Evidence, on your terms

Explore the dataBuild your shortlist.

Every condition below is something we found at an address we checked, with the date. Public transparency score, not a product or security rating.

8 of 8,729 measured vendors match all 2 conditions.

Refine your shortlist

Vendors 1–8 of 8

Most transparent first

found, source linked
not found at the addresses we checked
not measured by us
12 criteria in the order of the methodology, heaviest first within each group.

HubSpothubspot.com

Transparency 52/100 DBand D
1. Data processing agreement: not found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: found
5. Public pricing: found
6. Certifications named: found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): found
11. Notice before subprocessors change: not found
12. Named privacy contact: found
7 found5 gapsGaps Data processing agreement, Subprocessor list, +3Compare
Vtigervtiger.com

Transparency 43/100 DBand D
1. Data processing agreement: not found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: found
5. Public pricing: found
6. Certifications named: not found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): not found
11. Notice before subprocessors change: not found
12. Named privacy contact: found
5 found7 gapsGaps Data processing agreement, Subprocessor list, +5Compare
CrmOnecrmone.com

Transparency 35/100 EBand E
1. Data processing agreement: not found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: not found
5. Public pricing: found
6. Certifications named: not found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): not found
11. Notice before subprocessors change: not found
12. Named privacy contact: found
4 found8 gapsGaps Data processing agreement, Subprocessor list, +6Compare
RightComrightcom.com

Transparency 32/100 EBand E
1. Data processing agreement: not found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: not found
5. Public pricing: found
6. Certifications named: not found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): not measured
11. Notice before subprocessors change: not found
12. Named privacy contact: not found
3 found8 gaps1 not measuredGaps Data processing agreement, Subprocessor list, +6Compare
Efficyefficy.com

Transparency 26/100 EBand E
1. Data processing agreement: not found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: not found
5. Public pricing: not found
6. Certifications named: not found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): not found
11. Notice before subprocessors change: not found
12. Named privacy contact: found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Compare
Lime CRMlime-technologies.com

Transparency 26/100 EBand E
1. Data processing agreement: not found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: not found
5. Public pricing: not found
6. Certifications named: found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): not found
11. Notice before subprocessors change: not found
12. Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Compare
Bitrix24bitrix24.com

Transparency 23/100 FBand F
1. Data processing agreement: not found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: not found
5. Public pricing: not found
6. Certifications named: found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: not found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): not measured
11. Notice before subprocessors change: not found
12. Named privacy contact: found
3 found8 gaps1 not measuredGaps Data processing agreement, Subprocessor list, +6Compare
1CRM1crm.com

Transparency 17/100 FBand F
1. Data processing agreement: not found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: not found
5. Public pricing: not found
6. Certifications named: not found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: not found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): not found
11. Notice before subprocessors change: not found
12. Named privacy contact: found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Compare
Tick 2 vendors to compare them. 0 of 2 selected 1 of 2 selected 2 of 2 selected More than 2 selected. A comparison sets 2 side by side.

What this does and does not say

Every condition is a finding, never an absence. There is no "without US hosting" here: we did not find the location, and that is not the same as the data not being there.
A vendor that does not match may still publish it. Somewhere we did not look, or behind a login. The list says nothing about vendors that are not on it.
Values come from quotes we kept. A certification named for a data centre is not counted here, and neither is a finding whose own sentence does not carry it. How good our own measurement is.