Vercel
What Vercel publishes, measured on their own site. Every result below links the page we found it on, or lists the addresses we checked.
- 75out of 100
- 10/12Criteria measured
- 2026-08-31Checked
Vendor site: vercel.com · category: Cloud hosting
Data processing agreement
Published and readable without a login.
Source: https://vercel.com/legal/dpa · checked 2026-08-31
Subprocessor list
The actual list is published, not just a promise to keep one.
Source: https://security.vercel.com/?itemName=legal&itemUid=e3fae2ca-94a9-416b-b577-5c90e382df57 · checked 2026-08-31
Data location stated
We found this behind a sign-in, so it is not published openly.
Seen at https://vercel.com/security · checked 2026-08-31
Show the 7 addresses we checked
https://vercel.com/security– found, but behind a sign-inhttps://vercel.com/trust– reached, no match (HTTP 200)https://vercel.com/legal/privacy– found, but behind a sign-inhttps://vercel.com/privacy– found, but behind a sign-inhttps://vercel.com/privacy-policy– found, but behind a sign-inhttps://vercel.com/compliance– found, but behind a sign-inhttps://vercel.com/legal/privacy-policy– found, but behind a sign-in
Status page with history
A public status page with incident history.
Source: https://www.vercel-status.com/ · checked 2026-08-31
Public pricing
Actual numbers on a public page.
Source: https://vercel.com/pricing · checked 2026-08-31
Certifications named
SOC 2 or ISO 27001 named on a public page.
Source: https://vercel.com/security · checked 2026-08-31
Uptime SLA with a figure
An availability commitment with a figure.
Source: https://vercel.com/legal/sla · checked 2026-08-31
HTTPS enforced with HSTS
HTTP redirects to HTTPS and the HSTS header is set.
Source: https://vercel.com/ · checked 2026-08-31
No third-party tracking before consent
No consent-free first load found.
Checked 1 address on 2026-08-31.
Show the 1 address we checked
https://vercel.com/– third-party requests before any interaction: lishhsx6kmthaacj.public.blob.vercel-storage.com, o205439.ingest.us.sentry.io, pbs.twimg.com
security.txt (RFC 9116)
Served at /.well-known/security.txt.
Source: https://vercel.com/.well-known/security.txt · checked 2026-08-31
Notice before subprocessors change
Not measured. This criterion was added after the latest run, so it has not been measured yet. The next run covers it.
Named privacy contact
Not measured. This criterion was added after the latest run, so it has not been measured yet. The next run covers it.