Form builders look interchangeable and are not. The differences that matter arrive later: what happens to the data, whether it reaches your other systems, and whether you can legally collect what you are asking for.
That last point eliminates several options for some businesses before features are even considered, so it is worth handling first.
Three Questions First
What data are you collecting? A newsletter signup and a patient intake form are different products. If you handle health data, financial details or anything special-category under GDPR, you need a provider that will sign the right agreements and, in some cases, one that is HIPAA-eligible.
Where does the response need to go? If submissions must reach your CRM, email platform or spreadsheet automatically, the integration is the feature. A beautiful form that emails you a notification you then retype is not saving anyone time.
How many responses, realistically? Nearly every tool prices by monthly submissions. Free tiers run out faster than people expect, usually at exactly the moment a campaign works.
The Twelve
1. Typeform
One question at a time, conversational, and genuinely better completion rates for longer forms because it does not present a wall of fields.
Suits: surveys, applications, quizzes, anything where completion rate matters. Watch: response limits are the main constraint and the pricing steps up sharply. Slower to fill for someone who just wants to submit a short form quickly.
2. Google Forms
Free, unlimited responses, straight into Google Sheets. Named second because it is the honest answer for a large share of small business needs.
Suits: internal forms, simple signups, event registration, anything where appearance is secondary. Watch: limited branding, basic logic, and it looks like Google Forms.
3. Jotform
The most feature-complete of the mainstream options — extensive templates, conditional logic, payment collection, e-signatures, PDF generation, and HIPAA-compliant plans available.
Suits: businesses with genuine form complexity, healthcare-adjacent work. Watch: the interface is busy compared with Typeform.
4. Tally
Notion-like editing, with a free tier that is unusually generous — unlimited forms and responses on the free plan historically, which is rare.
Suits: small businesses wanting something modern without a subscription. Watch: newer, smaller ecosystem.
5. Fillout
Strong integrations, particularly with Airtable, Notion and databases, with conditional logic and a good free tier.
Suits: teams whose responses need to land in a structured database.
6. Gravity Forms (WordPress)
A WordPress plugin, so forms live on your own site with your own data. One-time or annual licence rather than per-response pricing.
Suits: WordPress sites, anyone who wants submissions stored on their own hosting. Watch: you own security, spam handling and backups.
7. WPForms
The friendlier WordPress alternative to Gravity Forms, with a drag-and-drop builder and a limited free version.
8. Formstack
Enterprise-leaning, with strong compliance credentials, workflow approvals and document generation.
Suits: regulated industries needing audit trails and approvals.
9. Paperform
Forms that read like pages, with payments and booking built in.
Suits: businesses selling or taking bookings through a form.
10. Microsoft Forms
Included with Microsoft 365. If you already pay for it, check here before buying anything.
Suits: internal surveys and simple collection for Microsoft organisations.
11. Formspree or Basin
Backend-only — you build the form in your own HTML and these handle submission, spam filtering and notification. No builder, no hosted page.
Suits: developers and anyone with a custom-designed site who wants full control of the markup.
12. Cognito Forms
Strong conditional logic and calculations, with a capable free tier and HIPAA options.
Suits: forms with pricing calculations or complex branching.
How They Compare
| Tool | Free tier | Payments | HIPAA option | Best for |
|---|---|---|---|---|
| Typeform | Limited | Yes | Higher tiers | Completion rate, surveys |
| Google Forms | Unlimited | No | No | Simple, free, internal |
| Jotform | Limited | Yes | Yes | Complex forms, healthcare |
| Tally | Generous | Yes | No | Modern, low cost |
| Fillout | Good | Yes | Limited | Database integrations |
| Gravity Forms | No | Yes | Self-managed | WordPress, own data |
| WPForms | Limited | Yes | Self-managed | WordPress, easier |
| Formstack | Trial | Yes | Yes | Regulated, approvals |
| Paperform | Trial | Yes | No | Selling via forms |
| Microsoft Forms | With M365 | No | Via M365 | Microsoft organisations |
| Formspree | Limited | No | No | Custom-coded sites |
| Cognito Forms | Good | Yes | Yes | Calculations, logic |
Response limits and pricing change regularly. Verify current free tier limits specifically — that is what you will hit, not the feature list.
