SaaS Ranking
Menu

WooCommerce vs PrestaShop

Two self-hosted shops for merchants who want the software on their own server.

WooCommercewoocommerce.com

Public transparency

33/100EBand E

Rank 12 of 42 in Ecommerce platforms

E

  1. Data processing agreement: not found
  2. Subprocessor list: not found
  3. Data location stated: found
  4. Status page with history: not measured
  5. Public pricing: found
  6. Certifications named: not found
  7. Uptime SLA with a figure: not found
  8. HTTPS enforced with HSTS: found
  9. No third-party tracking before consent: not found
  10. security.txt (RFC 9116): not found
  11. Notice before subprocessors change: not found
  12. Named privacy contact: not found

Checked 2026-10-1412 checks

20point difference2differing criteria

PrestaShopprestashop.com

Public transparency

13/100FBand F

Rank 25 of 42 in Ecommerce platforms

F

  1. Data processing agreement: not found
  2. Subprocessor list: not found
  3. Data location stated: found
  4. Status page with history: not found
  5. Public pricing: not found
  6. Certifications named: not found
  7. Uptime SLA with a figure: not found
  8. HTTPS enforced with HSTS: not found
  9. No third-party tracking before consent: not found
  10. security.txt (RFC 9116): not found
  11. Notice before subprocessors change: not found
  12. Named privacy contact: not found

Checked 2026-10-1612 checks

2 differences out of 11 criteria we could measure for both, last measured 2026-10-16. They match on 9 of the 11 criteria we could measure for both.

No change recorded in these results since 2026-09-11. We compare every new measurement with the one before it; one that finds the same thing is not a change.

Public transparency score, not a product or security rating. This page compares what these two vendors publish, not what their products do.

Prepare your vendor review

A source is a starting point. Check the product, plan, legal entity and date before treating it as evidence for your purchase. These questions do not change the transparency score.

WooCommerce

3 found · 8 not found · 1 not measured across 12 public checks.

11 of 12 criteria have a measured result from the last 30 days. Oldest dated result: 2026-10-14.

Investigate 9 open evidence questions
  1. Data processing agreement

    Please share the current data processing agreement for the product and plan we are considering, including its annexes and signing process.

    Inspect this check
  2. Subprocessor list

    Which subprocessors apply to our product, what does each process, and in which countries? Please share the current list.

    Inspect this check
  3. Status page with history

    Where can we review incident history for the service we will use, and how do we subscribe to incident updates?

    Inspect this check
  4. Certifications named

    Please share the current certificate or audit report and its scope, covered legal entity, products and validity period.

    Inspect this check
  5. Uptime SLA with a figure

    Which availability commitment applies to our plan? Please include the measurement window, exclusions and credit claim process.

    Inspect this check
  6. No third-party tracking before consent

    Which third-party requests occur before a visitor makes a choice, and for what purpose? Please distinguish the public website from the product.

    Inspect this check
  7. security.txt (RFC 9116)

    Where should we report a vulnerability, and what acknowledgement and follow-up process should we expect?

    Inspect this check
  8. Notice before subprocessors change

    How will you notify us before a subprocessor changes, with how much notice, and what response options apply to our contract?

    Inspect this check
  9. Named privacy contact

    Which privacy contact handles requests for our account, and what escalation path should we use?

    Inspect this check

PrestaShop

1 found · 11 not found · 0 not measured across 12 public checks.

12 of 12 criteria have a measured result from the last 30 days. Oldest dated result: 2026-10-16.

Investigate 11 open evidence questions
  1. Data processing agreement

    Please share the current data processing agreement for the product and plan we are considering, including its annexes and signing process.

    Inspect this check
  2. Subprocessor list

    Which subprocessors apply to our product, what does each process, and in which countries? Please share the current list.

    Inspect this check
  3. Status page with history

    Where can we review incident history for the service we will use, and how do we subscribe to incident updates?

    Inspect this check
  4. Public pricing

    Please confirm the total cost for our seats and usage, including minimum commitments, add-ons, overages and renewal terms.

    Inspect this check
  5. Certifications named

    Please share the current certificate or audit report and its scope, covered legal entity, products and validity period.

    Inspect this check
  6. Uptime SLA with a figure

    Which availability commitment applies to our plan? Please include the measurement window, exclusions and credit claim process.

    Inspect this check
  7. HTTPS enforced with HSTS

    How is HTTPS enforced on the product and sign-in domains we will use? Please distinguish those domains from the public website.

    Inspect this check
  8. No third-party tracking before consent

    Which third-party requests occur before a visitor makes a choice, and for what purpose? Please distinguish the public website from the product.

