Klaviyo
What Klaviyo publishes, measured on their own site. Every result below links the page we found it on, or lists the addresses we checked.
- 65out of 100
- 10/10Criteria measured
- 2026-08-31Checked
Vendor site: klaviyo.com · category: Email marketing
Data processing agreement
Published and readable without a login.
Source: https://www.klaviyo.com/legal/data-processing-agreement · checked 2026-08-31
Subprocessor list
The actual list is published, not just a promise to keep one.
Source: https://www.klaviyo.com/legal/subprocessors · checked 2026-08-31
Data location stated
No statement about data location found.
Checked 7 addresses on 2026-08-31.
Show the 7 addresses we checked
https://klaviyo.com/security– reached, no match (HTTP 404)https://klaviyo.com/trust– reached, no match (HTTP 404)https://klaviyo.com/legal/privacy– reached, no match (HTTP 200)https://klaviyo.com/privacy– reached, no match (HTTP 404)https://klaviyo.com/privacy-policy– reached, no match (HTTP 404)https://klaviyo.com/compliance– reached, no match (HTTP 404)https://klaviyo.com/legal/privacy-policy– reached, no match (HTTP 200)
Status page with history
A public status page with incident history.
Source: https://status.klaviyo.com/ · checked 2026-08-31
Public pricing
Actual numbers on a public page.
Source: https://www.klaviyo.com/de/pricing · checked 2026-08-31
Certifications named
SOC 2 or ISO 27001 named on a public page.
Source: https://trust.klaviyo.com/ · checked 2026-08-31
Uptime SLA with a figure
No uptime figure found.
Checked 6 addresses on 2026-08-31.
Show the 6 addresses we checked
https://klaviyo.com/legal/sla– reached, no match (HTTP 404)https://klaviyo.com/sla– reached, no match (HTTP 404)https://klaviyo.com/legal/service-level-agreement– reached, no match (HTTP 404)https://klaviyo.com/trust/sla– reached, no match (HTTP 404)https://klaviyo.com/uptime– reached, no match (HTTP 404)https://klaviyo.com/legal/uptime-sla– reached, no match (HTTP 404)
HTTPS enforced with HSTS
HTTP redirects to HTTPS and the HSTS header is set.
Source: https://klaviyo.com/ · checked 2026-08-31
No third-party tracking before consent
No consent-free first load found.
Checked 1 address on 2026-08-31.
Show the 1 address we checked
https://klaviyo.com/– third-party requests before any interaction: cdn.optimizely.com, cdn.sanity.io, cdnjs.cloudflare.com, d1igp3oop3iho5.cloudfront.net, fonts.gstatic.com, js.hs-scripts.com, js.hsforms.net, o19233.ingest.us.sentry.io, player.vimeo.com, spider.australiarevival.com, transcend-cdn.com, vimeo.com, www.google.com, www.googletagmanager.com, www.gstatic.com
security.txt (RFC 9116)
No security.txt found.
Checked 1 address on 2026-08-31.
Show the 1 address we checked
https://klaviyo.com/.well-known/security.txt– reached, no match (HTTP 404)