SaaS transparency ranking · Engineering and data
Developer collaboration and CI software
59 vendors · updated 2026-10-17 · 4 without enough data for a score
Code hosting and continuous integration, ranked by what they publish about how they handle your data.
Public transparency score, not a product or security rating. Transparency means: published on the vendor's own site, readable without a login, found by us at the addresses we checked.
+5points above the median of every category we measure
- Developer collaboration and CI22
- All categories17
- A0 0%
- B3 5%
- C4 7%
- D3 5%
- E14 25%
- F31 56%
- Data processing agreement6, filter to these
- Subprocessor list8, filter to these
- Data location stated18, filter to these
- Status page with history12, filter to these
- Band B3, filter to these
- Band C4, filter to these
-
1
Replitreplit.comTransparency 76/100 BBand B
- Data processing agreement: found
- Subprocessor list: found
- Data location stated: found
- Status page with history: not measured
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: found
- Named privacy contact: not found
7 found4 gaps1 not measuredGaps No third-party tracking before consent, Uptime SLA with a figure, +2Transparency alternatives
-
2
Terramateterramate.ioTransparency 74/100 BBand B
- Data processing agreement: found
- Subprocessor list: found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: found
- Named privacy contact: found
8 found4 gapsGaps Status page with history, No third-party tracking before consent, +2Transparency alternatives
-
3
CodeRabbitcoderabbit.aiTransparency 70/100 BBand B
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: found
- Named privacy contact: found
9 found3 gapsGaps Subprocessor list, Status page with history, +1Transparency alternatives
-
4
CircleCIcircleci.comTransparency 61/100 CBand C
- Data processing agreement: not found
- Subprocessor list: found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: found
- Named privacy contact: found
8 found4 gapsGaps Data processing agreement, Data location stated, +2Transparency alternatives
-
5
Daytonadaytona.ioTransparency 61/100 CBand C
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: found
- Named privacy contact: not found
7 found5 gapsGaps Subprocessor list, Status page with history, +3Transparency alternatives
-
6
Warpwarp.devTransparency 61/100 CBand C
- Data processing agreement: found
- Subprocessor list: found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
7 found5 gapsGaps Data location stated, No third-party tracking before consent, +3Transparency alternatives
-
7
GitHubgithub.comTransparency 57/100 CBand C
- Data processing agreement: not found
- Subprocessor list: found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: found
- Named privacy contact: not found
7 found5 gapsGaps Data processing agreement, Data location stated, +3Transparency alternatives
-
8
Namespacenamespace.soTransparency 52/100 DBand D
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: found
- Named privacy contact: not found
5 found7 gapsGaps Subprocessor list, Status page with history, +5Transparency alternatives
-
9
Retriumretrium.comTransparency 48/100 DBand D
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
6 found6 gapsGaps Data processing agreement, Subprocessor list, +4Transparency alternatives
-
10
Onaona.comTransparency 43/100 DBand D
- Data processing agreement: not found
- Subprocessor list: found
- Data location stated: found
- Status page with history: not found
- Public pricing: not found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
5 found7 gapsGaps Data processing agreement, Status page with history, +5Transparency alternatives
-
11
Codacycodacy.comTransparency 39/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
5 found7 gapsGaps Data processing agreement, Subprocessor list, +5Transparency alternatives
-
12
Aviatoraviator.coTransparency 35/100 EBand E
- Data processing agreement: not found
- Subprocessor list: found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
4 found8 gapsGaps Data processing agreement, Data location stated, +6Transparency alternatives
-
13
Buddybuddy.worksTransparency 35/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
4 found8 gapsGaps Data processing agreement, Subprocessor list, +6Transparency alternatives
-
14
Depotdepot.devTransparency 35/100 EBand E
- Data processing agreement: not found
- Subprocessor list: found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: found
- Named privacy contact: not found
4 found8 gapsGaps Data processing agreement, Data location stated, +6Transparency alternatives
-
15
E2Be2b.devTransparency 35/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
4 found8 gapsGaps Data processing agreement, Subprocessor list, +6Transparency alternatives
-
16
Pulumipulumi.comTransparency 35/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
5 found7 gapsGaps Data processing agreement, Subprocessor list, +5Transparency alternatives
-
17
Bitbucket Cloudbitbucket.orgTransparency 30/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
4 found8 gapsGaps Data processing agreement, Subprocessor list, +6Transparency alternatives
-
18
Codercoder.comTransparency 30/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: not found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
4 found8 gapsGaps Data processing agreement, Subprocessor list, +6Transparency alternatives
-
19
Mergifymergify.comTransparency 30/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
