Nango
What Nango publishes, measured on their own site. Every result below links the page we found it on, or lists the addresses we checked.
- 40out of 100
- 10/12Criteria measured
- 2026-08-31Checked
Vendor site: nango.dev · category: Workflow automation
Data processing agreement
No data processing agreement found.
Checked 8 addresses on 2026-08-31.
Show the 8 addresses we checked
https://nango.dev/legal/dpa– reached, no match (HTTP 404)https://nango.dev/dpa– reached, no match (HTTP 404)https://nango.dev/legal/data-processing-agreement– reached, no match (HTTP 404)https://nango.dev/data-processing-agreement– reached, no match (HTTP 404)https://nango.dev/legal/data-processing-addendum– reached, no match (HTTP 404)https://nango.dev/legal/gdpr– reached, no match (HTTP 404)https://nango.dev/trust/dpa– reached, no match (HTTP 404)https://nango.dev/privacy/dpa– reached, no match (HTTP 404)
Subprocessor list
The actual list is published, not just a promise to keep one.
Source: https://nango.dev/subprocessors · checked 2026-08-31
Data location stated
We found this behind a sign-in, so it is not published openly.
Seen at https://nango.dev/privacy-policy · checked 2026-08-31
Show the 7 addresses we checked
https://nango.dev/security– reached, no match (HTTP 200)https://nango.dev/trust– reached, no match (HTTP 404)https://nango.dev/legal/privacy– reached, no match (HTTP 404)https://nango.dev/privacy– reached, no match (HTTP 404)https://nango.dev/privacy-policy– found, but behind a sign-inhttps://nango.dev/compliance– reached, no match (HTTP 404)https://nango.dev/legal/privacy-policy– reached, no match (HTTP 404)
Status page with history
A public status page with incident history.
Source: https://status.nango.dev/ · checked 2026-08-31
Public pricing
Actual numbers on a public page.
Source: https://nango.dev/pricing · checked 2026-08-31
Certifications named
No named certification found.
Checked 6 addresses on 2026-08-31.
Show the 6 addresses we checked
https://nango.dev/security– reached, no match (HTTP 200)https://nango.dev/trust– reached, no match (HTTP 404)https://nango.dev/trust-center– reached, no match (HTTP 404)https://nango.dev/compliance– reached, no match (HTTP 404)https://nango.dev/legal/security– reached, no match (HTTP 404)https://trust.nango.dev/– reached, no match (HTTP 200)
Uptime SLA with a figure
No uptime figure found.
Checked 6 addresses on 2026-08-31.
Show the 6 addresses we checked
https://nango.dev/legal/sla– reached, no match (HTTP 404)https://nango.dev/sla– reached, no match (HTTP 404)https://nango.dev/legal/service-level-agreement– reached, no match (HTTP 404)https://nango.dev/trust/sla– reached, no match (HTTP 404)https://nango.dev/uptime– reached, no match (HTTP 404)https://nango.dev/legal/uptime-sla– reached, no match (HTTP 404)
HTTPS enforced with HSTS
No enforced HTTPS with HSTS found.
Checked 2 addresses on 2026-08-31.
Show the 2 addresses we checked
http://nango.dev/– redirects to https://nango.dev/https://nango.dev/– no HSTS header
No third-party tracking before consent
No consent-free first load found.
Checked 1 address on 2026-08-31.
Show the 1 address we checked
https://nango.dev/– third-party requests before any interaction: ad.doubleclick.net, api.github.com, code.trygravity.ai, forms-eu1.hscollectedforms.net, ingest.promptwatch.com, js-eu1.hs-analytics.net, js-eu1.hs-banner.com, js-eu1.hs-scripts.com, js-eu1.hscollectedforms.net, px.ads.linkedin.com, region1.analytics.google.com, snap.licdn.com, static.hotjar.com, stats.g.doubleclick.net, track-eu1.hubspot.com, www.google.com, www.google.de, www.googletagmanager.com
security.txt (RFC 9116)
Served at /.well-known/security.txt.
Source: https://nango.dev/.well-known/security.txt · checked 2026-08-31
Notice before subprocessors change
Not measured. This criterion was added after the latest run, so it has not been measured yet. The next run covers it.
Named privacy contact
Not measured. This criterion was added after the latest run, so it has not been measured yet. The next run covers it.