The Compliance Part
Forms are where most small businesses collect personal data, which makes them where most data protection obligations begin.
You need a lawful basis. Under GDPR and UK GDPR, collecting personal data requires one. For marketing signups that generally means consent — freely given, specific and unbundled. A pre-ticked box is not consent, and neither is burying it in terms acceptance.
Consent must be recorded. Store what they agreed to and when. You cannot reconstruct this later, and it is what you produce if anyone asks.
You need a data processing agreement with your form provider, since they process personal data on your behalf.
Check data residency if that matters to your position.
Special-category data — health, biometric, racial or ethnic origin, political opinions, religious beliefs, trade union membership, sex life or sexual orientation — carries higher requirements. If you are collecting any of it, take advice before choosing a tool.
US healthcare data requires a HIPAA-eligible provider with a Business Associate Agreement. Jotform, Formstack and Cognito Forms offer this; Google Forms and Typeform’s standard tiers do not.
Set a retention period. Keeping every submission forever is not a strategy and is difficult to justify.
What Actually Improves Completion
- Fewer fields. The most reliable lever available. Every field you remove increases completion. Ask what you genuinely need to act on today.
- Conditional logic. Show fields only when relevant, so the form appears shorter than it is.
- Mobile testing. Most submissions come from phones. Test on one before publishing.
- Clear labels above fields. Placeholder-only labels disappear when typing and cause errors.
- Honest expectations. “Takes about two minutes” or “6 questions” reduces abandonment.
- Spam protection that is not a CAPTCHA. Honeypot fields and time-based checks catch most bots without punishing humans.
Common Mistakes to Avoid
- Asking for data you will not use. Every unnecessary field costs completions and adds compliance burden.
- No data processing agreement. Required when a provider handles personal data for you.
- Pre-ticked consent boxes. Not valid consent under GDPR.
- Not recording consent. You need the record, not just the checkbox.
- Using a non-HIPAA tool for health data in the US. A genuine legal exposure, not a technicality.
- Hitting free tier response limits mid-campaign. Check the limit before you drive traffic to it.
- Only emailing yourself the submission. Connect it to where the work actually happens.
- Never testing the notification. Submit your own form. Notifications land in spam more often than you would think.
- No retention policy. Decide how long you keep submissions and delete accordingly.
FAQs
What is the best free form builder?
Google Forms for unlimited responses and simplicity. Tally for something more modern with a generous free tier. Cognito Forms and Fillout both have capable free plans if you need logic or integrations.
Is Typeform worth paying for?
If completion rate matters — longer surveys, applications, qualification forms — the one-question-at-a-time format genuinely helps. For a three-field contact form it is unnecessary and slower for the user.
Do I need a HIPAA-compliant form builder?
If you are a US covered entity or business associate handling protected health information, yes, with a Business Associate Agreement in place. Jotform, Formstack and Cognito Forms offer HIPAA-eligible plans.
Do form builders comply with GDPR?
The tool is part of it; your configuration is the rest. You need a lawful basis, unbundled consent where required, a data processing agreement with the provider, a retention policy and a privacy notice. No tool provides compliance on its own.
Where should form submissions go?
Wherever the work happens — your CRM, email platform, project tool or a spreadsheet. Email notification alone means someone retypes the data, which is where errors and delays come from.
How many fields should a form have?
As few as you can act on. If a field will not change what you do next, remove it. Follow-up questions can come after the first contact.
Key Takeaways
- Check what your Google or Microsoft subscription already includes before buying.
- Response limits, not features, are what you will actually hit.
- Health data in the US needs a HIPAA-eligible provider and a signed BAA.
- Record consent, not just the tick — you cannot reconstruct it later.
- Removing fields is the most reliable way to increase completions.
Before You Choose
Write down what you will do with each field. Delete any field that does not change your next action. Then check whether Google Forms or Microsoft Forms already covers what remains — for many small businesses it does.
For related decisions, see our guides to analytics tools for measuring what happens after submission, and e-signature software if what you need is a signed document rather than a form.