SaaS Ranking
Menu

SaaS transparency ranking · Security and compliance

Compliance automation software

64 vendors · updated 2026-10-17 · 3 without enough data for a score

SOC 2 and ISO compliance automation, ranked by what they publish about how they handle your data.

Public transparency score, not a product or security rating. Transparency means: published on the vendor's own site, readable without a login, found by us at the addresses we checked.

=exactly at the median of every category we measure

  • Compliance automation17
  • All categories17
Median transparency score, out of 100. Compliance automation sits at the median across every category we measure.
  1. A0 0%
  2. B3 5%
  3. C3 5%
  4. D2 3%
  5. E17 28%
  6. F36 59%
61 vendors with a score; 3 more without a score because we could measure too little. Bands have fixed thresholds, see how the score works.
All filters
Show only vendors where we found

Transparency band

3 without enough data for a band

64 vendors

Sort by

Narrow it down

Each of these lists the Compliance automation vendors that meet one condition, with the source for each, and appears only where at least 8 of them meet it.

Shared dependencies

8 of 9 Compliance automation vendors whose subprocessor list we could read name Amazon Web Services on it, that is 89 %.

Of the 9 Compliance automation vendors whose subprocessor list we could read, these names appear on the most of them. A vendor without a published list cannot be missing from one, so it is not in the denominator.

Named on the list ofVendorsShareWhat that says
Amazon Web Services 8 89 % 8 of 9 Compliance automation vendors whose subprocessor list we could read name Amazon Web Services on it.
Datadog 6 67 % 6 of 9 Compliance automation vendors whose subprocessor list we could read name Datadog on it.
Microsoft Azure 5 56 % 5 of 9 Compliance automation vendors whose subprocessor list we could read name Microsoft Azure on it.
Sentry 5 56 % 5 of 9 Compliance automation vendors whose subprocessor list we could read name Sentry on it.
Cloudflare 4 44 % 4 of 9 Compliance automation vendors whose subprocessor list we could read name Cloudflare on it.
Salesforce 4 44 % 4 of 9 Compliance automation vendors whose subprocessor list we could read name Salesforce on it.
Zendesk 4 44 % 4 of 9 Compliance automation vendors whose subprocessor list we could read name Zendesk on it.
HubSpot 3 33 % 3 of 9 Compliance automation vendors whose subprocessor list we could read name HubSpot on it.

This is a naming, not a dependency. A name on a subprocessor list means the vendor published it there. Whether anything actually runs on it, how much of it, and what the fallback is, is on none of these pages. What the figure does show is concentration: if three of your four candidates name the same provider, you have one path and not four.

This category, criterion by criterion

How this market does on each criterion, with its own share and how it compares with the rest.

Every result links its source on the vendor page. A grey segment means we could not measure it, not that it is missing. See how we score.