Cognito Forms

United States · www.cognitoforms.com · 24 vendors

Cognito Forms is a cloud-based online form builder that enables businesses to create, publish, and manage various forms. It provides tools for data collection, workflow automation, payment processing, and document generation, allowing users to streamline business processes without coding. The platform is designed to be user-friendly yet powerful enough to handle complex business operations and integrate with other applications.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 24 sub-vendors.

Insights

Last updated 2026-07-30 · revision 5

24 direct vendors, 240 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Cognito Forms exhibits high migration readiness. Its modern, cloud-native internal tech stack, primarily hosted on Microsoft Azure with additional use of Amazon S3 for storage, provides a flexible and adaptable foundation. The architecture leverages technologies like Apache Spark, C#, ETL/ELT pipelines, Medallion Architecture, REST APIs, and JSON Webhooks, indicating a service-oriented design that facilitates migration to new cloud environments or the adoption of containerized/microservices architectures. The company's established compliance with GDPR, HIPAA, CCPA, and PCI DSS, along with its EU-U.S. Data Privacy Framework certification and Data Processing Addendums, demonstrates a sophisticated understanding of regulatory requirements crucial for ensuring compliance during and after migration. Their clear data residency in US-based Azure datacenters, coupled with mechanisms for EU data transfers, provides a well-defined framework for data handling. The use of multiple payment processors (Stripe, Square, PayPal/Venmo) and integration platforms (Zapier, Microsoft Power Automate, Make) suggests vendor diversity that mitigates lock-in risks for these critical functionalities. While primarily on Azure, a migration away from Azure to a different primary cloud provider would still entail significant effort. The "Unknown" status for SOC2 and ISO 27001 certifications could pose a challenge if the target environment or new customer base requires these specific attestations. The absence of detailed financial data prevents a direct assessment of the company's capacity to fund a large-scale migration project.

Compliance

6 in-scope frameworks identified; showing 3.

CCPA — Compliant

Cognito Forms explicitly states compliance with CCPA and other US state privacy laws. Risk is low due to their privacy-by-design approach (minimal data collection, no data selling) and clear privacy controls that align with CCPA requirements.

Evidence: https://www.cognitoforms.com/legal/privacy

HIPAA (source) — Compliant

Cognito Forms offers HIPAA compliance features for healthcare customers but compliance depends on proper implementation by customers. Risk is medium because HIPAA violations can result in significant fines ($100-$50,000 per violation), and the company's compliance is dependent on customer configuration and Business Associate Agreement execution.

Evidence: https://www.cognitoforms.com/product/hipaa-compliance, https://www.cognitoforms.com/Content/Cognito%20Forms%20BAA%20Sample.pdf

PCI DSS (source) — Compliant

Cognito Forms uses third-party PCI-compliant payment processors (Stripe, PayPal, Square) and does not directly handle credit card information. This approach significantly reduces PCI DSS compliance risk as they are not in scope for most PCI requirements.

Evidence: https://www.cognitoforms.com/legal/privacy, https://www.cognitoforms.com/product/security-compliance

Financials

Three-year financials

Financial Resilience Score: 6/10

Cognito Forms demonstrates meaningful operational resilience through its bootstrapped, self-sustaining SaaS model. The absence of disclosed external venture capital funding over more than a decade of operation strongly suggests the company has achieved organic profitability or at minimum cash-flow neutrality, which is a positive indicator of financial discipline and independence from capital markets. Its recurring subscription revenue model provides predictable cash flows with low marginal delivery costs, and a user base of approximately 2 million organizations provides a broad upsell funnel from the free tier to paid plans. The company's compliance certifications (HIPAA, GDPR, CCPA) create a meaningful moat in regulated industries with higher willingness to pay and lower churn, while consistent third-party award recognition from Capterra, G2, and Software Advice supports organic customer acquisition. Stable founding leadership over 10+ years further reduces strategic and operational risk. The freemium acquisition model also reduces customer acquisition costs relative to enterprise-focused competitors. However, significant uncertainty remains due to the complete absence of public financial disclosures. Balance sheet strength, cash reserves, debt levels, and true profitability are entirely unknown. The company faces intense competition from well-capitalized rivals including Typeform, Jotform, Google Forms, and Microsoft Forms. Single-product revenue concentration, SMB customer base with inherently higher churn, and apparent small team size (estimated under 50 employees) all introduce meaningful operational and competitive risk. The score of 6 reflects a company that appears operationally stable and self-sustaining based on observable indicators, but whose true financial health cannot be verified. The lack of diversification across products, geographies, and customer segments, combined with a competitive market and unverifiable financials, prevents a higher confidence rating.

Key strengths: Bootstrapped with no disclosed external VC funding, suggesting organic profitability or cash-flow sustainability over 10+ years, Recurring SaaS subscription revenue model providing predictable cash flows, User base of approximately 2 million organizations providing broad upsell funnel, HIPAA, GDPR, and CCPA compliance certifications enabling access to higher-value regulated industry customers, Freemium acquisition model reducing customer acquisition costs, Stable founding leadership (Jamie Thomas and Jennifer Dellacroce) over 10+ years, Consistent third-party award recognition (Capterra, G2, Software Advice) supporting organic growth, Annual prepayment discounts incentivizing upfront cash collection

Risk factors: Complete absence of public financial disclosures makes true financial health unverifiable, Intense competition from well-capitalized rivals including Typeform, Jotform, Google Forms (free), Microsoft Forms (free), and Formstack, Single-product revenue concentration with no diversification buffer, SMB-heavy customer base with inherently higher churn rates than enterprise customers, Estimated small team size (under 50 employees) creating key-person and capacity risk, Primarily US-focused with no disclosed international revenue diversification, Freemium conversion rate not disclosed, making monetization efficiency unverifiable, No disclosed balance sheet data, cash reserves, or debt levels

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report