SaaS transparency ranking · Cloud hosting

Cloud hosting with a published DPA

Which vendors publish a data processing agreement you can read before you talk to sales?

8 of 30 Cloud hosting vendors we measure, that is 27 %. Public transparency score, not a product or security rating.

Readable without a login, at one of the addresses we check. This is a list of what these vendors publish, found by us at the addresses we checked on the date in each row. Vendors that are not on it may publish the same thing somewhere we did not look, or behind a login – the list says nothing about them.

found, source linked
not found at the addresses we checked
not measured by us
12 criteria in the order of the methodology, heaviest first within each group.

1
Exoscaleexoscale.com

Transparency 87/100 ABand A
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: found
5. Public pricing: found
6. Certifications named: found
7. Uptime SLA with a figure: found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: found
10. security.txt (RFC 9116): found
11. Notice before subprocessors change: found
12. Named privacy contact: found
11 found1 gapGaps Subprocessor listCompare
2
DigitalOceandigitalocean.com

Transparency 75/100 BBand B
1. Data processing agreement: found
2. Subprocessor list: found
3. Data location stated: found
4. Status page with history: found
5. Public pricing: found
6. Certifications named: found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: not found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): found
11. Notice before subprocessors change: not measured
12. Named privacy contact: not measured
7 found3 gaps2 not measuredGaps HTTPS enforced with HSTS, No third-party tracking before consent, +1Compare
3
Kinstakinsta.com

Transparency 70/100 BBand B
1. Data processing agreement: found
2. Subprocessor list: found
3. Data location stated: not found
4. Status page with history: found
5. Public pricing: found
6. Certifications named: not found
7. Uptime SLA with a figure: found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): found
11. Notice before subprocessors change: not measured
12. Named privacy contact: not measured
7 found3 gaps2 not measuredGaps Data location stated, No third-party tracking before consent, +1Compare
4
Renderrender.com

Transparency 70/100 BBand B
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: found
5. Public pricing: found
6. Certifications named: found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): found
11. Notice before subprocessors change: not measured
12. Named privacy contact: not measured
7 found3 gaps2 not measuredGaps Subprocessor list, No third-party tracking before consent, +1Compare
5
Cloudflarecloudflare.com

Transparency 65/100 CBand C
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: found
5. Public pricing: found
6. Certifications named: not found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): found
11. Notice before subprocessors change: not measured
12. Named privacy contact: not measured
6 found4 gaps2 not measuredGaps Subprocessor list, No third-party tracking before consent, +2Compare
6
Vercelvercel.com

Transparency 65/100 CBand C
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: not found
4. Status page with history: found
5. Public pricing: found
6. Certifications named: found
7. Uptime SLA with a figure: found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): found
11. Notice before subprocessors change: found
12. Named privacy contact: found
9 found3 gapsGaps Subprocessor list, Data location stated, +1Compare
8
Aptibleaptible.com

Transparency 55/100 CBand C
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: not found
4. Status page with history: found
5. Public pricing: found
6. Certifications named: found
7. Uptime SLA with a figure: found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): not found
11. Notice before subprocessors change: not measured
12. Named privacy contact: not measured
6 found4 gaps2 not measuredGaps Subprocessor list, Data location stated, +2Compare
10
Railwayrailway.com

Transparency 52/100 DBand D
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: not found
5. Public pricing: found
6. Certifications named: found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: not found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): not found
11. Notice before subprocessors change: found
12. Named privacy contact: found
6 found6 gapsGaps Subprocessor list, Status page with history, +4Compare

Cloud hosting with a published DPA

Keep going