SaaS transparency ranking · Security and compliance
ESG reporting vendors, ranked by what they publish
Sustainability and ESG reporting platforms, ranked by what they publish about how they handle your data.
6 vendors measured on their own sites, last on 2026-09-02. 6 ranked. A vendor we could not measure often enough gets no rank at all, rather than a bad one.
Public transparency score, not a product or security rating. Transparency means: published on the vendor's own site, readable without a login, found by us at the addresses we checked.
- ESG reporting26
- All categories26
6 vendors
Sort by Score Name Last checked
Filters (0)
- ✓ found, source linked
- × not found at the addresses we checked
- – not measured by us
- 12 criteria in the order of the methodology, heaviest first within each group.
-
1
Benchmark ESGbenchmarkdigital.comTransparency 39/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: found
- Named privacy contact: not found
Gap: Data processing agreement and 7 moreWhy this rank?
Transparency 39/100 = weight of what we found (9) divided by weight of what we could measure (23). Rank 1 in this category by that score; ties are broken by name.
Found with a source, 4 criteria: Data location stated ×3, Public pricing ×2, HTTPS enforced with HSTS ×2, Notice before subprocessors change ×2.
Not found at the addresses we checked, 8 criteria: Data processing agreement ×3, Subprocessor list ×3, Status page with history ×2, No third-party tracking before consent ×2, Certifications named ×1, Uptime SLA with a figure ×1, security.txt (RFC 9116) ×1, Named privacy contact ×1.
Every source and every checked address is on the vendor page.
-
2
Coritycority.comTransparency 39/100 EBand E
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
Gap: Subprocessor list and 6 moreWhy this rank?
Transparency 39/100 = weight of what we found (9) divided by weight of what we could measure (23). Rank 2 in this category by that score; ties are broken by name.
Found with a source, 5 criteria: Data processing agreement ×3, Status page with history ×2, Public pricing ×2, Certifications named ×1, Uptime SLA with a figure ×1.
Not found at the addresses we checked, 7 criteria: Subprocessor list ×3, Data location stated ×3, HTTPS enforced with HSTS ×2, No third-party tracking before consent ×2, Notice before subprocessors change ×2, security.txt (RFC 9116) ×1, Named privacy contact ×1.
Every source and every checked address is on the vendor page.
-
3
Apidayapiday.comTransparency 26/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
Gap: Data processing agreement and 8 moreWhy this rank?
Transparency 26/100 = weight of what we found (6) divided by weight of what we could measure (23). Rank 3 in this category by that score; ties are broken by name.
Found with a source, 3 criteria: Data location stated ×3, HTTPS enforced with HSTS ×2, Named privacy contact ×1.
Not found at the addresses we checked, 9 criteria: Data processing agreement ×3, Subprocessor list ×3, Status page with history ×2, Public pricing ×2, No third-party tracking before consent ×2, Notice before subprocessors change ×2, Certifications named ×1, Uptime SLA with a figure ×1, security.txt (RFC 9116) ×1.
Every source and every checked address is on the vendor page.
-
4
Coolsetcoolset.comTransparency 26/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
Gap: Data processing agreement and 8 moreWhy this rank?
Transparency 26/100 = weight of what we found (6) divided by weight of what we could measure (23). Rank 4 in this category by that score; ties are broken by name.
Found with a source, 3 criteria: Data location stated ×3, HTTPS enforced with HSTS ×2, Named privacy contact ×1.
Not found at the addresses we checked, 9 criteria: Data processing agreement ×3, Subprocessor list ×3, Status page with history ×2, Public pricing ×2, No third-party tracking before consent ×2, Notice before subprocessors change ×2, Certifications named ×1, Uptime SLA with a figure ×1, security.txt (RFC 9116) ×1.
Every source and every checked address is on the vendor page.
-
5
ClimatePartnerclimatepartner.comTransparency 13/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
Gap: Data processing agreement and 9 moreWhy this rank?
Transparency 13/100 = weight of what we found (3) divided by weight of what we could measure (23). Rank 5 in this category by that score; ties are broken by name.
Found with a source, 2 criteria: HTTPS enforced with HSTS ×2, Named privacy contact ×1.
Not found at the addresses we checked, 10 criteria: Data processing agreement ×3, Subprocessor list ×3, Data location stated ×3, Status page with history ×2, Public pricing ×2, No third-party tracking before consent ×2, Notice before subprocessors change ×2, Certifications named ×1, Uptime SLA with a figure ×1, security.txt (RFC 9116) ×1.
Every source and every checked address is on the vendor page.
-
6
Carbmeecarbmee.comTransparency 9/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
Gap: Data processing agreement and 10 moreWhy this rank?
Transparency 9/100 = weight of what we found (2) divided by weight of what we could measure (23). Rank 6 in this category by that score; ties are broken by name.
Found with a source, 1 criterion: HTTPS enforced with HSTS ×2.
Not found at the addresses we checked, 11 criteria: Data processing agreement ×3, Subprocessor list ×3, Data location stated ×3, Status page with history ×2, Public pricing ×2, No third-party tracking before consent ×2, Notice before subprocessors change ×2, Certifications named ×1, Uptime SLA with a figure ×1, security.txt (RFC 9116) ×1, Named privacy contact ×1.
Every source and every checked address is on the vendor page.
Tick two vendors above.
Every result links its source on the vendor page. A dash means we could not measure it, not that it is missing. See how we score.