Typeform

Conversational forms and surveys with AI-powered features

Pixis

Codeless AI infrastructure for automated performance marketing optimisation

Typeform

Strong

20/25

Pixis

Caution

9/25

Score Breakdown

DimensionTypeformPixis

Data Residency

Where is your data stored and processed?

Typeform: Customer data is hosted on AWS EU infrastructure by default, providing a clear EU data residency story.

Pixis: Primary data processing in US infrastructure. Limited EU data residency options. European advertisers transferring audience data to Pixis must execute SCCs and conduct transfer impact assessments under GDPR.

4/5

Customer data is hosted on AWS EU infrastructure by default, providing a clear EU data residency story.

2/5

Primary data processing in US infrastructure. Limited EU data residency options. European advertisers transferring audience data to Pixis must execute SCCs and conduct transfer impact assessments under GDPR.

Legal Jurisdiction

Which laws govern the company and your data?

Typeform: Incorporated as a Spanish SL under EU law with no US parent company, meaning no CLOUD Act exposure.

Pixis: Incorporated in Delaware, US. Subject to the CLOUD Act. GDPR DPA available contractually, but US jurisdiction means US legal process can compel data disclosure. Indian-founded with US corporate structure increases GDPR transfer complexity.

5/5

Incorporated as a Spanish SL under EU law with no US parent company, meaning no CLOUD Act exposure.

2/5

Incorporated in Delaware, US. Subject to the CLOUD Act. GDPR DPA available contractually, but US jurisdiction means US legal process can compel data disclosure. Indian-founded with US corporate structure increases GDPR transfer complexity.

Data Retention & Training

Is your data used for model training?

Typeform: No AI training on user data; configurable data retention and deletion available to customers.

Pixis: Campaign and audience data is used to train and optimise customer-specific AI models. Data practices for model training should be reviewed carefully in the DPA before deployment. Opt-out mechanisms for data use in training are not prominently documented.

4/5

No AI training on user data; configurable data retention and deletion available to customers.

2/5

Campaign and audience data is used to train and optimise customer-specific AI models. Data practices for model training should be reviewed carefully in the DPA before deployment. Opt-out mechanisms for data use in training are not prominently documented.

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

Typeform: Holds SOC 2 Type II certification; ISO 27001 is not currently listed on their trust page.

Pixis: No published ISO 27001, SOC 2 Type II, or other independent third-party security certifications as of early 2026. GDPR compliance is self-asserted. Absence of independent audits is a significant concern for enterprise procurement teams processing EU personal data.

3/5

Holds SOC 2 Type II certification; ISO 27001 is not currently listed on their trust page.

1/5

No published ISO 27001, SOC 2 Type II, or other independent third-party security certifications as of early 2026. GDPR compliance is self-asserted. Absence of independent audits is a significant concern for enterprise procurement teams processing EU personal data.

Regulatory Fit

Suitability for regulated industries and professional services

Typeform: Strong fit for EU regulated businesses due to EU incorporation, EU data residency, and DPA availability.

Pixis: Requires significant due diligence for European deployment. US jurisdiction, absence of published security certifications, and the sensitivity of advertising audience data (which may include special category data proxies) make this a high-risk processor choice for GDPR-regulated organisations.

4/5

Strong fit for EU regulated businesses due to EU incorporation, EU data residency, and DPA availability.

2/5

Requires significant due diligence for European deployment. US jurisdiction, absence of published security certifications, and the sensitivity of advertising audience data (which may include special category data proxies) make this a high-risk processor choice for GDPR-regulated organisations.

Total Score

20/25

9/25

Best For

Typeform

Best for teams that prioritise data residency (scores 2/5) and need a review required-tier tool.

Pixis

Best for EU-headquartered organisations needing maximum data sovereignty; regulated industries (AEPD, ICO); privacy-conscious teams who need strong data retention controls; teams on a tight budget.

Detailed Comparison

Pixis vs Typeform: Trust & Compliance Comparison

Pixis (Pixis, US) scores 9/25 overall with a Review Required (Caution) trust badge. Codeless AI infrastructure for automated performance marketing optimisation. Typeform (Typeform, ES) scores 20/25 with a Silver (Strong) trust badge. Conversational forms and surveys with AI-powered features.

Dimension-by-Dimension Breakdown

#### Data Residency

Typeform leads with 4/5 vs 2/5.

●Pixis (2/5): Primary data processing in US infrastructure. Limited EU data residency options. European advertisers transferring audience data to Pixis must execute SCCs and conduct transfer impact assessments under GDPR.

●Typeform (4/5): Customer data is hosted on AWS EU infrastructure by default, providing a clear EU data residency story.

#### Legal Jurisdiction

Typeform leads with 5/5 vs 2/5.

●Pixis (2/5): Incorporated in Delaware, US. Subject to the CLOUD Act. GDPR DPA available contractually, but US jurisdiction means US legal process can compel data disclosure. Indian-founded with US corporate structure increases GDPR transfer complexity.

●Typeform (5/5): Incorporated as a Spanish SL under EU law with no US parent company, meaning no CLOUD Act exposure.

#### Data Retention & Training

Typeform leads with 4/5 vs 2/5.

●Pixis (2/5): Campaign and audience data is used to train and optimise customer-specific AI models. Data practices for model training should be reviewed carefully in the DPA before deployment. Opt-out mechanisms for data use in training are not prominently documented.

●Typeform (4/5): No AI training on user data; configurable data retention and deletion available to customers.

#### Certifications

Typeform leads with 3/5 vs 1/5.

●Pixis (1/5): No published ISO 27001, SOC 2 Type II, or other independent third-party security certifications as of early 2026. GDPR compliance is self-asserted. Absence of independent audits is a significant concern for enterprise procurement teams processing EU personal data.

●Typeform (3/5): Holds SOC 2 Type II certification; ISO 27001 is not currently listed on their trust page.

#### Regulatory Fit

Typeform leads with 4/5 vs 2/5.

●Pixis (2/5): Requires significant due diligence for European deployment. US jurisdiction, absence of published security certifications, and the sensitivity of advertising audience data (which may include special category data proxies) make this a high-risk processor choice for GDPR-regulated organisations.

●Typeform (4/5): Strong fit for EU regulated businesses due to EU incorporation, EU data residency, and DPA availability.

Certifications at a Glance

Certification	Pixis	Typeform
GDPR	No	Yes
SOC 2 Type II	No	Yes

Overall Verdict

Typeform has a clear trust advantage, scoring 20/25 compared to Pixis's 9/25. Typeform particularly excels in data residency, legal jurisdiction, data retention & training, certifications, regulatory fit.

Frequently Asked Questions

Which is better for EU compliance, Typeform or Pixis?

Typeform has a TrustKit score of 20/25 while Pixis scores 9/25. Typeform currently rates higher across data residency, legal jurisdiction, data retention, certifications, and regulatory fit.

How do Typeform and Pixis compare on data residency?

Typeform scores 4/5 for data residency (Customer data is hosted on AWS EU infrastructure by default, providing a clear EU data residency story.), while Pixis scores 2/5 (Primary data processing in US infrastructure. Limited EU data residency options. European advertisers transferring audience data to Pixis must execute SCCs and conduct transfer impact assessments under GDPR.).

Are Typeform and Pixis GDPR compliant?

Both tools are assessed across five compliance dimensions. Typeform has a regulatory fit score of 4/5 and Pixis scores 2/5. Check the full comparison above for a detailed breakdown.

Explore Each Tool