Wave
What Wave publishes, measured on their own site. Every result below links the page we found it on, or lists the addresses we checked.
- 30out of 100
- 10/10Criteria measured
- 2026-08-31Checked
Vendor site: waveapps.com · category: Accounting
✗
Data processing agreement
No data processing agreement found.
Checked 8 addresses on 2026-08-31.
Show the 8 addresses we checked
https://waveapps.com/legal/dpa– reached, no match (HTTP 404)https://waveapps.com/dpa– reached, no match (HTTP 404)https://waveapps.com/legal/data-processing-agreement– reached, no match (HTTP 404)https://waveapps.com/data-processing-agreement– reached, no match (HTTP 404)https://waveapps.com/legal/data-processing-addendum– reached, no match (HTTP 404)https://waveapps.com/legal/gdpr– reached, no match (HTTP 404)https://waveapps.com/trust/dpa– reached, no match (HTTP 404)https://waveapps.com/privacy/dpa– reached, no match (HTTP 404)
✗
Subprocessor list
No subprocessor list found.
Checked 7 addresses on 2026-08-31.
Show the 7 addresses we checked
https://waveapps.com/legal/subprocessors– reached, no match (HTTP 404)https://waveapps.com/subprocessors– reached, no match (HTTP 404)https://waveapps.com/sub-processors– reached, no match (HTTP 404)https://waveapps.com/legal/sub-processors– reached, no match (HTTP 404)https://waveapps.com/trust/subprocessors– reached, no match (HTTP 404)https://waveapps.com/privacy/subprocessors– reached, no match (HTTP 404)https://waveapps.com/legal/subprocessor-list– reached, no match (HTTP 404)
✗
Data location stated
No statement about data location found.
Checked 7 addresses on 2026-08-31.
Show the 7 addresses we checked
https://waveapps.com/security– reached, no match (HTTP 404)https://waveapps.com/trust– reached, no match (HTTP 404)https://waveapps.com/legal/privacy– reached, no match (HTTP 404)https://waveapps.com/privacy– reached, no match (HTTP 200)https://waveapps.com/privacy-policy– reached, no match (HTTP 404)https://waveapps.com/compliance– reached, no match (HTTP 404)https://waveapps.com/legal/privacy-policy– reached, no match (HTTP 200)
✓
Status page with history
A public status page with incident history.
Source: https://status.waveapps.com/ · checked 2026-08-31
✓
Public pricing
Actual numbers on a public page.
Source: https://www.waveapps.com/pricing · checked 2026-08-31
✗
Certifications named
No named certification found.
Checked 6 addresses on 2026-08-31.
Show the 6 addresses we checked
https://waveapps.com/security– reached, no match (HTTP 404)https://waveapps.com/trust– reached, no match (HTTP 404)https://waveapps.com/trust-center– reached, no match (HTTP 404)https://waveapps.com/compliance– reached, no match (HTTP 404)https://waveapps.com/legal/security– reached, no match (HTTP 404)https://trust.waveapps.com/– The name "trust.waveapps.com" could not be resolved.
✗
Uptime SLA with a figure
No uptime figure found.
Checked 6 addresses on 2026-08-31.
Show the 6 addresses we checked
https://waveapps.com/legal/sla– reached, no match (HTTP 404)https://waveapps.com/sla– reached, no match (HTTP 404)https://waveapps.com/legal/service-level-agreement– reached, no match (HTTP 404)https://waveapps.com/trust/sla– reached, no match (HTTP 404)https://waveapps.com/uptime– reached, no match (HTTP 404)https://waveapps.com/legal/uptime-sla– reached, no match (HTTP 404)
✓
HTTPS enforced with HSTS
HTTP redirects to HTTPS and the HSTS header is set.
Source: https://waveapps.com/ · checked 2026-08-31
✗
No third-party tracking before consent
No consent-free first load found.
Checked 1 address on 2026-08-31.
Show the 1 address we checked
https://waveapps.com/– third-party requests before any interaction: a.quora.com, ad.doubleclick.net, api.hubapi.com, api2.branch.io, app.link, bat.bing.com, cdn.amplitude.com, cdn.prod.website-files.com, connect.facebook.net, consent.trustarc.com, cta-service-cms2.hubspot.com, d3e54v103j8qbb.cloudfront.net, dwdqz3611m4qq.cloudfront.net, ep1.adtrafficquality.google, ep2.adtrafficquality.google, flag.lab.amplitude.com, get.geojs.io, js.hs-analytics.net, js.hs-banner.com, js.hs-scripts.com, js.hsadspixel.net, js.hubspot.com, pagead2.googlesyndication.com, perf-na1.hsforms.com, px.ads.linkedin.com, q.quora.com, region1.analytics.google.com, s.nvfovu.com, snap.licdn.com, static.hotjar.com, stats.g.doubleclick.net, survey.survicate.com, surveys-static-prd.survicate-cdn.com, track.hubspot.com, www.facebook.com, www.google-analytics.com, www.google.com, www.google.de, www.googletagmanager.com, www.youtube.com
✗
security.txt (RFC 9116)
No security.txt found.
Checked 1 address on 2026-08-31.
Show the 1 address we checked
https://waveapps.com/.well-known/security.txt– reached, no match (HTTP 404)