4 found8 gapsGaps Data processing agreement, Subprocessor list, +6Transparency alternatives
-
20
Oktetookteto.comTransparency 30/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: not found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
4 found8 gapsGaps Data processing agreement, Subprocessor list, +6Transparency alternatives
-
21
Omnistrateomnistrate.comTransparency 30/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
22
Codeclimatecodeclimate.comTransparency 26/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
23
Earthlyearthly.devTransparency 26/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: not found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
24
StackBlitzstackblitz.comTransparency 26/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
25
Scalrscalr.comTransparency 23/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found8 gaps1 not measuredGaps Data processing agreement, Subprocessor list, +6Transparency alternatives
-
26
Blacksmithblacksmith.shTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
27
Codebergcodeberg.orgTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
28
Coolify Cloudcoolify.ioTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
29
Daggerdagger.ioTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
30
Greptilegreptile.comTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
31
Semaphoresemaphoreci.comTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
32
Spaceliftspacelift.ioTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
33
BuildBuddybuildbuddy.ioTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
34
CodeScenecodescene.comTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
35
DeepSourcedeepsource.comTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
36
GitLabgitlab.comTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
37
Graphitegraphite.devTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
38
Nx Cloudnx.devTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
39
Porterporter.runTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
40
Probo.CIprobo.ciTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
41
ReqResreqres.inTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
42
Sourcegraphsourcegraph.comTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
43
SourceHutsourcehut.orgTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
44
Swimmswimm.ioTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: not found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
45
JetBrainsjetbrains.comTransparency 13/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
46
Beeceptorbeeceptor.comTransparency 9/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
47
DevPoddevpod.shTransparency 9/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
48
Diggerdigger.devTransparency 9/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
49
Dronedrone.ioTransparency 9/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
50
env zeroenvzero.comTransparency 9/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
51
Gardengarden.ioTransparency 9/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
52
Gerritgerritcodereview.comTransparency 9/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
53
Runmerunme.devTransparency 9/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
54
WireMock Cloudwiremock.ioTransparency 9/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
55
Giteagitea.comTransparency 4/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
Buildkitebuildkite.comNot enough data: 8 of 12 criteria measured, so no transparency score
- Data processing agreement: not measured
- Subprocessor list: not measured
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not measured
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not measured
- Named privacy contact: not found
4 found4 gaps4 not measuredGaps Data location stated, No third-party tracking before consent, +2
-
CodePencodepen.ioNot enough data: 2 of 12 criteria measured, so no transparency score
- Data processing agreement: not measured
- Subprocessor list: not measured
- Data location stated: not measured
- Status page with history: not measured
- Public pricing: not measured
- Certifications named: not measured
- Uptime SLA with a figure: not measured
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not measured
- Named privacy contact: not measured
1 found1 gap10 not measuredGaps No third-party tracking before consent
-
CodeSandboxcodesandbox.ioNot enough data: 4 of 12 criteria measured, so no transparency score
- Data processing agreement: not measured
- Subprocessor list: not measured
- Data location stated: not measured
- Status page with history: not found
- Public pricing: not measured
- Certifications named: not found
- Uptime SLA with a figure: not measured
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not measured
- Named privacy contact: not measured
0 found4 gaps8 not measuredGaps Status page with history, HTTPS enforced with HSTS, +2
-
Mockoon Cloudmockoon.comNot enough data: 8 of 12 criteria measured, so no transparency score
- Data processing agreement: not measured
- Subprocessor list: not measured
- Data location stated: not measured
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not measured
2 found6 gaps4 not measuredGaps Status page with history, No third-party tracking before consent, +4
-
Tick 2 vendors to compare them. 0 of 2 selected 1 of 2 selected 2 of 2 selected More than 2 selected. A comparison sets 2 side by side.
