✓
Subprocessors: the published list
weight 3 of 3
The actual list is published, not just a promise to keep one.
Source: https://assessly.in/subprocessors · checked 2026-10-26
✓
Data location: where they say data is hosted
weight 3 of 3
The hosting location is stated on a public page.
- Locations named next to the hosting wording India, Mumbai. This does not establish the company’s headquarters.
Show the 2 exact wordings
The database, file storage and code execution are in India (Mumbai).
Read at https://assessly.in/data-processing
The database, file storage and code execution are in India (Mumbai).
Read at https://assessly.in/data-processing
Source: https://assessly.in/data-processing · checked 2026-10-26
✓
Status page with incident history
weight 2 of 3
A public status page with incident history.
Source: https://status.assessly.in/ · checked 2026-10-26
✓
HTTPS enforced with HSTS
weight 2 of 3
HTTP redirects to HTTPS and the HSTS header is set.
- HSTS max-age 31536000 seconds (365 days).
Show the exact wording
max-age=31536000; includeSubDomains; preload
Read at https://assessly.in/
- HSTS options includeSubDomains, preload.
Show the 2 exact wordings
max-age=31536000; includeSubDomains; preload
Read at https://assessly.in/
max-age=31536000; includeSubDomains; preload
Read at https://assessly.in/
Source: https://assessly.in/ · checked 2026-10-26
✓
No third-party tracking before consent
weight 2 of 3
No third-party requests before any interaction.
Source: https://assessly.in/ · checked 2026-10-26
✓
Notice before subprocessors change
weight 2 of 3
The vendor commits publicly to giving notice before the list changes.
Source: https://assessly.in/subprocessors · checked 2026-10-26
✓
Certifications named (SOC 2, ISO 27001)
weight 1 of 3
SOC 2 or ISO 27001 named on a public page.
- Named on that page ISO/IEC 27001 (not counted: the sentence does not carry it), SOC 2 (not counted: the sentence does not carry it). The sentence we kept does not carry this finding on its own, so it counts in no list and no figure.
Show the 2 exact wordings
Assessly does not hold ISO 27001 or SOC 2 certification and does not claim to, and has no penetration test report from an outside fi
Read at https://assessly.in/data-processing
Assessly does not hold ISO 27001 or SOC 2 certification and does not claim to, and has no penetration test report from an outside firm.
Read at https://assessly.in/data-processing
Source: https://assessly.in/data-processing · checked 2026-10-26