ActiveCampaign
What ActiveCampaign publishes, measured on their own site. Every result below links the page we found it on, or lists the addresses we checked.
- 70out of 100
- 10/10Criteria measured
- 2026-08-31Checked
Vendor site: activecampaign.com · category: Email marketing
Data processing agreement
Published and readable without a login.
Source: https://www.activecampaign.com/legal/dpa · checked 2026-08-31
Subprocessor list
The actual list is published, not just a promise to keep one.
Source: https://www.activecampaign.com/legal/subprocessors · checked 2026-08-31
Data location stated
We found this behind a sign-in, so it is not published openly.
Seen at https://www.activecampaign.com/legal/privacy-policy · checked 2026-08-31
Show the 7 addresses we checked
https://activecampaign.com/security– reached, no match (HTTP 200)https://activecampaign.com/trust– reached, no match (HTTP 404)https://activecampaign.com/legal/privacy– reached, no match (HTTP 404)https://activecampaign.com/privacy– reached, no match (HTTP 404)https://activecampaign.com/privacy-policy– found, but behind a sign-inhttps://activecampaign.com/compliance– reached, no match (HTTP 404)https://activecampaign.com/legal/privacy-policy– found, but behind a sign-in
Status page with history
A public status page with incident history.
Source: https://status.activecampaign.com/ · checked 2026-08-31
Public pricing
Actual numbers on a public page.
Source: https://www.activecampaign.com/pricing · checked 2026-08-31
Certifications named
SOC 2 or ISO 27001 named on a public page.
Source: https://www.activecampaign.com/security · checked 2026-08-31
Uptime SLA with a figure
An availability commitment with a figure.
Source: https://www.activecampaign.com/legal/service-level-agreement · checked 2026-08-31
HTTPS enforced with HSTS
HTTP redirects to HTTPS and the HSTS header is set.
Source: https://activecampaign.com/ · checked 2026-08-31
No third-party tracking before consent
No consent-free first load found.
Checked 1 address on 2026-08-31.
Show the 1 address we checked
https://activecampaign.com/– third-party requests before any interaction: active-campaign.transforms.svdcdn.com, activecampaign.demdex.net, activecampaignsubsdev.112.2o7.net, ade.googlesyndication.com, assets.adobedtm.com, cdn.cookielaw.org, cm.everesttech.net, diffuser-cdn.app-us1.com, dpm.demdex.net, grsm.io, pagead2.googlesyndication.com, partnerlinks.io, prism.app-us1.com, region1.google-analytics.com, static.cloudflareinsights.com, static.hotjar.com, trackcmp.net, tracking-api.g2.com, tracking.g2crowd.com, www.googletagmanager.com
security.txt (RFC 9116)
No security.txt found.
Checked 1 address on 2026-08-31.
Show the 1 address we checked
https://activecampaign.com/.well-known/security.txt– reached, no match (HTTP 404)