing Google Form, or start from a PDF.
- Choose a theme while the form is being generated, or start from a blank form.
- Refine everything in the no-code drag-and-drop editor, or keep using the AI tools to rework questions and design.
- Set the logic: page logic, condition groups, field validation, calculations and scoring, answer piping.
- Configure languages: pick a default language, enable translations and add the languages your respondents need.
- Connect your integrations from the form itself (Airtable, Notion, Google Sheets, HubSpot, a webhook, and more).
- Publish through a public link, a QR code, an embed or a custom domain.
- Track results on the Results page, the summary page and analytics, export to CSV, and switch on prebuilt workflows in one click or build your own.
Pros & Cons
Pros
- A genuinely generous, permanent free plan: unlimited forms, unlimited seats, 1,000 responses per month, with payments, scheduling, PDF generation, workflows and conditional logic already included.
- No per-seat charge on any tier. The pricing page puts it plainly: no per-seat charges, invite your whole company for free.
- Broad functional coverage under a single subscription: forms, scheduling, payments, PDF, workflows and signatures.
- 50+ named native integrations and 4,000+ through partners, with the REST API and webhooks available from the free plan onward.
- Serious security posture: SOC 2 Type 2, encryption in transit and at rest, daily encrypted backups, a bug bounty, and a public subprocessor list stating each vendor's country and its access to submission data.
- Configurable data residency across the United States, the EU, the United Kingdom, Australia and Canada, plus 36 form languages and multilingual translation for respondents.
- Announced discounts for nonprofits, students, startups and educational institutions, from a publisher that states it has been profitable for a year with negative lifetime burn.
Cons
- No mobile app on iOS or Android, no browser extension and no desktop application: Fillout is web-only.
- EU hosting starts at the Team plan ($300 per month) and requires a manual request to support; the switch does not migrate submissions already collected and makes Zite Databases and Zite Apps unavailable.
- No Data Processing Agreement is published, nor announced as available on request, even though GDPR compliance is claimed on the site.
- No general statement on training models with customer data; the only explicit commitment covers data obtained through Google Workspace APIs, and the switch that disables AI features is reserved for the Enterprise plan.
- The privacy policy states that the service is only intended for residents of the United States, which the rest of the site contradicts through EU hosting, the GDPR page and the Article 27 representative.
- Form analytics, drop-off rates, Meta Pixel, partial submissions and a custom domain start at the Business plan ($75 per month), and multilingual translation is limited to Business and Enterprise.
- Response quotas are tight at the low end (1,000 per month on Free, 2,000 on Starter, 5,000 on Pro), the displayed prices assume an annual commitment, and support is 24/5 with priority support only from Business.
Pricing & Plans
Fillout offers a permanent free plan, with unlimited forms, unlimited seats and 1,000 responses per month. The lowest paid entry point is the Starter plan at USD 15 per month on an annual commitment, that is USD 180 billed annually against a USD 228 list price. Above it, Pro is USD 40 per month annually (USD 480 per year), Business USD 75 per month annually (USD 900 per year), and Team USD 300 per month or USD 3,000 per year. Enterprise pricing is quoted on request, as a flat monthly or annual fee rather than per seat or per submission. Seats are unlimited on every tier, subscriptions can be cancelled at any time, and no free trial is advertised since the free plan is the entry point. Payments collected through Stripe carry no commission added by Fillout.
