Survey tools

AidaForm

Hosted forms and surveys from a German operator

GermanyEUFree plan Ownership reviewed, controller unresolvedHigh non-EU dependency
Visit website aidaform.com

Scope verdict

Ownership reviewed, controller unresolved

Komorebi GmbH is named in the terms and company page: Bonn HRB 28210, VAT DE364714270, Im Uckerfeld 14, 53127 Bonn, managing director Albina Zakharenko. The three-founder and bootstrapped claims do not disclose current shareholdings or voting rights. No shareholder list or ultimate-control evidence was obtained; status remains unresolved.

How we classify services

Operational dependency warning

Relies heavily on non-European providers

Current public evidence shows 10 non-European infrastructure or email dependencies across 10 providers: Amazon S3 and CloudFront, Amazon SES, Amazon Web Services, Brevo, Google, PayPal and Stripe, Verifone / 2Checkout, Zoho Mail, Zoho Mail and Mailchimp, Zoho ServiceDesk Plus Cloud. The reviewed operational path is therefore not entirely European.

Review dependencies ↓

AidaForm is a proprietary form and survey service operated by Komorebi GmbH in Bonn. It provides classic and conversational forms, quizzes, response exports, and file, audio and video answers. Expert and Ultimate add payment forms using PayPal or Stripe.

Each new or copied form can use Germany or Global response storage. AidaForm names AWS in Germany and the United States; choosing Germany for responses does not localise every account, email, support or integration flow. No self-hosted edition was established.

Pricing

Free: 100 responses/month and 500 MB. Starter, Expert and Ultimate cost $15/$30/$50 monthly, or $144/$288/$480 billed yearly ($12/$24/$40 per month), with 1,000/5,000/10,000 monthly responses and 2/5/10 GB. Prices exclude taxes; optional extensions and payment-provider fees are extra.

Data and operations

Infrastructure and email path

Verified operational dependencies, shown separately from ownership and from the service's core data hosting.

Core service hosting

Amazon Web Services

US-controlled cloud
Observed
Policy names AWS in Germany and the United States. Help offers Germany-only response storage per form, selected when creating or copying it; Global may use multiple regions. This does not cover every account, support or email data flow.

Why this matters

Reviewed evidence places Amazon Web Services in the core service path. Even when workloads stay in an EU region, the standard AWS infrastructure remains under US ultimate ownership. Treat it as the separately operated AWS European Sovereign Cloud only when the provider explicitly documents that deployment.

AWS ownership record ↗Sovereign Cloud distinction ↗

Public website

Amazon S3 and CloudFront

Non-European provider
Observed
Public website returned AmazonS3 and CloudFront headers; website and app DNS resolve to AWS addresses. The observed AMS1 edge is not proof of origin or response storage location.

Why this matters

Public DNS routes website visits through Amazon S3 and CloudFront. Visitor IP addresses and request metadata can reach this non-European provider; this does not identify the core service's data location.

Incoming business email

Zoho Mail

Non-European provider
Observed
MX 10 mx.zoho.eu · 20 mx2.zoho.eu · 50 mx3.zoho.eu

Why this matters

Published MX records route incoming business email through Zoho Mail. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.

Authorised outbound email

Zoho Mail and Mailchimp

Non-European provider
Observed
SPF authorises zoho.eu and servers.mcsv.net. This demonstrates sender configuration, not that either receives every form response.

Why this matters

This domain authorises Zoho Mail and Mailchimp to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Customer email delivery

Amazon SES

US-controlled cloud
Observed
Policy lists name and email processing in Ireland and the United States.

Why this matters

The service documents Amazon SES for customer email delivery. When selected, message content and recipient details can pass through this non-European provider. The cited source explains the configuration and location.

AWS ownership record ↗Sovereign Cloud distinction ↗

Customer email delivery

Brevo

Non-European provider
Observed
Policy lists name/email processing in the EU. The directory's separate Brevo review establishes mixed European and non-European joint control.

Why this matters

The service documents Brevo for customer email delivery. When selected, message content and recipient details can pass through this non-European provider. The cited source explains the configuration and location.

Supporting services

Zoho ServiceDesk Plus Cloud

Non-European provider
Observed
Policy lists support-message content processed in the EU by Zoho Corporation B.V.

Why this matters

The published disclosure lists Zoho ServiceDesk Plus Cloud for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.

Supporting services

Google Analytics

Non-European provider
Observed
Policy names US analytics for AidaForm's site/app and says it is not used on customers' forms.

Why this matters

The published disclosure lists Google Analytics for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.

Payment processing

Verifone / 2Checkout

Non-European provider
Observed
Subscription billing through Verifone Payments BV dba 2Checkout; policy names USA and Europe. Separate from payment forms collecting a customer's own sales.

Why this matters

When this payment method is used, Verifone / 2Checkout processes payment and billing data. This role alone does not establish access to the service's other customer content.

Payment processing

PayPal and Stripe

Non-European provider
Observed
Optional customer-configured payment forms on Expert and Ultimate; additional payment-provider terms and fees apply.

Why this matters

When this payment method is used, PayPal and Stripe processes payment and billing data. This role alone does not establish access to the service's other customer content.

Public DNS records identify visible providers and routes, not every backend location or private data-region setting.

Infrastructure checked:

More from Germany

AlcerisalfaviewBosch Smart HomeCalligra SuiteCodebergdeSEC