{
  "generated_from": "https://saas-ranking.com/bpm-workflow/signavio",
  "disclaimer": "Every result describes what we found at the addresses we checked on the date given. It is not a statement about what the vendor does or does not have. The score is a public transparency score, not a product or security rating.",
  "snapshot": "r6.60658",
  "snapshot_run": 6,
  "score_version": "v1",
  "vendor": {
    "name": "Signavio",
    "domain": "signavio.com"
  },
  "category": {
    "slug": "bpm-workflow",
    "name": "Business process management"
  },
  "score": 35,
  "band": "E",
  "measured": 12,
  "of": 12,
  "criteria": [
    {
      "key": "dpa",
      "name": "Data processing agreement",
      "weight": 3,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://signavio.com/legal/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/legal/data-processing-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/data-processing-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/legal/data-processing-addendum",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/legal/gdpr",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/trust/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/privacy/dpa",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T02:33:07.691Z"
    },
    {
      "key": "subprozessoren",
      "name": "Subprocessor list",
      "weight": 3,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://signavio.com/legal/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/sub-processors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/legal/sub-processors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/trust/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/privacy/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/legal/subprocessor-list",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T02:33:07.692Z"
    },
    {
      "key": "datenregion",
      "name": "Data location stated",
      "weight": 3,
      "result": "found",
      "source_url": "https://www.signavio.com/privacy/",
      "addresses_checked": [
        {
          "url": "https://signavio.com/security",
          "result": "reached, no match (HTTP 200)"
        },
        {
          "url": "https://signavio.com/trust",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/legal/privacy",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/privacy",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T02:33:07.693Z"
    },
    {
      "key": "statusseite",
      "name": "Status page with history",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://status.signavio.com/",
          "result": "The name \"status.signavio.com\" could not be resolved."
        },
        {
          "url": "https://signavio.com/status",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com.statuspage.io/",
          "result": "Could not be fetched: fetch failed."
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T02:33:07.695Z"
    },
    {
      "key": "preise",
      "name": "Public pricing",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://signavio.com/pricing",
          "result": "reached and rendered, no match"
        },
        {
          "url": "https://signavio.com/pricing/",
          "result": "reached, no match (HTTP 200)"
        },
        {
          "url": "https://signavio.com/plans",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/en/pricing",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/pricing-plans",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T02:33:07.696Z"
    },
    {
      "key": "zertifizierungen",
      "name": "Certifications named",
      "weight": 1,
      "result": "found",
      "source_url": "https://www.signavio.com/security/",
      "addresses_checked": [
        {
          "url": "https://signavio.com/security",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T02:33:07.697Z"
    },
    {
      "key": "sla",
      "name": "Uptime SLA with a figure",
      "weight": 1,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://signavio.com/legal/sla",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/sla",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/legal/service-level-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/trust/sla",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/uptime",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/legal/uptime-sla",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T02:33:07.700Z"
    },
    {
      "key": "transport",
      "name": "HTTPS enforced with HSTS",
      "weight": 2,
      "result": "found",
      "source_url": "https://signavio.com/",
      "addresses_checked": [
        {
          "url": "http://signavio.com/",
          "result": "redirects to https://signavio.com:443/"
        },
        {
          "url": "https://signavio.com/",
          "result": "HSTS max-age=31536000"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T02:33:07.700Z"
    },
    {
      "key": "tracker_vor_einwilligung",
      "name": "No third-party tracking before consent",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://signavio.com/",
