Hi Deftform team,

I’m considering your AppSumo lifetime plan. Could you please confirm:

Do you use the 2021 EU SCCs despite the DPA referencing 2010?
Which subprocessors and AI providers can access responses?
Are minors’ and health data covered?
How quickly are deleted responses removed from backups and subprocessors?
Does eSignature include a verifiable audit trail?
Is Deftform itself ISO 27001 or SOC 2 certified?

Thanks!