    Inspect this check
  9. security.txt (RFC 9116)

    Where should we report a vulnerability, and what acknowledgement and follow-up process should we expect?

    Inspect this check
  10. Notice before subprocessors change

    How will you notify us before a subprocessor changes, with how much notice, and what response options apply to our contract?

    Inspect this check
  11. Named privacy contact

    Which privacy contact handles requests for our account, and what escalation path should we use?

    Inspect this check

Criterion by criterion

CriterionWooCommercePrestaShop
Public pricing FoundChecked 2026-10-14
Source
  1. https://woocommerce.com/pricing/
 Not found, 5 addresses checkedChecked 2026-10-16
5 addresses
  1. https://prestashop.com/pricing – reached, no match (HTTP 404)
  2. https://prestashop.com/pricing/ – reached, no match (HTTP 404)
  3. https://prestashop.com/plans – reached, no match (HTTP 404)
  4. https://prestashop.com/en/pricing – reached, no match (HTTP 404)
  5. https://prestashop.com/pricing-plans – reached, no match (HTTP 404)
HTTPS enforced with HSTS FoundChecked 2026-10-14
Source
  1. https://woocommerce.com/
 Not found, 2 addresses checkedChecked 2026-10-16
2 addresses
  1. http://prestashop.com/ – redirects to https://prestashop.com/
  2. https://prestashop.com/ – no HSTS header
Data processing agreement Not found, 8 addresses checkedChecked 2026-10-14
8 addresses
  1. https://woocommerce.com/legal/dpa – reached, no match (HTTP 404)
  2. https://woocommerce.com/dpa – reached, no match (HTTP 404)
  3. https://woocommerce.com/legal/data-processing-agreement – reached, no match (HTTP 404)
  4. https://woocommerce.com/data-processing-agreement – reached, no match (HTTP 404)
  5. https://woocommerce.com/legal/data-processing-addendum – reached, no match (HTTP 404)
  6. https://woocommerce.com/legal/gdpr – reached, no match (HTTP 404)
  7. https://woocommerce.com/trust/dpa – reached, no match (HTTP 404)
  8. https://woocommerce.com/privacy/dpa – reached, no match (HTTP 404)
 Not found, 8 addresses checkedChecked 2026-10-16
8 addresses
  1. https://prestashop.com/legal/dpa – reached, no match (HTTP 404)
  2. https://prestashop.com/dpa – reached, no match (HTTP 404)
  3. https://prestashop.com/legal/data-processing-agreement – reached, no match (HTTP 404)
  4. https://prestashop.com/data-processing-agreement – reached, no match (HTTP 404)
  5. https://prestashop.com/legal/data-processing-addendum – reached, no match (HTTP 404)
  6. https://prestashop.com/legal/gdpr – reached, no match (HTTP 404)
  7. https://prestashop.com/trust/dpa – reached, no match (HTTP 404)
  8. https://prestashop.com/privacy/dpa – reached, no match (HTTP 404)
Subprocessor list Not found, 7 addresses checkedChecked 2026-10-14
7 addresses
  1. https://woocommerce.com/legal/subprocessors – reached, no match (HTTP 404)
  2. https://woocommerce.com/subprocessors – reached, no match (HTTP 404)
  3. https://woocommerce.com/sub-processors – reached, no match (HTTP 404)
  4. https://woocommerce.com/legal/sub-processors – reached, no match (HTTP 404)
  5. https://woocommerce.com/trust/subprocessors – reached, no match (HTTP 404)
  6. https://woocommerce.com/privacy/subprocessors – reached, no match (HTTP 404)
  7. https://woocommerce.com/legal/subprocessor-list – reached, no match (HTTP 404)
 Not found, 7 addresses checkedChecked 2026-10-16
7 addresses
  1. https://prestashop.com/legal/subprocessors – reached, no match (HTTP 404)
  2. https://prestashop.com/subprocessors – reached, no match (HTTP 404)
  3. https://prestashop.com/sub-processors – reached, no match (HTTP 404)
  4. https://prestashop.com/legal/sub-processors – reached, no match (HTTP 404)
  5. https://prestashop.com/trust/subprocessors – reached, no match (HTTP 404)
  6. https://prestashop.com/privacy/subprocessors – reached, no match (HTTP 404)
  7. https://prestashop.com/legal/subprocessor-list – reached, no match (HTTP 404)
Data location stated FoundChecked 2026-10-14
Source
  1. https://automattic.com/privacy/
 FoundChecked 2026-10-16
Source
  1. https://prestashop.com/privacy-policy
Status page with history Not measuredChecked 2026-10-14None of the addresses could be reached, so this was not measured.
3 addresses
  1. https://status.woocommerce.com/ – The name "status.woocommerce.com" could not be resolved.
  2. https://woocommerce.com/status – Not the expected content type but "image/png".
  3. https://woocommerce.com.statuspage.io/ – Could not be fetched: fetch failed.
 Not found, 3 addresses checkedChecked 2026-10-16
3 addresses
  1. https://status.prestashop.com/ – reached, no match (HTTP 200)
  2. https://prestashop.com/status – reached, no match (HTTP 404)
  3. https://prestashop.com.statuspage.io/ – Could not be fetched: fetch failed.
No third-party tracking before consent Not found, 1 address checkedChecked 2026-10-14
1 address
  1. https://woocommerce.com/ – third-party requests before any interaction: app.qualified.com, browser.sentry-cdn.com, cdn.parsely.com, distillery.wistia.com, embed-ssl.wistia.com, fast.a.klaviyo.com, fast.wistia.com, invalid, js.qualified.com, ob.greencolumnart.com, obs.greencolumnart.com, p1.parsely.com, pagead2.googlesyndication.com, pixel.wp.com, public-api.wordpress.com, refer.wordpress.com, region1.google-analytics.com, s0.wp.com, static-forms.klaviyo.com, static-tracking.klaviyo.com, static.klaviyo.com, stats.wp.com, www.googletagmanager.com
 Not found, 1 address checkedChecked 2026-10-16
1 address
