SaaS transparency ranking · Engineering and data
Cloud hosting
37 vendors · updated 2026-10-16 · 2 without enough data for a score
Cloud and application hosting providers, ranked by what they publish about how they handle your data.
Public transparency score, not a product or security rating. Transparency means: published on the vendor's own site, readable without a login, found by us at the addresses we checked.
+18points above the median of every category we measure
- Cloud hosting35
- All categories17
- A1 3%
- B2 6%
- C2 6%
- D6 17%
- E14 40%
- F10 29%
- Data processing agreement9, filter to these
- Subprocessor list3, filter to these
- Data location stated11, filter to these
- Status page with history17, filter to these
- Band A1, filter to these
- Band B2, filter to these
- Band C2, filter to these
-
1
Exoscaleexoscale.comTransparency 87/100 ABand A
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: found
- security.txt (RFC 9116): found
- Notice before subprocessors change: found
- Named privacy contact: found
11 found1 gapGaps Subprocessor listTransparency alternatives
-
2
Renderrender.comTransparency 74/100 BBand B
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: found
- Named privacy contact: found
9 found3 gapsGaps Subprocessor list, No third-party tracking before consent, +1Transparency alternatives
-
3
Kinstakinsta.comTransparency 70/100 BBand B
- Data processing agreement: found
- Subprocessor list: found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: found
- Named privacy contact: not found
8 found4 gapsGaps Data location stated, No third-party tracking before consent, +2Transparency alternatives
-
4
DigitalOceandigitalocean.comTransparency 65/100 CBand C
- Data processing agreement: found
- Subprocessor list: found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: found
- Named privacy contact: found
8 found4 gapsGaps Data location stated, HTTPS enforced with HSTS, +2Transparency alternatives
-
5
Vercelvercel.comTransparency 65/100 CBand C
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: found
- Named privacy contact: found
9 found3 gapsGaps Subprocessor list, Data location stated, +1Transparency alternatives
-
6
Railwayrailway.comTransparency 52/100 DBand D
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: found
- Named privacy contact: found
6 found6 gapsGaps Subprocessor list, Status page with history, +4Transparency alternatives
-
7
Aptibleaptible.comTransparency 48/100 DBand D
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
6 found6 gapsGaps Subprocessor list, Data location stated, +4Transparency alternatives
-
8
Cloudflarecloudflare.comTransparency 48/100 DBand D
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: found
- Named privacy contact: found
6 found6 gapsGaps Subprocessor list, Data location stated, +4Transparency alternatives
-
9
Hetznerhetzner.comTransparency 48/100 DBand D
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: found
6 found6 gapsGaps Data processing agreement, Subprocessor list, +4Transparency alternatives
-
10
Scalewayscaleway.comTransparency 48/100 DBand D
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: found
7 found5 gapsGaps Data processing agreement, Subprocessor list, +3Transparency alternatives
-
11
UpCloudupcloud.comTransparency 43/100 DBand D
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
5 found7 gapsGaps Data processing agreement, Subprocessor list, +5Transparency alternatives
-
12
Fly.iofly.ioTransparency 39/100 EBand E
- Data processing agreement: not found
- Subprocessor list: found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
4 found8 gapsGaps Data processing agreement, Status page with history, +6Transparency alternatives
-
13
Herokuheroku.comTransparency 39/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
5 found7 gapsGaps Data processing agreement, Subprocessor list, +5Transparency alternatives
-
14
MacStadium Orkamacstadium.comTransparency 39/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
5 found7 gapsGaps Data processing agreement, Subprocessor list, +5Transparency alternatives
-
15
Tensorlaketensorlake.aiTransparency 39/100 EBand E
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: found
- Named privacy contact: not found
4 found8 gapsGaps Subprocessor list, Data location stated, +6Transparency alternatives
-
16
AccelByte Gaming Servicesaccelbyte.ioTransparency 35/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
4 found8 gapsGaps Data processing agreement, Subprocessor list, +6Transparency alternatives
-
17
Clever Cloudclever-cloud.comTransparency 35/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: found
- Public pricing: not found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: found
