100% GDPR-compliant data protection
Legally compliant and secure online surveys
When DAX-listed companies or public-sector organisations conduct sensitive employee surveys or elections with LamaPoll, there is one compelling reason: data protection.
We know that you want to create and run online surveys without having to worry about the complex issues of data protection and data security. We take GDPR-compliant data handling very seriously, which is why we are one of the leading providers of secure online surveys.

- Your data never leaves Germany. It is stored exclusively on our own servers in Germany.
- All our subcontractors are based in Germany. Your data is not routed through international corporations.
- No CLOUD Act. We do not use US cloud services — not even their German data centres. Every service provider involved in processing your data is subject to German law.
- Support with data protection impact assessments under Article 35 GDPR. Our team understands the requirements and helps you prepare the process efficiently.
- Do the data protection officer and works council need to be involved? No problem. We will be happy to provide all the necessary documents (records of processing activities and technical and organisational measures). We can also provide supporting arguments if required. Contact us!
- Further information about data protection is available here »
Keeping your data secure
Audited and certified



- Information security is independently verified: Our information security management system is certified to ISO/IEC 27001. LamaPoll has also been audited to TISAX® Assessment Level 2.
- BSI audited: IS-Webcheck by the German Federal Office for Information Security (BSI), Allianz für Cyber-Sicherheit, a penetration testing centre, and an IS audit (back end and front end).
- Our data centres are certified to DIN ISO 27001 and BS 7799 by TÜV (certifications for IT security, data protection and availability).
- Penetration test: Would you like a comprehensive security test? Arrange a penetration test with us.
- Daily backups protect your data against loss. Both data at rest and data in transit are encrypted.
- Multi-layered safeguards protect our service against both common and lesser-known security vulnerabilities and attack vectors affecting web-based software (e.g. brute-force attacks, packet sniffing, XSRF, XSS, SQL injection and more).
- Strict coding, password and conduct policies, as well as standardised maintenance and development procedures, ensure the lasting quality and security of our service.
- Passwords are stored as cryptographic hashes based on the Blowfish algorithm and a random salt. This means no one can decrypt your password or recover it using rainbow tables.
Your participants’ anonymity
What happens to personal data?

- LamaPoll does not itself collect or store any personal data.
- Fully anonymous surveys are possible, and participants cannot be linked to their responses under any circumstances.
- Non-anonymous surveys are also possible. However, once a survey has started, it cannot be changed from anonymous to non-anonymous.
Feedback from our users
What our customers say about LamaPoll
After a thorough market analysis, we chose LamaPoll. The reasons: a German company based in Berlin, German data protection law and German servers. Working with them has been completely smooth so far, both technically and organisationally. We are very satisfied and are happy to recommend LamaPoll.
We have already been able to run several internal and external customer surveys. It was important to us to have an easy-to-learn, uncluttered tool that provides common question types and still produces attractive surveys on all devices. Data security naturally also plays a major role. LamaPoll offers all of this. 5 stars!