  1. https://prestashop.com/ – third-party requests before any interaction: 11945881.fls.doubleclick.net, ad.doubleclick.net, adservice.google.com, analytics.ahrefs.com, api.axept.io, cdn.segment.com, client.axept.io, dcinfos-cache.abtasty.com, dsv16luwmjfsl.cloudfront.net, fonts.axept.io, forms-na1.hsforms.com, forms.hsforms.com, js.hsforms.net, nocookie.avads.net, static.avads.net, static.axept.io, try.abtasty.com, www.clickcease.com, www.google.com, www.googletagmanager.com
Notice before subprocessors change Not found, 8 addresses checkedChecked 2026-10-14
8 addresses
  1. https://woocommerce.com/legal/subprocessors – reached, no match (HTTP 404)
  2. https://woocommerce.com/subprocessors – reached, no match (HTTP 404)
  3. https://woocommerce.com/sub-processors – reached, no match (HTTP 404)
  4. https://woocommerce.com/legal/dpa – reached, no match (HTTP 404)
  5. https://woocommerce.com/dpa – reached, no match (HTTP 404)
  6. https://woocommerce.com/legal/data-processing-agreement – reached, no match (HTTP 404)
  7. https://woocommerce.com/trust/subprocessors – reached, no match (HTTP 404)
  8. https://woocommerce.com/legal/sub-processors – reached, no match (HTTP 404)
 Not found, 8 addresses checkedChecked 2026-10-16
8 addresses
  1. https://prestashop.com/legal/subprocessors – reached, no match (HTTP 404)
  2. https://prestashop.com/subprocessors – reached, no match (HTTP 404)
  3. https://prestashop.com/sub-processors – reached, no match (HTTP 404)
  4. https://prestashop.com/legal/dpa – reached, no match (HTTP 404)
  5. https://prestashop.com/dpa – reached, no match (HTTP 404)
  6. https://prestashop.com/legal/data-processing-agreement – reached, no match (HTTP 404)
  7. https://prestashop.com/trust/subprocessors – reached, no match (HTTP 404)
  8. https://prestashop.com/legal/sub-processors – reached, no match (HTTP 404)
Certifications named Not found, 6 addresses checkedChecked 2026-10-14We found this behind a sign-in, so it is not published openly.
6 addresses
  1. https://woocommerce.com/security – found, but behind a sign-in
  2. https://woocommerce.com/trust – reached, no match (HTTP 404)
  3. https://woocommerce.com/trust-center – reached, no match (HTTP 404)
  4. https://woocommerce.com/compliance – reached, no match (HTTP 404)
  5. https://woocommerce.com/legal/security – reached, no match (HTTP 404)
  6. https://trust.woocommerce.com/ – The name "trust.woocommerce.com" could not be resolved.
 Not found, 6 addresses checkedChecked 2026-10-16
6 addresses
  1. https://prestashop.com/security – reached, no match (HTTP 404)
  2. https://prestashop.com/trust – reached, no match (HTTP 404)
  3. https://prestashop.com/trust-center – reached, no match (HTTP 404)
  4. https://prestashop.com/compliance – reached, no match (HTTP 404)
  5. https://prestashop.com/legal/security – reached, no match (HTTP 404)
  6. https://trust.prestashop.com/ – No answer within 10 seconds.
Uptime SLA with a figure Not found, 6 addresses checkedChecked 2026-10-14
6 addresses
  1. https://woocommerce.com/legal/sla – reached, no match (HTTP 404)
  2. https://woocommerce.com/sla – reached, no match (HTTP 404)
  3. https://woocommerce.com/legal/service-level-agreement – reached, no match (HTTP 404)
  4. https://woocommerce.com/trust/sla – reached, no match (HTTP 404)
  5. https://woocommerce.com/uptime – reached, no match (HTTP 404)
  6. https://woocommerce.com/legal/uptime-sla – reached, no match (HTTP 404)
 Not found, 6 addresses checkedChecked 2026-10-16
6 addresses
  1. https://prestashop.com/legal/sla – reached, no match (HTTP 404)
  2. https://prestashop.com/sla – reached, no match (HTTP 404)
  3. https://prestashop.com/legal/service-level-agreement – reached, no match (HTTP 404)
  4. https://prestashop.com/trust/sla – reached, no match (HTTP 404)
  5. https://prestashop.com/uptime – reached, no match (HTTP 404)
  6. https://prestashop.com/legal/uptime-sla – reached, no match (HTTP 404)
security.txt (RFC 9116) Not found, 1 address checkedChecked 2026-10-14
1 address
  1. https://woocommerce.com/.well-known/security.txt – reached, no match (HTTP 404)
 Not found, 1 address checkedChecked 2026-10-16
1 address
  1. https://prestashop.com/.well-known/security.txt – reached, no match (HTTP 404)
Named privacy contact Not found, 7 addresses checkedChecked 2026-10-14We found this behind a sign-in, so it is not published openly.
7 addresses
  1. https://woocommerce.com/legal/privacy – reached, no match (HTTP 404)
  2. https://woocommerce.com/privacy – found, but behind a sign-in
  3. https://woocommerce.com/privacy-policy – found, but behind a sign-in
  4. https://woocommerce.com/legal/privacy-policy – reached, no match (HTTP 404)
  5. https://woocommerce.com/legal/privacy-notice – reached, no match (HTTP 404)
  6. https://woocommerce.com/trust/privacy – reached, no match (HTTP 404)
  7. https://woocommerce.com/datenschutz – reached, no match (HTTP 404)
 Not found, 7 addresses checkedChecked 2026-10-16
7 addresses
  1. https://prestashop.com/legal/privacy – reached, no match (HTTP 404)
  2. https://prestashop.com/privacy – reached, no match (HTTP 404)
  3. https://prestashop.com/privacy-policy – reached, no match (HTTP 200)
  4. https://prestashop.com/legal/privacy-policy – reached, no match (HTTP 404)
  5. https://prestashop.com/legal/privacy-notice – reached, no match (HTTP 404)
  6. https://prestashop.com/trust/privacy – reached, no match (HTTP 404)
  7. https://prestashop.com/datenschutz – reached, no match (HTTP 404)