- unlimited forms
- unlimited seats
- 1
- 000 responses per month
- multi-page forms
- embeds
- payments
- answer piping
- everything in Free
- 2
- 000 responses per month
- all question types
- custom endings and multiple endings
- login forms
- redirect on completion
- CAPTCHA
- everything in Starter
- 5
- 000 responses per month
- custom emails
- complete branding removal
- custom share links
- custom fonts and favicon
- custom CSS
- everything in Pro
- unlimited responses
- form analytics
- custom domain
- custom code and HTML block
- partial submissions
- pre-fetch
- duplicate prevention
- Forms Business plus Zite Business (800 AI credits per month
- 1
- 000
- 000 integration credits per month) and Databases Business
- unlimited seats
- granular permissions
- Salesforce integration
- enforced 2FA
- the full Team bundle plus SSO
- 1
- 000
- 000+ database records
- unlimited workflow runs
- audit logs
- dedicated support
- unlimited revision history
- abandonment recovery
- drop-off notifications
- Clearbit enrichment
- dynamic shortening
- autofill
- Google Maps address autocomplete
- email validation
- email and SMS one-time passcodes
Data, GDPR & hosting
A consolidated view of how Fillout handles your data.
GDPR overview
GDPR is addressed explicitly. A dedicated help page states that Fillout complies with the GDPR framework, and Prighter Group is appointed as Article 27 representative in the EU. The privacy policy, last modified October 7, 2025, lists the rights of access, rectification, erasure, restriction, portability and objection, plus the right to complain to a supervisory authority and to withdraw consent. Requests get a reasonable-effort answer within 45 days, extendable to 90 with written notice, and forms, responses or user data are permanently deleted, backups included, within the same 45 days. Transfers outside the EU rely on the European Commission's standard contractual clauses, subprocessors are listed publicly with their country and their access to submission data, and EU hosting is available from the Team plan on request. GDPR contact: privacy@fillout.com. One gap: no Data Processing Agreement is published, nor announced as available on request.
Who owns the data?
The service is published by Restly, Inc., d.b.a. Zite, under a privacy policy last modified on October 7, 2025. Data submitted through a form belongs to the form creator: Fillout states it is not responsible for the content of any form, or of any response submitted to it, and that you alone are responsible for your own data storage practices. The terms grant Fillout a limited right to delete, edit, modify, reformat, excerpt or translate your User Content, solely to provide the service. You can export every response to CSV and delete a form, a single response or your account at any time. Fillout states it does not sell data, and Enterprise customers can opt for external storage only, so responses never sit on Fillout servers.
Reuse rights
As the form owner you keep control of the responses you collect: you can read, export to CSV, replicate to your own tools and delete them without asking permission, and you may choose to store submissions entirely outside Fillout. On its own side, Fillout collects account data (name, email, an optional username and password) and non-personal data (IP address, browser type, domain names, access times); payment details go to Stripe and, in the policy's words, are not collected or stored by Fillout. The EU legal bases claimed are consent, contractual necessity, legal obligation and legitimate interest, the latter covering product development, internal analytics, and service security and performance. Data is shared with the publicly listed subprocessors, with affiliates, with a successor in the event of a merger, and with authorities. CCPA categories are declared collected but never sold, and Fillout states it does not track users over time and across third-party websites to serve targeted advertising. On the AI side, the declared subprocessors are OpenAI and Microsoft Azure (audio transcription, opt-in) and Anthropic for the Zite editing experience. The only explicit training commitment concerns Google Workspace: data obtained through those APIs will not be used to develop, improve or train generalized AI or machine learning models. Nothing more general is said about training models on customer data.
Data retention & training
Hosting summary
Fillout is hosted on Amazon Web Services through Render.com. By default, submissions are stored and processed in the United States. EU hosting and storage of respondent data are available from the Team plan onward, on request to support after upgrading. The Enterprise page states that Fillout supports several hosted deployment regions, including the USA, the EU, the UK, Australia and Canada, the last two being available to Enterprise customers when the agreement provides for it. Transfers to and from the EU are covered by the standard contractual clauses approved by the European Commission. Data is encrypted in transit over TLS and HTTPS, encrypted at rest and replicated for durability, with daily encrypted and point-in-time backups on Render and a standby environment in another AWS region in case of a regional outage. Enterprise customers can choose external storage only, in which case data never sits on Fillout servers. Two limits on the EU switch: submissions already collected do not migrate, and Zite Databases and Zite Apps become unavailable.
Where Fillout works
Country-level availability.