          "result": "third-party requests before any interaction: assets.adobedtm.com, cdn.jsdelivr.net, consent.trustarc.com, cta-service-cms2.hubspot.com, forms.hscollectedforms.net, js.hs-analytics.net, js.hs-banner.com, js.hs-scripts.com, js.hscollectedforms.net, js.hscta.net, js.hubspot.com, no-cache.hubspot.com, people.wdf.sap.corp, perf-na1.hsforms.com, perf.hsforms.com, track.hubspot.com, www.googletagmanager.com, www.sap.com"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T02:33:07.701Z"
    },
    {
      "key": "security_txt",
      "name": "security.txt (RFC 9116)",
      "weight": 1,
      "result": "found",
      "source_url": "https://www.signavio.com/.well-known/security.txt",
      "addresses_checked": [
        {
          "url": "https://signavio.com/.well-known/security.txt",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T02:33:07.703Z"
    },
    {
      "key": "subprozessor_meldung",
      "name": "Notice before subprocessors change",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://signavio.com/legal/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/sub-processors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/legal/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/legal/data-processing-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/trust/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/legal/sub-processors",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T02:33:07.704Z"
    },
    {
      "key": "datenschutzkontakt",
      "name": "Named privacy contact",
      "weight": 1,
      "result": "found",
      "source_url": "https://www.signavio.com/privacy/",
      "addresses_checked": [
        {
          "url": "https://signavio.com/legal/privacy",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://signavio.com/privacy",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T02:33:07.705Z"
    }
  ],
  "details": [
    {
      "key": "datenregion",
      "name": "Hosting location named",
      "value": "australia",
      "subject": null,
      "quote": "Where SAP is subject to privacy requirements in Australia Your personal data is predominantly stored inside the EEA or in the US, however, your personal data may be processed globally.",
      "source_url": "https://www.signavio.com/privacy/",
      "measured_on": "2026-09-04T02:33:07.694Z"
    },
    {
      "key": "datenregion",
      "name": "Hosting location named",
      "value": "european-economic-area",
      "subject": null,
      "quote": "Where SAP is subject to privacy requirements in Australia Your personal data is predominantly stored inside the EEA or in the US, however, your personal data may be processed globally.",
      "source_url": "https://www.signavio.com/privacy/",
      "measured_on": "2026-09-04T02:33:07.694Z"
    },
    {
      "key": "datenschutzkontakt_art",
      "name": "Privacy contact",
      "value": "data-protection-officer",
      "subject": null,
      "quote": "Data Protection Officer",
      "source_url": "https://www.signavio.com/privacy/",
      "measured_on": "2026-09-04T02:33:07.705Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "adobedtm.com",
      "subject": null,
      "quote": "assets.adobedtm.com",
      "source_url": "https://signavio.com/",
      "measured_on": "2026-09-04T02:33:07.702Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "googletagmanager.com",
      "subject": null,
      "quote": "www.googletagmanager.com",
      "source_url": "https://signavio.com/",
      "measured_on": "2026-09-04T02:33:07.702Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "hs-analytics.net",
      "subject": null,
      "quote": "js.hs-analytics.net",
      "source_url": "https://signavio.com/",
      "measured_on": "2026-09-04T02:33:07.702Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "hs-banner.com",
      "subject": null,
      "quote": "js.hs-banner.com",
      "source_url": "https://signavio.com/",
      "measured_on": "2026-09-04T02:33:07.702Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "hs-scripts.com",
      "subject": null,
      "quote": "js.hs-scripts.com",
      "source_url": "https://signavio.com/",
      "measured_on": "2026-09-04T02:33:07.702Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "hscollectedforms.net",
      "subject": null,
      "quote": "forms.hscollectedforms.net, js.hscollectedforms.net",
      "source_url": "https://signavio.com/",
      "measured_on": "2026-09-04T02:33:07.702Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "hscta.net",
      "subject": null,
      "quote": "js.hscta.net",
      "source_url": "https://signavio.com/",
      "measured_on": "2026-09-04T02:33:07.702Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "hsforms.com",
      "subject": null,
      "quote": "perf-na1.hsforms.com, perf.hsforms.com",
      "source_url": "https://signavio.com/",
      "measured_on": "2026-09-04T02:33:07.702Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "hubspot.com",
      "subject": null,
      "quote": "cta-service-cms2.hubspot.com, js.hubspot.com, no-cache.hubspot.com, track.hubspot.com",
      "source_url": "https://signavio.com/",
      "measured_on": "2026-09-04T02:33:07.702Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "jsdelivr.net",
      "subject": null,
      "quote": "cdn.jsdelivr.net",
      "source_url": "https://signavio.com/",
      "measured_on": "2026-09-04T02:33:07.702Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "sap.com",
      "subject": null,
      "quote": "www.sap.com",
      "source_url": "https://signavio.com/",
