Alternatives to Fabric
Other Ecommerce platforms vendors we measure, sorted by how much they publish that Fabric does not. This is a comparison of disclosure, not of features or fitness.
12 shown of 23 that differ from Fabric on at least one criterion we measured for both. Public transparency score, not a product or security rating.
Fabric has 9 gaps in what we could measure: Data processing agreement, Subprocessor list, Data location stated, Status page with history, Public pricing, Certifications named, HTTPS enforced with HSTS, security.txt (RFC 9116), Notice before subprocessors change. The column “publishes and Fabric does not” is the one that closes them.
| Vendor | Score | Publishes, and Fabric does not | Fabric publishes, and they do not | |
|---|---|---|---|---|
| Shopifyshopify.com | 80/100 | 7 Data processing agreement, Data location stated, Status page with history, +4 | 1 Uptime SLA with a figure | Compare |
| Lightspeedlightspeedhq.com | 70/100 | 7 Data processing agreement, Subprocessor list, Status page with history, +4 | 2 Uptime SLA with a figure, No third-party tracking before consent | Compare |
| Saleorsaleor.io | 74/100 | 6 Data processing agreement, Subprocessor list, Data location stated, +3 | 1 No third-party tracking before consent | Compare |
| Ecwidecwid.com | 50/100 | 5 Data location stated, Status page with history, Public pricing, +2 | 2 Uptime SLA with a figure, No third-party tracking before consent | Compare |
| Gumroadgumroad.com | 50/100 | 4 Data processing agreement, Data location stated, Public pricing, +1 | 2 Uptime SLA with a figure, No third-party tracking before consent | Compare |
| commercetoolscommercetools.com | 43/100 | 4 Data processing agreement, Subprocessor list, Certifications named, +1 | 2 Uptime SLA with a figure, No third-party tracking before consent | Compare |
| BigCommercebigcommerce.com | 35/100 | 4 Status page with history, Public pricing, Certifications named, +1 | 2 Uptime SLA with a figure, No third-party tracking before consent | Compare |
| Volusionvolusion.com | 40/100 | 3 Data location stated, Status page with history, Public pricing | 1 No third-party tracking before consent | Compare |
| Shoplazzashoplazza.com | 33/100 | 3 Data location stated, Certifications named, HTTPS enforced with HSTS | 1 Uptime SLA with a figure | Compare |
| WooCommercewoocommerce.com | 33/100 | 3 Data location stated, Public pricing, HTTPS enforced with HSTS | 3 Uptime SLA with a figure, No third-party tracking before consent, Named privacy contact | Compare |
| Medusamedusajs.com | 30/100 | 3 Status page with history, Public pricing, HTTPS enforced with HSTS | 2 Uptime SLA with a figure, No third-party tracking before consent | Compare |
| OXID eSalesoxid-esales.com | 30/100 | 3 Public pricing, HTTPS enforced with HSTS, security.txt (RFC 9116) | 1 No third-party tracking before consent | Compare |
Only criteria we could measure for both are counted. Where we could measure one and not the other, the row is silent: that would be a statement about our measurement, not about either vendor. Every single result with its source is on the two profiles.