✓
Data processing agreement (DPA)
weight 3 of 3
Published and readable without a login.
Source: https://axiospec.com/dpa · checked 2026-10-30
✓
Subprocessors: the published list
weight 3 of 3
The actual list is published, not just a promise to keep one.
Source: https://axiospec.com/subprocessors · checked 2026-10-30
✓
Data location: where they say data is hosted
weight 3 of 3
The hosting location is stated on a public page.
- Locations named next to the hosting wording United States, us-east. This does not establish the company’s headquarters.
Show the 2 exact wordings
Where your data lives Hosted on Amazon Web Services in the United States (us-east-1).
Read at https://axiospec.com/security
Where your data lives Hosted on Amazon Web Services in the United States (us-east-1).
Read at https://axiospec.com/security
Source: https://axiospec.com/security · checked 2026-10-30
✓
HTTPS enforced with HSTS
weight 2 of 3
HTTP redirects to HTTPS and the HSTS header is set.
- HSTS max-age 31536000 seconds (365 days).
Show the exact wording
max-age=31536000
Read at https://axiospec.com/
Source: https://axiospec.com/ · checked 2026-10-30
✓
No third-party tracking before consent
weight 2 of 3
No third-party requests before any interaction.
Source: https://axiospec.com/ · checked 2026-10-30
✓
Notice before subprocessors change
weight 2 of 3
The vendor commits publicly to giving notice before the list changes.
Source: https://axiospec.com/subprocessors · checked 2026-10-30