WooCommerce Post-Purchase Survey: 7 Questions, When to Ask and What to Do Next Security
Security you can check line by line
Surveys and answers are stored on our server in the EU, behind Cloudflare. Two-factor sign-in works on every plan, teams get SSO and roles, and the database is backed up every night.
Free plan without a time limit. No credit card needed.
- EU serverAccounts, surveys and answers are stored in the EU.
- HTTPSOn the site, surveys, shared reports and the API.
- Two-factor sign-inOn every plan, Free included.
- Nightly backupsKept for 30 days on a separate server.
Where your data lives
One server in the EU, Cloudflare in front of it and separate storage for files.
- A server in the EUThe app and the database run on our server in the European Union.
- Cloudflare in frontEvery request passes through Cloudflare before it reaches our server.
- Files on two serversFiles respondents upload are copied across two storage servers. Earlier versions of a file are kept for 90 days.
- Watched at any hourMonitoring alerts our team about errors and outages around the clock.
How the data is protected
-
HTTPS everywhere
The builder, published surveys, shared reports and the API work only over HTTPS. A plain http:// address redirects to https://.
-
Passwords and secrets
Passwords and API keys are stored only as hashes. SMTP passwords, storage keys and two-factor secrets are encrypted with AES-256.
-
An activity log no one edits
See who changed, published or deleted a survey, who exported or deleted answers and who changed roles. Exports to CSV. Premium and Enterprise.
Who gets in
From a single account to a whole company, only the right people open your surveys.
-
Two-factor sign-in
Codes from an authenticator app plus eight recovery codes, on every plan. A leaked password alone opens nothing.
How to turn on 2FA -
SSO over OpenID Connect
Your team signs in through Okta, Microsoft Entra ID, Google Workspace, Keycloak or another OIDC provider. The owner can turn password sign-in off. Premium and Enterprise.
How to set up SSO -
Roles and folders
Owner, admin and member roles out of the box. On Premium and Enterprise, build your own roles with permissions for each folder.
-
Sign-in protection
After a series of failed sign-ins, the IP address is blocked for 24 hours. Surveys can turn on Google reCAPTCHA to keep bots out.
Backups and recovery
Copies every night and a way back after a mistake.
- Every nightA full copy of the database, then files and configuration.
- On a separate serverThe copies go to another server and are kept for 30 days.
- Survey versionsGo back to an earlier published version of a survey.
- Deleted, then restoredDeleted surveys and answers can be brought back.
Privacy and GDPR
-
Stored in the EU
Accounts, surveys and answers are stored on our server in the European Union.
-
Anonymous surveys
Turn on Anonymous responses in the survey settings, and answers are collected anonymously. On every plan.
-
Export and delete any time
Export answers whenever you need them, on every plan, and delete answers or whole surveys when you decide.
Data must stay inside your company?
Our team installs SurveyNinja in Docker on your own servers. Survey data stays inside your perimeter, and your team keeps backups, monitoring and network access.
Questions and answers
Where is SurveyNinja data stored?
On our server in the European Union. Uploaded files are copied across two separate storage servers, backups go to another server, and every request reaches us through Cloudflare.
How does SurveyNinja help with GDPR?
Answers are stored on a server in the EU, a survey can collect answers anonymously, and you can export or delete answers at any time. When a survey collects personal data, add a consent question at the start. Send GDPR questions to team@surveyninja.io.
How are passwords and secrets protected?
Every connection uses HTTPS. Passwords and API keys are stored only as hashes, and secrets such as SMTP passwords and two-factor keys are encrypted with AES-256.
Can we see who did what in our workspace?
Yes. On Premium and Enterprise the activity log records survey changes, answer exports and deletions, and changes to members, roles and folder access. No one, the owner included, can edit entries, and the log exports to CSV.
Can we control who opens survey data?
Yes. Use owner, admin and member roles, your own roles with permissions for each folder on Premium and Enterprise, SSO over OpenID Connect and two-factor sign-in, which works on every plan.
Can SurveyNinja run on our own servers?
Yes. Our team installs SurveyNinja in Docker on your servers, and survey data stays inside your perimeter. Backups, monitoring and network access stay with your team.
Protected from the first survey
Two-factor sign-in, HTTPS and nightly backups come with every free account. Questions from your IT team go to team@surveyninja.io.