5 found7 gapsGaps Data processing agreement, Subprocessor list, +5Transparency alternatives
-
18
Netlifynetlify.comTransparency 35/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
5 found7 gapsGaps Data processing agreement, Subprocessor list, +5Transparency alternatives
-
19
Upstashupstash.comTransparency 35/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: found
5 found7 gapsGaps Data processing agreement, Subprocessor list, +5Transparency alternatives
-
20
WP Enginewpengine.comTransparency 35/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: found
- Named privacy contact: not found
5 found7 gapsGaps Data processing agreement, Subprocessor list, +5Transparency alternatives
-
21
Cloudwayscloudways.comTransparency 27/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not found
- Named privacy contact: not found
4 found7 gaps1 not measuredGaps Data processing agreement, Subprocessor list, +5Transparency alternatives
-
22
Beambeam.cloudTransparency 26/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
23
Contabocontabo.comTransparency 26/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
24
Fastlyfastly.comTransparency 26/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
4 found8 gapsGaps Data processing agreement, Subprocessor list, +6Transparency alternatives
-
25
Upsunupsun.comTransparency 26/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
4 found8 gapsGaps Data processing agreement, Subprocessor list, +6Transparency alternatives
-
26
Bunnybunny.netTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
27
Gcoregcore.comTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
28
Northflanknorthflank.comTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
29
Val Townval.townTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
30
Koyebkoyeb.comTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
31
Mittwaldmittwald.deTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
32
Second Front Game Wardensecondfront.comTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
33
IONOS Cloudcloud.ionos.comTransparency 13/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
34
OVHcloudovhcloud.comTransparency 4/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
35
T Cloud Publict-cloud-public.comTransparency 4/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
Akamaiakamai.comNot enough data: 4 of 12 criteria measured, so no transparency score
- Data processing agreement: not measured
- Subprocessor list: not measured
- Data location stated: not measured
- Status page with history: found
- Public pricing: not measured
- Certifications named: not found
- Uptime SLA with a figure: not measured
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: found
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not measured
- Named privacy contact: not measured
3 found1 gap8 not measuredGaps Certifications named
-
Vultrvultr.comNot enough data: 3 of 12 criteria measured, so no transparency score
- Data processing agreement: not measured
- Subprocessor list: not measured
- Data location stated: not measured
- Status page with history: not measured
- Public pricing: not measured
- Certifications named: not measured
- Uptime SLA with a figure: not measured
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not measured
- Named privacy contact: not measured
0 found3 gaps9 not measuredGaps HTTPS enforced with HSTS, No third-party tracking before consent, +1
-
Tick 2 vendors to compare them. 0 of 2 selected 1 of 2 selected 2 of 2 selected More than 2 selected. A comparison sets 2 side by side.
Narrow it down
Each of these lists the Cloud hosting vendors that meet one condition, with the source for each, and appears only where at least 8 of them meet it.
- Cloud hosting vendors with public pricing 27
- Cloud hosting vendors with a published DPA 9
- Cloud hosting vendors with notice before subprocessors change 9
- Cloud hosting vendors with a status page with history 17
- Cloud hosting vendors with an uptime figure 8
- Cloud hosting vendors with a named privacy contact 20
This category, criterion by criterion
How this market does on each criterion, with its own share and how it compares with the rest.
- Data processing agreement
- Subprocessor list
- Data location stated
- Status page with history
- Public pricing
- Certifications named
- Uptime SLA with a figure
- HTTPS enforced with HSTS
- No third-party tracking before consent
- security.txt (RFC 9116)
- Notice before subprocessors change
- Named privacy contact
Head-to-head comparisons
Each comparison lists only the criteria where the two differ, with the source for every one. All comparisons.
Every result links its source on the vendor page. A grey segment means we could not measure it, not that it is missing. See how we score.