7 Survey Tools That Let Respondents Upload Files (2026)

BlockSurvey leads this list because file uploads are encrypted by default and respondents do not sign in to anything. The seven tools covered are BlockSurvey, Formsite, Jotform, Tally, Formstack, SurveyMonkey, and Google Forms. Two differences decide which one fits a given project: whether respondents must create or sign in to a third-party account, and whether uploaded files are encrypted by default wherever they are stored. Most of these tools let respondents attach files without an account. Only Google Forms forces respondents to sign in. Only BlockSurvey and Formsite document encryption that applies to every upload by default.

How we evaluated these tools

We checked each vendor's own published file upload documentation and feature pages, captured on 2026-07-06. We recorded what each tool says about maximum file size, whether respondents must sign in, where files are stored, default encryption, and HIPAA availability. Where a vendor does not state a fact, we marked it Not documented rather than guessing. Pricing figures are intentionally excluded; only feature presence is reported.

File upload survey tools compared

Tool	Max file size	Respondent sign-in required	Encrypted by default	HIPAA availability
BlockSurvey	10 MB	No	Yes	Available
Formsite	Configurable	No	Yes (SSL/TLS in transit, at rest)	Not documented
Jotform	Configurable	No	On HIPAA plans	Available (Gold/Enterprise, BAA)
Tally	10 MB (free); unlimited on Pro	No	Not documented	Not documented
Formstack	Not documented	No	Available (encryption feature)	Available (BAA)
SurveyMonkey	16 MB	No	Not documented	Not documented
Google Forms	Configurable	Yes (Google Account)	Not documented	Not documented

1. BlockSurvey

BlockSurvey's File Upload question type lets respondents attach resumes, receipts, images, and other documents directly in the survey. Each file can be up to 10 MB, and the survey creator sets a maximum number of files per question. Respondents do not sign in to any third-party account to upload.

Uploads are encrypted by default and can be downloaded from the Responses section as a ZIP file. The creator can turn on public file access, in which case those public files are not encrypted. BlockSurvey also offers HIPAA-compliant survey software. Best for teams collecting sensitive files from people outside their organization.

2. Formsite

Formsite's File Upload item accepts almost any file type, including images, documents, PDFs, movies, and zip files, with the option to limit the number, size, and type of files. Respondents select a file from their device, or take a photo on mobile. No sign-in is required to submit.

Formsite states that all submissions are protected in transit with SSL/TLS and encrypted at rest. Uploaded files can be routed to Google Drive, Dropbox, Box, OneDrive, or Amazon S3. The fetched feature page does not document HIPAA availability. Best for organizations that want documented at-rest encryption without a sign-in wall.

3. Jotform

Jotform's File Upload element is available in both Classic and Card forms. The creator sets a minimum and maximum file size in KB and restricts allowed file extensions. Respondents upload through the form itself with no separate account.

Files count toward the account's upload storage space. Jotform offers HIPAA-enabled forms on its Gold and Enterprise plans, with a signed Business Associate Agreement and encrypted form data for covered entities. Best for healthcare teams that need HIPAA support and a mature form builder.

4. Tally

Tally's file upload block lets respondents attach images, PDFs, videos, audio, and documents without signing up. The free plan supports individual files up to 10 MB, and Tally Pro removes the per-file size limit. The creator can set a max file size, allowed file types, and a min and max number of files.

Tally is based in Europe and complies with GDPR. The fetched documentation does not state that uploads are encrypted, and does not mention HIPAA. Best for creators who want a free, no-sign-in file upload form with generous defaults.

5. Formstack

Formstack lists File Uploads as a standard forms feature, and respondents submit through a web form with no separate account. The fetched Formstack pages do not document a specific maximum file size.

Formstack markets HIPAA-supporting forms with a standard Business Associate Agreement, data encryption during transit and at rest, user-level permissions, and audit logging. Best for healthcare and regulated organizations that already use, or need, a Formstack workflow.

6. SurveyMonkey

SurveyMonkey's File Upload question lets survey takers attach files to their response, with a maximum file size of 16 MB. The feature is gated behind a paid plan, so you must check your plan to use it. Respondents do not sign in to a SurveyMonkey account to answer.

Uploaded files are not included in data exports, and the only way to delete a file is to delete the entire response. The fetched help page does not document whether uploads are encrypted, and does not mention HIPAA. Best for teams already on SurveyMonkey who only need small attachments.

7. Google Forms

Google Forms has a file upload question type, but it requires respondents to sign in to a Google Account. Google states verbatim: "To answer this question, responders need to sign in to a Google Account." Uploaded files are stored in a new folder on the form owner's Google Drive.

The question is unavailable when the form lives on a shared drive or when an administrator has turned on Data Loss Prevention. Google does not document whether uploaded files are encrypted. Best only for internal teams where every respondent already has a Google account.

How to pick a file-upload survey tool

If you collect files from people outside your organization, pick a tool that does not require respondent sign-in, which rules out Google Forms. If you need HIPAA, confirm the plan locks it down and ships a Business Associate Agreement, as Jotform and Formstack do. If you need uploads encrypted by default wherever they live, BlockSurvey is the clearest choice, with Formsite a close second on documented at-rest encryption.

If your priority is collecting sensitive files without making respondents sign in to a third-party account, BlockSurvey's secure file upload in surveys documents the encryption and size defaults in depth.