{
  "generated_from": "https://saas-ranking.com/construction-management/rib-software",
  "disclaimer": "Every result describes what we found at the addresses we checked on the date given. It is not a statement about what the vendor does or does not have. The score is a public transparency score, not a product or security rating.",
  "snapshot": "r122.107528",
  "snapshot_run": 122,
  "score_version": "v1",
  "vendor": {
    "name": "RIB Software",
    "domain": "rib-software.com"
  },
  "category": {
    "slug": "construction-management",
    "name": "Construction management"
  },
  "score": 26,
  "band": "E",
  "measured": 12,
  "of": 12,
  "criteria": [
    {
      "key": "dpa",
      "name": "Data processing agreement",
      "weight": 3,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://rib-software.com/legal/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/legal/data-processing-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/data-processing-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/legal/data-processing-addendum",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/legal/gdpr",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/trust/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/privacy/dpa",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-16T07:19:41.426Z"
    },
    {
      "key": "subprozessoren",
      "name": "Subprocessor list",
      "weight": 3,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://rib-software.com/legal/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/sub-processors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/legal/sub-processors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/trust/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/privacy/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/legal/subprocessor-list",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-16T07:19:41.426Z"
    },
    {
      "key": "datenregion",
      "name": "Data location stated",
      "weight": 3,
      "result": "found",
      "source_url": "https://www.rib-software.com/en/privacy-policy",
      "addresses_checked": [
        {
          "url": "https://rib-software.com/security",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/trust",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/legal/privacy",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-16T07:19:41.426Z"
    },
    {
      "key": "statusseite",
      "name": "Status page with history",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://status.rib-software.com/",
          "result": "The name \"status.rib-software.com\" could not be resolved."
        },
        {
          "url": "https://rib-software.com/status",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com.statuspage.io/",
          "result": "Could not be fetched: fetch failed."
        }
      ],
      "note": null,
      "measured_on": "2026-09-16T07:19:41.427Z"
    },
    {
      "key": "preise",
      "name": "Public pricing",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://rib-software.com/pricing",
          "result": "reached and rendered, no match"
        },
        {
          "url": "https://rib-software.com/pricing/",
          "result": "reached, no match (HTTP 200)"
        },
        {
          "url": "https://rib-software.com/plans",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/en/pricing",
          "result": "reached, no match (HTTP 200)"
        },
        {
          "url": "https://rib-software.com/pricing-plans",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-16T07:19:41.427Z"
    },
    {
      "key": "zertifizierungen",
      "name": "Certifications named",
      "weight": 1,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://rib-software.com/security",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/trust",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/trust-center",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/compliance",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/legal/security",
          "result": "reached, no match (HTTP 200)"
        },
        {
          "url": "https://trust.rib-software.com/",
          "result": "The name \"trust.rib-software.com\" could not be resolved."
        }
      ],
      "note": null,
      "measured_on": "2026-09-16T07:19:41.427Z"
    },
    {
      "key": "sla",
      "name": "Uptime SLA with a figure",
      "weight": 1,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://rib-software.com/legal/sla",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/sla",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/legal/service-level-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/trust/sla",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/uptime",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/legal/uptime-sla",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-16T07:19:41.427Z"
    },
    {
      "key": "transport",
      "name": "HTTPS enforced with HSTS",
      "weight": 2,
      "result": "found",
      "source_url": "https://rib-software.com/",
      "addresses_checked": [
        {