Not in the ranking
We could not measure these products with our method, so they are listed here instead of being scored. This says something about our method, not about the vendor.
- Codefresh – We followed this address on 2026-09-06 to https://octopus.com/codefresh. Our domain-based checks could no longer isolate this product at its original address.
- Reviewpad – We followed this address on 2026-09-06 to https://snyk.io/blog/welcoming-reviewpad-to-snyk/. Our domain-based checks could no longer isolate this product at its original address.
Narrow it down
Each of these lists the Developer collaboration and CI vendors that meet one condition, with the source for each, and appears only where at least 8 of them meet it.
- Developer collaboration and CI vendors with SOC 2 named 15
- Developer collaboration and CI vendors with public pricing 40
- Developer collaboration and CI vendors with a subprocessor list 8
- Developer collaboration and CI vendors with notice before subprocessors change 8
- Developer collaboration and CI vendors with a status page with history 12
- Developer collaboration and CI vendors with a named privacy contact 11
Shared dependencies
5 of 8 Developer collaboration and CI vendors whose subprocessor list we could read name Amazon Web Services on it, that is 63 %.
Of the 8 Developer collaboration and CI vendors whose subprocessor list we could read, these names appear on the most of them. A vendor without a published list cannot be missing from one, so it is not in the denominator.
| Named on the list of | Vendors | Share | What that says |
|---|---|---|---|
| Amazon Web Services | 5 | 63 % | 5 of 8 Developer collaboration and CI vendors whose subprocessor list we could read name Amazon Web Services on it. |
| Stripe | 5 | 63 % | 5 of 8 Developer collaboration and CI vendors whose subprocessor list we could read name Stripe on it. |
| Sentry | 4 | 50 % | 4 of 8 Developer collaboration and CI vendors whose subprocessor list we could read name Sentry on it. |
| HubSpot | 3 | 38 % | 3 of 8 Developer collaboration and CI vendors whose subprocessor list we could read name HubSpot on it. |
| Microsoft Azure | 3 | 38 % | 3 of 8 Developer collaboration and CI vendors whose subprocessor list we could read name Microsoft Azure on it. |
| Slack | 3 | 38 % | 3 of 8 Developer collaboration and CI vendors whose subprocessor list we could read name Slack on it. |
| Twilio | 3 | 38 % | 3 of 8 Developer collaboration and CI vendors whose subprocessor list we could read name Twilio on it. |
| Cloudflare | 2 | 25 % | 2 of 8 Developer collaboration and CI vendors whose subprocessor list we could read name Cloudflare on it. |
This is a naming, not a dependency. A name on a subprocessor list means the vendor published it there. Whether anything actually runs on it, how much of it, and what the fallback is, is on none of these pages. What the figure does show is concentration: if three of your four candidates name the same provider, you have one path and not four.
This category, criterion by criterion
How this market does on each criterion, with its own share and how it compares with the rest.
- Data processing agreement
- Subprocessor list
- Data location stated
- Status page with history
- Public pricing
- Certifications named
- Uptime SLA with a figure
- HTTPS enforced with HSTS
- No third-party tracking before consent
- security.txt (RFC 9116)
- Notice before subprocessors change
- Named privacy contact
Every result links its source on the vendor page. A grey segment means we could not measure it, not that it is missing. See how we score.