SaaS Ranking

Evidence, on your terms

Explore the dataBuild your shortlist.

Every condition below is something we found at an address we checked, with the date. Public transparency score, not a product or security rating.

37 of 8,729 measured vendors match all 1 condition.

Refine your shortlist

More conditions 0 applied
What we found published

Match findings from the public pages we checked.

Certification named

Which vendors name this certification for themselves on a public page?

6 more
Hosting location named

Which vendors name this location when they say where the data sits?

14 more
Uptime figure

Which vendors name this as the highest uptime figure on their SLA page?

Subprocessor named

Whose subprocessor list names this provider?

20 more
Subprocessor notice period

Which vendors promise this much notice before a subprocessor changes?

Privacy contact

Which vendors publish this kind of privacy contact?

Third-party host on first load

Whose front page loads this third party before anyone clicks?

559 more

Start over

Vendors 1–25 of 37

Most transparent first

  • found, source linked
  • not found at the addresses we checked
  • not measured by us
  • 12 criteria in the order of the methodology, heaviest first within each group.
  • Keeperkeepersecurity.com
    Transparency 74/100 BBand B
    1. Data processing agreement: found
    2. Subprocessor list: found
    3. Data location stated: not found
    4. Status page with history: not found
    5. Public pricing: found
    6. Certifications named: found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: found
    10. security.txt (RFC 9116): found
    11. Notice before subprocessors change: found
    12. Named privacy contact: found

    9 found3 gapsGaps Data location stated, Status page with history, +1

  • Clerkclerk.com
    Transparency 61/100 CBand C
    1. Data processing agreement: found
    2. Subprocessor list: not found
    3. Data location stated: not found
    4. Status page with history: found
    5. Public pricing: found
    6. Certifications named: found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): found
    11. Notice before subprocessors change: found
    12. Named privacy contact: found

    8 found4 gapsGaps Subprocessor list, Data location stated, +2

  • Oktaokta.com
    Transparency 61/100 CBand C
    1. Data processing agreement: found
    2. Subprocessor list: not found
    3. Data location stated: found
    4. Status page with history: found
    5. Public pricing: found
    6. Certifications named: not found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: found

    7 found5 gapsGaps Subprocessor list, No third-party tracking before consent, +3

  • Ping Identitypingidentity.com
    Transparency 61/100 CBand C
    1. Data processing agreement: not found
    2. Subprocessor list: found
    3. Data location stated: not found
    4. Status page with history: found
    5. Public pricing: found
    6. Certifications named: found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): found
    11. Notice before subprocessors change: found
    12. Named privacy contact: found

    8 found4 gapsGaps Data processing agreement, Data location stated, +2

  • 1Password1password.com
    Transparency 57/100 CBand C
    1. Data processing agreement: found
    2. Subprocessor list: not found
    3. Data location stated: found
    4. Status page with history: found
    5. Public pricing: not found
    6. Certifications named: found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: found

    7 found5 gapsGaps Subprocessor list, Public pricing, +3

  • Dashlanedashlane.com
    Transparency 52/100 DBand D
    1. Data processing agreement: not found
    2. Subprocessor list: found
    3. Data location stated: found
    4. Status page with history: not found
    5. Public pricing: found
    6. Certifications named: not found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: found

    6 found6 gapsGaps Data processing agreement, Status page with history, +4

  • Transparency 48/100 DBand D
    1. Data processing agreement: not found
    2. Subprocessor list: not found
    3. Data location stated: found
    4. Status page with history: found
    5. Public pricing: found
    6. Certifications named: found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: not found

    6 found6 gapsGaps Data processing agreement, Subprocessor list, +4

  • WorkOSworkos.com
    Transparency 48/100 DBand D
    1. Data processing agreement: found
    2. Subprocessor list: not found
    3. Data location stated: not found
    4. Status page with history: found
    5. Public pricing: found
    6. Certifications named: found
    7. Uptime SLA with a figure: found
    8. HTTPS enforced with HSTS: not found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): not found
    11. Notice before subprocessors change: found
    12. Named privacy contact: not found

    6 found6 gapsGaps Subprocessor list, Data location stated, +4

  • Zitadelzitadel.com
    Transparency 48/100 DBand D
    1. Data processing agreement: found
    2. Subprocessor list: not found
    3. Data location stated: not found
    4. Status page with history: not found
    5. Public pricing: found
    6. Certifications named: not found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): found
    11. Notice before subprocessors change: found
    12. Named privacy contact: found