          "url": "http://rib-software.com/",
          "result": "redirects to https://rib-software.com/"
        },
        {
          "url": "https://rib-software.com/",
          "result": "HSTS max-age=31536000"
        }
      ],
      "note": null,
      "measured_on": "2026-09-16T07:19:41.427Z"
    },
    {
      "key": "tracker_vor_einwilligung",
      "name": "No third-party tracking before consent",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://rib-software.com/",
          "result": "third-party requests before any interaction: api.ipify.org, api.usercentrics.eu, app.usercentrics.eu, cdn.drda.io, cdn.dreamdata.cloud, consent-api.service.consent.usercentrics.eu, ipapi.co, okt.to, privacy-proxy.usercentrics.eu, static.cloudflareinsights.com, static.oktopost.com, uct.service.usercentrics.eu, www.googletagmanager.com"
        }
      ],
      "note": null,
      "measured_on": "2026-09-16T07:19:41.427Z"
    },
    {
      "key": "security_txt",
      "name": "security.txt (RFC 9116)",
      "weight": 1,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://rib-software.com/.well-known/security.txt",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-16T07:19:41.428Z"
    },
    {
      "key": "subprozessor_meldung",
      "name": "Notice before subprocessors change",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://rib-software.com/legal/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/sub-processors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/legal/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/legal/data-processing-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/trust/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://rib-software.com/legal/sub-processors",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-16T07:19:41.428Z"
    },
    {
      "key": "datenschutzkontakt",
      "name": "Named privacy contact",
      "weight": 1,
      "result": "found",
      "source_url": "https://www.rib-software.com/en/privacy-policy",
      "addresses_checked": [
        {
          "url": "https://rib-software.com/legal/privacy",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-16T07:19:41.428Z"
    }
  ],
  "details": [
    {
      "key": "datenregion",
      "name": "Hosting location named",
      "value": "australia",
      "subject": null,
      "quote": "e of customer end devices • Fix errors and problems • Support customers effectively Data access and storage: Employees of RIB companies in Australia, Denmark, Hong Kong, India, South Africa, the Unite...",
      "source_url": "https://www.rib-software.com/en/privacy-policy",
      "measured_on": "2026-09-16T07:19:41.426Z"
    },
    {
      "key": "datenregion",
      "name": "Hosting location named",
      "value": "european-economic-area",
      "subject": null,
      "quote": "Parkway Mountain View, CA 94043, USA It cannot be ruled out that US authorities may access the data stored by Google. 13.5 Third Country Transfer Insofar as data is processed outside the EU/EEA and th...",
      "source_url": "https://www.rib-software.com/en/privacy-policy",
      "measured_on": "2026-09-16T07:19:41.426Z"
    },
    {
      "key": "datenregion",
      "name": "Hosting location named",
      "value": "european-union",
      "subject": null,
      "quote": "loud of salesforce.com, Salesforce Tower Dublin, 60 R801, North Dock, Dublin, Ireland, currently on servers in the EU, and used for sending order confirmations and shipping notifications.",
      "source_url": "https://www.rib-software.com/en/privacy-policy",
      "measured_on": "2026-09-16T07:19:41.426Z"
    },
    {
      "key": "datenregion",
      "name": "Hosting location named",
      "value": "frankfurt",
      "subject": null,
      "quote": "The data is stored in the Europe-west3 region of Google (Frankfurt, Germany) and may be processed in the USA under the data protection framework.",
      "source_url": "https://www.rib-software.com/en/privacy-policy",
      "measured_on": "2026-09-16T07:19:41.426Z"
    },
    {
      "key": "datenregion",
      "name": "Hosting location named",
      "value": "germany",
      "subject": null,
      "quote": "The data is stored in the Europe-west3 region of Google (Frankfurt, Germany) and may be processed in the USA under the data protection framework.",
      "source_url": "https://www.rib-software.com/en/privacy-policy",
      "measured_on": "2026-09-16T07:19:41.426Z"
    },
    {
      "key": "datenregion",
      "name": "Hosting location named",
      "value": "india",
      "subject": null,
      "quote": "e of customer end devices • Fix errors and problems • Support customers effectively Data access and storage: Employees of RIB companies in Australia, Denmark, Hong Kong, India, South Africa, the Unite...",
      "source_url": "https://www.rib-software.com/en/privacy-policy",
      "measured_on": "2026-09-16T07:19:41.426Z"
    },
    {
      "key": "datenregion",
      "name": "Hosting location named",
      "value": "ireland",
      "subject": null,