Not available in
Things to keep in mind
Risks and trade-offs to weigh before adopting Fillout.
- GDPR compliance is claimed in writing, yet no Data Processing Agreement is published or announced as available on request. Ask for one before processing personal data at scale.
- Fillout takes no general position on whether customer data is used to train AI models. The only explicit commitment is that data obtained through Google Workspace APIs will not be used to develop, improve or train generalized AI or machine learning models.
- The declared AI subprocessors are based in the United States (OpenAI, Anthropic), except for EU-hosted customers, who are served by Microsoft Azure. Cloudflare is listed as a worldwide subprocessor with access to submission data.
- A clause of the privacy policy states that the services are only intended to be used inside the United States by residents of the United States aged 18 or over, which EU hosting, the GDPR page and the Article 27 representative contradict. Get clarity in writing if you operate outside the United States.
- EU hosting is not self-service: it requires the Team plan at minimum plus a manual request to support, it does not move submissions already collected, and it disables Zite Databases and Zite Apps.
- The organization-wide switch that turns off all AI features is an Enterprise privilege. On lower plans, AI features cannot be centrally disabled.
- You remain accountable for the responses you collect: Fillout states it is not responsible for the content of any form or of any response submitted to it. The terms also impose AAA arbitration in Chicago with a class-action waiver, unless you opt out in writing within 30 days at privacy@fillout.com.
Setup & Integrations
Technical difficulty
Low for the standard case. Fillout is a no-code tool with a drag-and-drop editor, and the AI Form Builder generates a first form without even signing up; testimonials describe multi-page forms built in minutes. Integrations are connected from the interface, without code. Technical skills become useful for custom CSS, custom code, the HTML block, webhooks, the REST API, dynamic data pulled from an API and SAML SSO. A few operations go through support: EU hosting, SSO providers other than G Suite, and the AI switch. Support runs 24/5 by chat and email, with an answer announced within one business day.
Deployment
Integrations
Supported languages
Behind Fillout
Fundraising
Social
Resources
All the official URLs gathered for verification and reference.
Alternatives
Tools that compete with or complement Fillout.
Frequently asked questions
What is Fillout?
Can I create a form with AI?
Do I have to pay to use the AI features?
How many forms can I create?
What does the cheapest paid plan cost?
What happens if I exceed my response quota?
Where is my data hosted, and how is it protected?
Is Fillout GDPR compliant?
How do I delete my data?
Is there an API or a mobile app?
Should you pick Fillout?
Fillout is a mature and unusually broad form builder. Six product bricks sit under one subscription (forms, scheduling, payments, PDF, workflows and signatures), next to 50+ native integrations, a documented REST API and SOC 2 Type 2 certification. Its free plan is remarkably complete, and no tier charges per seat, which makes the tool easy to roll out across an entire organization.
The AI layer is real, but it should be read for what it is: assistance with creation rather than the heart of the product. Generating a form from a prompt, a Google Form or a PDF removes the blank-page moment, and AI steps in workflows summarize, classify or extract information from submissions. The lasting value remains the no-code editor, the logic engine and the integrations.
Three points deserve scrutiny before signing. No Data Processing Agreement is published or announced as available on request, even though the site explicitly claims GDPR compliance and appoints an Article 27 representative. Fillout takes no general position on training models with customer data, the only explicit commitment covering data obtained through Google Workspace APIs. And EU hosting is not self-service: it starts at the Team plan at USD 300 per month, has to be requested from support, does not move submissions already collected and disables Zite Databases and Zite Apps. A clause of the privacy policy also restricts the service to residents of the United States, which EU hosting, the GDPR page and the EU representative plainly contradict.
For a team that collects data at volume and wants payments, scheduling and automation in the same place, Fillout is a strong and fairly priced choice. For a buyer with strict procurement requirements on data processing, the paperwork is not there yet: ask for it in writing.
- Choosing a selection results in a full page refresh.
- Opens in a new window.