Differences first, then by weight. A cross is what we found at the addresses we checked on that date, not a statement about what either vendor has. 1 criterion could be measured for only one of the two and is left out of the count above; that is a statement about our measurement.

The full labels

Every criterion with its weight, and the band each vendor lands in.

Transparency labelsaas-ranking.com

WooCommerce

woocommerce.com · Ecommerce platforms

  1. A
  2. B
  3. C
  4. D
  5. E
  6. F
E 33of 100 Rank 12 of 42

Published commitments2 of 8 found, 1 not measured

Measured behaviour1 of 3 found

Checked 2026-10-14. Every line links the page we found it on. A cross means we found nothing at the addresses we checked, not that the vendor has no such document. A transparency score, not a product rating.

Transparency labelsaas-ranking.com

PrestaShop

prestashop.com · Ecommerce platforms

  1. A
  2. B
  3. C
  4. D
  5. E
  6. F
F 13of 100 Rank 25 of 42

Published commitments1 of 9 found

Measured behaviour0 of 3 found

Checked 2026-10-16. Every line links the page we found it on. A cross means we found nothing at the addresses we checked, not that the vendor has no such document. A transparency score, not a product rating.

Take it with you

Both vendors in one file, with every address we checked and every sentence we read, for a procurement file.

Use your current quotes in the SaaS cost calculator to add a cost comparison to this evidence review.

The address carries nothing but the two vendors: no filter, no sort order, nothing about you.

Keep going

The order of the two names is the order of our editorial list. It is not a ranking, and no vendor pays to appear here or to appear first. See how we measure.