      "quote": "the Salesforce Sales Cloud of salesforce.com, Salesforce Tower Dublin, 60 R801, North Dock, Dublin, Ireland, currently on servers in the EU, and used for sending order confirmations and shipping notif...",
      "source_url": "https://www.rib-software.com/en/privacy-policy",
      "measured_on": "2026-09-16T07:19:41.426Z"
    },
    {
      "key": "datenregion",
      "name": "Hosting location named",
      "value": "netherlands",
      "subject": null,
      "quote": "Accordingly, the data is stored on Microsoft servers in the Netherlands (Evert van de Beekstraat 354, 1118 CZ Schiphol, Netherlands) and Ireland (1, One Microsoft Place, S",
      "source_url": "https://www.rib-software.com/en/privacy-policy",
      "measured_on": "2026-09-16T07:19:41.426Z"
    },
    {
      "key": "datenregion",
      "name": "Hosting location named",
      "value": "united-kingdom",
      "subject": null,
      "quote": "e of customer end devices • Fix errors and problems • Support customers effectively Data access and storage: Employees of RIB companies in Australia, Denmark, Hong Kong, India, South Africa, the Unite...",
      "source_url": "https://www.rib-software.com/en/privacy-policy",
      "measured_on": "2026-09-16T07:19:41.426Z"
    },
    {
      "key": "datenregion",
      "name": "Hosting location named",
      "value": "united-states",
      "subject": null,
      "quote": "e data in the Salesforce Marketing Cloud (Account Engagement) is stored and processed on Salesforce servers in the USA.",
      "source_url": "https://www.rib-software.com/en/privacy-policy",
      "measured_on": "2026-09-16T07:19:41.426Z"
    },
    {
      "key": "datenschutzkontakt_art",
      "name": "Privacy contact",
      "value": "data-protection-officer",
      "subject": null,
      "quote": "Data Protection Officer",
      "source_url": "https://www.rib-software.com/en/privacy-policy",
      "measured_on": "2026-09-16T07:19:41.428Z"
    },
    {
      "key": "datenschutzkontakt_art",
      "name": "Privacy contact",
      "value": "dedicated-address",
      "subject": null,
      "quote": "[address]@rib-software.com",
      "source_url": "https://www.rib-software.com/en/privacy-policy",
      "measured_on": "2026-09-16T07:19:41.428Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "cloudflareinsights.com",
      "subject": null,
      "quote": "static.cloudflareinsights.com",
      "source_url": "https://rib-software.com/",
      "measured_on": "2026-09-16T07:19:41.427Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "drda.io",
      "subject": null,
      "quote": "cdn.drda.io",
      "source_url": "https://rib-software.com/",
      "measured_on": "2026-09-16T07:19:41.427Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "dreamdata.cloud",
      "subject": null,
      "quote": "cdn.dreamdata.cloud",
      "source_url": "https://rib-software.com/",
      "measured_on": "2026-09-16T07:19:41.427Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "googletagmanager.com",
      "subject": null,
      "quote": "www.googletagmanager.com",
      "source_url": "https://rib-software.com/",
      "measured_on": "2026-09-16T07:19:41.427Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "ipapi.co",
      "subject": null,
      "quote": "ipapi.co",
      "source_url": "https://rib-software.com/",
      "measured_on": "2026-09-16T07:19:41.427Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "ipify.org",
      "subject": null,
      "quote": "api.ipify.org",
      "source_url": "https://rib-software.com/",
      "measured_on": "2026-09-16T07:19:41.427Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "okt.to",
      "subject": null,
      "quote": "okt.to",
      "source_url": "https://rib-software.com/",
      "measured_on": "2026-09-16T07:19:41.427Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "oktopost.com",
      "subject": null,
      "quote": "static.oktopost.com",
      "source_url": "https://rib-software.com/",
      "measured_on": "2026-09-16T07:19:41.427Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "usercentrics.eu",
      "subject": null,
      "quote": "api.usercentrics.eu, app.usercentrics.eu, consent-api.service.consent.usercentrics.eu, privacy-proxy.usercentrics.eu, uct.service.usercentrics.eu",
      "source_url": "https://rib-software.com/",
      "measured_on": "2026-09-16T07:19:41.427Z"
    },
    {
      "key": "hsts_frist",
      "name": "HSTS max-age",
      "value": "31536000",
      "subject": null,
      "quote": "max-age=31536000; includeSubDomains; preload",
      "source_url": "https://rib-software.com/",
      "measured_on": "2026-09-16T07:19:41.427Z"
    },
    {
      "key": "hsts_option",
      "name": "HSTS option",
      "value": "include-subdomains",
      "subject": null,
      "quote": "max-age=31536000; includeSubDomains; preload",
      "source_url": "https://rib-software.com/",
      "measured_on": "2026-09-16T07:19:41.427Z"
    },
    {
      "key": "hsts_option",
      "name": "HSTS option",
      "value": "preload",
      "subject": null,
      "quote": "max-age=31536000; includeSubDomains; preload",
      "source_url": "https://rib-software.com/",
      "measured_on": "2026-09-16T07:19:41.427Z"
    }
  ]
}