SaaS Ranking
Menu

DatoCMS

datocms.com · Content management systems · checked 2026-09-03

Not enough data: 7 of 12 criteria measured, so no transparency score

We measured 7 of 12 criteria for DatoCMS on 2026-09-03. We found 5 with a source and did not find 2 at the addresses we checked; 5 we could not measure at all. Below our threshold there is no score and no rank, and that is a statement about our measurement.

Overview

Transparency labelsaas-ranking.com

DatoCMS

datocms.com · Content management systems

  1. A
  2. B
  3. C
  4. D
  5. E
  6. F
Not enough data7 of 12 measured, no score

Published commitments4 of 4 found, 5 not measured

Measured behaviour1 of 3 found

Checked 2026-09-03. Every line links the page we found it on. A cross means we found nothing at the addresses we checked, not that the vendor has no such document. A transparency score, not a product rating.

We do not issue badges: a badge is the first step towards a paid placement, and there is none here. The SVG is a document with the date in it, for your own files.

The label is the whole measurement in one object: every criterion with its weight, the band, and the date. Public transparency score, not a product or security rating. We could measure 7 of 12 criteria, which is below our threshold, so there is no rank. That is a statement about our measurement, not about DatoCMS.

Every line in it links the page we found the result on, or lists the addresses we checked. A cross means we found nothing there, not that DatoCMS has no such document.

Gaps, heaviest first

✗

HTTPS enforced with HSTS

weight 2 of 3

No enforced HTTPS with HSTS found.

Checked 2 addresses on 2026-09-03.

Show the 2 addresses we checked
  1. http://datocms.com/ – HTTP 307, no redirect to HTTPS
  2. https://datocms.com/ – HSTS max-age=300

Is this wrong? Send us the URL

✗

No third-party tracking before consent

weight 2 of 3

No consent-free first load found.

Checked 1 address on 2026-09-03.

Show the 1 address we checked
  1. https://datocms.com/ – third-party requests before any interaction: www.datocms-assets.com

Is this wrong? Send us the URL

Evidence

The full source lists sit behind these two groups, so that the answer above stays readable.

Published, with a source 5
✓

Data location stated

weight 3 of 3

The hosting location is stated on a public page.

Source: https://www.datocms.com/security · checked 2026-09-03

✓

Status page with history

weight 2 of 3

A public status page with incident history.

Source: https://status.datocms.com/ · checked 2026-09-03

✓

Public pricing

weight 2 of 3

Actual numbers on a public page.

Source: https://www.datocms.com/pricing · checked 2026-09-03

✓

Certifications named

weight 1 of 3

SOC 2 or ISO 27001 named on a public page.

Source: https://www.datocms.com/security · checked 2026-09-03

✓

security.txt (RFC 9116)

weight 1 of 3

Served at /.well-known/security.txt.

Source: https://www.datocms.com/.well-known/security.txt · checked 2026-09-03

Not measured by us 5
–

Data processing agreement

weight 3 of 3

Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.

Show the 8 addresses we checked
  1. https://datocms.com/legal/dpa – excluded by robots.txt
  2. https://datocms.com/dpa – reached, no match (HTTP 404)
  3. https://datocms.com/legal/data-processing-agreement – excluded by robots.txt
  4. https://datocms.com/data-processing-agreement – reached, no match (HTTP 404)
  5. https://datocms.com/legal/data-processing-addendum – excluded by robots.txt
  6. https://datocms.com/legal/gdpr – excluded by robots.txt
  7. https://datocms.com/trust/dpa – reached, no match (HTTP 404)
  8. https://datocms.com/privacy/dpa – reached, no match (HTTP 404)

Is this wrong? Send us the URL

–

Subprocessor list

weight 3 of 3

Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.

Show the 7 addresses we checked
  1. https://datocms.com/legal/subprocessors – excluded by robots.txt
  2. https://datocms.com/subprocessors – reached, no match (HTTP 404)
  3. https://datocms.com/sub-processors – reached, no match (HTTP 404)
  4. https://datocms.com/legal/sub-processors – excluded by robots.txt
  5. https://datocms.com/trust/subprocessors – reached, no match (HTTP 404)
  6. https://datocms.com/privacy/subprocessors – reached, no match (HTTP 404)
  7. https://datocms.com/legal/subprocessor-list – excluded by robots.txt

Is this wrong? Send us the URL

–

Notice before subprocessors change

weight 2 of 3

Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.

Show the 8 addresses we checked
  1. https://datocms.com/legal/subprocessors – excluded by robots.txt
  2. https://datocms.com/subprocessors – reached, no match (HTTP 404)
  3. https://datocms.com/sub-processors – reached, no match (HTTP 404)
  4. https://datocms.com/legal/dpa – excluded by robots.txt
  5. https://datocms.com/dpa – reached, no match (HTTP 404)
  6. https://datocms.com/legal/data-processing-agreement – excluded by robots.txt
  7. https://datocms.com/trust/subprocessors – reached, no match (HTTP 404)
  8. https://datocms.com/legal/sub-processors – excluded by robots.txt

Is this wrong? Send us the URL

–

Uptime SLA with a figure

weight 1 of 3

Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.

Show the 6 addresses we checked
  1. https://datocms.com/legal/sla – excluded by robots.txt
  2. https://datocms.com/sla – reached, no match (HTTP 404)
  3. https://datocms.com/legal/service-level-agreement – excluded by robots.txt
  4. https://datocms.com/trust/sla – reached, no match (HTTP 404)
  5. https://datocms.com/uptime – reached, no match (HTTP 404)
  6. https://datocms.com/legal/uptime-sla – excluded by robots.txt

Is this wrong? Send us the URL

–

Named privacy contact

weight 1 of 3

Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.

Show the 7 addresses we checked
  1. https://datocms.com/legal/privacy – excluded by robots.txt
  2. https://datocms.com/privacy – reached, no match (HTTP 404)
  3. https://datocms.com/privacy-policy – reached, no match (HTTP 404)
  4. https://datocms.com/legal/privacy-policy – excluded by robots.txt
  5. https://datocms.com/legal/privacy-notice – excluded by robots.txt
  6. https://datocms.com/trust/privacy – reached, no match (HTTP 404)
  7. https://datocms.com/datenschutz – reached, no match (HTTP 404)

Is this wrong? Send us the URL

History

Not enough completed runs yet to draw a line. The next runs fill this in.

Compare