      "measured_on": "2026-09-04T02:33:07.702Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "sap.corp",
      "subject": null,
      "quote": "people.wdf.sap.corp",
      "source_url": "https://signavio.com/",
      "measured_on": "2026-09-04T02:33:07.702Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "trustarc.com",
      "subject": null,
      "quote": "consent.trustarc.com",
      "source_url": "https://signavio.com/",
      "measured_on": "2026-09-04T02:33:07.702Z"
    },
    {
      "key": "hsts_frist",
      "name": "HSTS max-age",
      "value": "31536000",
      "subject": null,
      "quote": "max-age=31536000; includeSubDomains",
      "source_url": "https://signavio.com/",
      "measured_on": "2026-09-04T02:33:07.701Z"
    },
    {
      "key": "hsts_option",
      "name": "HSTS option",
      "value": "include-subdomains",
      "subject": null,
      "quote": "max-age=31536000; includeSubDomains",
      "source_url": "https://signavio.com/",
      "measured_on": "2026-09-04T02:33:07.701Z"
    },
    {
      "key": "security_txt_ablauf",
      "name": "security.txt expiry",
      "value": "2026-01-30",
      "subject": null,
      "quote": "Expires: 2026-01-30T18:29:00.000Z",
      "source_url": "https://www.signavio.com/.well-known/security.txt",
      "measured_on": "2026-09-04T02:33:07.704Z"
    },
    {
      "key": "zertifikat",
      "name": "Certification named",
      "value": "bsi-c5",
      "subject": "unklar",
      "quote": "(ISMS) ISO 27001, ISO 27017, SOC 1 Type 2 and SOC 2 Type 2 for secure operations of cloud products BSI C5 Type 2 attestation as well as CSA STAR Level 2 certification for security Comply with regulati...",
      "source_url": "https://www.signavio.com/security/",
      "measured_on": "2026-09-04T02:33:07.698Z"
    },
    {
      "key": "zertifikat",
      "name": "Certification named",
      "value": "csa-star",
      "subject": "unklar",
      "quote": "ype 2 and SOC 2 Type 2 for secure operations of cloud products BSI C5 Type 2 attestation as well as CSA STAR Level 2 certification for security Comply with regulations SAP Signavio solutions are desig...",
      "source_url": "https://www.signavio.com/security/",
      "measured_on": "2026-09-04T02:33:07.698Z"
    },
    {
      "key": "zertifikat",
      "name": "Certification named",
      "value": "iso-22301",
      "subject": "anbieter",
      "quote": "Ensure operational resilience and recovery in case of disruptions Our solutions are supported by an ISO 22301–certified Business Continuity Management System (BCMS) that enables: Preparedness for disr...",
      "source_url": "https://www.signavio.com/security/",
      "measured_on": "2026-09-04T02:33:07.698Z"
    },
    {
      "key": "zertifikat",
      "name": "Certification named",
      "value": "iso-27001",
      "subject": "anbieter",
      "quote": "ation requirements Our solutions have received multiple certifications and attestations, including: ISO 27001 certification for our Information Security Management System (ISMS) ISO 27001, ISO 27017,....",
      "source_url": "https://www.signavio.com/security/",
      "measured_on": "2026-09-04T02:33:07.698Z"
    },
    {
      "key": "zertifikat",
      "name": "Certification named",
      "value": "iso-27017",
      "subject": "anbieter",
      "quote": "including: ISO 27001 certification for our Information Security Management System (ISMS) ISO 27001, ISO 27017, SOC 1 Type 2 and SOC 2 Type 2 for secure operations of cloud products BSI C5 Type 2 attes...",
      "source_url": "https://www.signavio.com/security/",
      "measured_on": "2026-09-04T02:33:07.698Z"
    },
    {
      "key": "zertifikat",
      "name": "Certification named",
      "value": "iso-27018",
      "subject": "unklar",
      "quote": "ction Management Systems (DPMS) Compliance with GDPR and other relevant data-protection regulations ISO 27018 certification for protection of personal data in public clouds Strengthen security and qua...",
      "source_url": "https://www.signavio.com/security/",
      "measured_on": "2026-09-04T02:33:07.698Z"
    },
    {
      "key": "zertifikat",
      "name": "Certification named",
      "value": "iso-9001",
      "subject": "erwaehnt",
      "quote": "tified and adheres to the requirements defined by the following globally recognized certifications: ISO 9001–certified Quality Management System (QMS) ISO 27001–certified Information Security Manageme...",
      "source_url": "https://www.signavio.com/security/",
      "measured_on": "2026-09-04T02:33:07.698Z"
    },
    {
      "key": "zertifikat",
      "name": "Certification named",
      "value": "soc-2-type-2",
      "subject": "erwaehnt",
      "quote": "cation for our Information Security Management System (ISMS) ISO 27001, ISO 27017, SOC 1 Type 2 and SOC 2 Type 2 for secure operations of cloud products BSI C5 Type 2 attestation as well as CSA STAR L...",
      "source_url": "https://www.signavio.com/security/",
      "measured_on": "2026-09-04T02:33:07.698Z"
    },
    {
      "key": "zertifikat",
      "name": "Certification named",
      "value": "tisax",
      "subject": "unklar",
      "quote": "Discover more TISAX Assessment Trusted Information Security Assessment Exchange (TISAX) is an information security stan",
      "source_url": "https://www.signavio.com/security/",
      "measured_on": "2026-09-04T02:33:07.698Z"
    }
  ]
}