Steep
What Steep publishes, measured on their own site. Every result below links the page we found it on, or lists the addresses we checked.
- 40out of 100
- 10/12Criteria measured
- 2026-08-31Checked
Vendor site: steep.app · category: Business intelligence
Data processing agreement
Published and readable without a login.
Source: https://steep.app/dpa · checked 2026-08-31
Subprocessor list
The actual list is published, not just a promise to keep one.
Source: https://steep.app/subprocessors · checked 2026-08-31
Data location stated
No statement about data location found.
Checked 7 addresses on 2026-08-31.
Show the 7 addresses we checked
https://steep.app/security– reached, no match (HTTP 200)https://steep.app/trust– reached, no match (HTTP 404)https://steep.app/legal/privacy– reached, no match (HTTP 404)https://steep.app/privacy– reached, no match (HTTP 200)https://steep.app/privacy-policy– reached, no match (HTTP 404)https://steep.app/compliance– reached, no match (HTTP 404)https://steep.app/legal/privacy-policy– reached, no match (HTTP 404)
Status page with history
A public status page with incident history.
Source: https://status.steep.app/ · checked 2026-08-31
Public pricing
We found this behind a sign-in, so it is not published openly.
Seen at https://steep.app/pricing · checked 2026-08-31
Show the 5 addresses we checked
https://steep.app/pricing– found, but behind a sign-inhttps://steep.app/pricing/– found, but behind a sign-inhttps://steep.app/plans– reached, no match (HTTP 404)https://steep.app/en/pricing– reached, no match (HTTP 404)https://steep.app/pricing-plans– reached, no match (HTTP 404)
Certifications named
No named certification found.
Checked 6 addresses on 2026-08-31.
Show the 6 addresses we checked
https://steep.app/security– reached, no match (HTTP 200)https://steep.app/trust– reached, no match (HTTP 404)https://steep.app/trust-center– reached, no match (HTTP 404)https://steep.app/compliance– reached, no match (HTTP 404)https://steep.app/legal/security– reached, no match (HTTP 404)https://trust.steep.app/– The name "trust.steep.app" could not be resolved.
Uptime SLA with a figure
No uptime figure found.
Checked 6 addresses on 2026-08-31.
Show the 6 addresses we checked
https://steep.app/legal/sla– reached, no match (HTTP 404)https://steep.app/sla– reached, no match (HTTP 404)https://steep.app/legal/service-level-agreement– reached, no match (HTTP 404)https://steep.app/trust/sla– reached, no match (HTTP 404)https://steep.app/uptime– reached, no match (HTTP 404)https://steep.app/legal/uptime-sla– reached, no match (HTTP 404)
HTTPS enforced with HSTS
No enforced HTTPS with HSTS found.
Checked 2 addresses on 2026-08-31.
Show the 2 addresses we checked
http://steep.app/– redirects to https://steep.app:443/https://steep.app/– no HSTS header
No third-party tracking before consent
No consent-free first load found.
Checked 1 address on 2026-08-31.
Show the 1 address we checked
https://steep.app/– third-party requests before any interaction: aplo-evnt.com, assets.apollo.io, pagead2.googlesyndication.com, px.ads.linkedin.com, region1.google-analytics.com, snap.licdn.com, www.googletagmanager.com
security.txt (RFC 9116)
No security.txt found.
Checked 1 address on 2026-08-31.
Show the 1 address we checked
https://steep.app/.well-known/security.txt– reached, no match (HTTP 404)
Notice before subprocessors change
Not measured. This criterion was added after the latest run, so it has not been measured yet. The next run covers it.
Named privacy contact
Not measured. This criterion was added after the latest run, so it has not been measured yet. The next run covers it.