    6 found6 gapsGaps Subprocessor list, Data location stated, +4

  • Oryory.com
    Transparency 43/100 DBand D
    1. Data processing agreement: not found
    2. Subprocessor list: not found
    3. Data location stated: found
    4. Status page with history: not found
    5. Public pricing: found
    6. Certifications named: found
    7. Uptime SLA with a figure: found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: not found

    6 found6 gapsGaps Data processing agreement, Subprocessor list, +4

  • Passboltpassbolt.com
    Transparency 43/100 DBand D
    1. Data processing agreement: not found
    2. Subprocessor list: not found
    3. Data location stated: found
    4. Status page with history: not found
    5. Public pricing: found
    6. Certifications named: found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: found

    6 found6 gapsGaps Data processing agreement, Subprocessor list, +4

  • Cerboscerbos.dev
    Transparency 39/100 EBand E
    1. Data processing agreement: found
    2. Subprocessor list: not found
    3. Data location stated: not found
    4. Status page with history: not found
    5. Public pricing: found
    6. Certifications named: not found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): not found
    11. Notice before subprocessors change: found
    12. Named privacy contact: not found

    4 found8 gapsGaps Subprocessor list, Data location stated, +6

  • Descopedescope.com
    Transparency 39/100 EBand E
    1. Data processing agreement: not found
    2. Subprocessor list: found
    3. Data location stated: not found
    4. Status page with history: not found
    5. Public pricing: found
    6. Certifications named: not found
    7. Uptime SLA with a figure: found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): not found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: found

    5 found7 gapsGaps Data processing agreement, Data location stated, +5

  • Fronteggfrontegg.com
    Transparency 39/100 EBand E
    1. Data processing agreement: not found
    2. Subprocessor list: not found
    3. Data location stated: found
    4. Status page with history: found
    5. Public pricing: found
    6. Certifications named: found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: not found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): not found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: found

    5 found7 gapsGaps Data processing agreement, Subprocessor list, +5

  • FusionAuthfusionauth.io
    Transparency 39/100 EBand E
    1. Data processing agreement: not found
    2. Subprocessor list: not found
    3. Data location stated: not found
    4. Status page with history: found
    5. Public pricing: found
    6. Certifications named: found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: found

    6 found6 gapsGaps Data processing agreement, Subprocessor list, +4

  • JumpCloudjumpcloud.com
    Transparency 35/100 EBand E
    1. Data processing agreement: not found
    2. Subprocessor list: not found
    3. Data location stated: not found
    4. Status page with history: found
    5. Public pricing: found
    6. Certifications named: found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): not found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: found

    5 found7 gapsGaps Data processing agreement, Subprocessor list, +5

  • Permit.iopermit.io
    Transparency 35/100 EBand E
    1. Data processing agreement: found
    2. Subprocessor list: not found
    3. Data location stated: not found
    4. Status page with history: not found
    5. Public pricing: found
    6. Certifications named: found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): not found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: not found

    4 found8 gapsGaps Subprocessor list, Data location stated, +6

  • Kindekinde.com
    Transparency 26/100 EBand E
    1. Data processing agreement: not found
    2. Subprocessor list: not found
    3. Data location stated: not found
    4. Status page with history: not found
    5. Public pricing: found
    6. Certifications named: found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: not found

    4 found8 gapsGaps Data processing agreement, Subprocessor list, +6

  • Yubicoyubico.com
    Transparency 26/100 EBand E
    1. Data processing agreement: not found
    2. Subprocessor list: not found
    3. Data location stated: not found
    4. Status page with history: found
    5. Public pricing: not found
    6. Certifications named: found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: not found

    4 found8 gapsGaps Data processing agreement, Subprocessor list, +6

  • Authentikgoauthentik.io
    Transparency 22/100 FBand F
    1. Data processing agreement: not found
    2. Subprocessor list: not found
    3. Data location stated: not found
    4. Status page with history: not found
    5. Public pricing: found
    6. Certifications named: not found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: not found

    3 found9 gapsGaps Data processing agreement, Subprocessor list, +7

  • Authzedauthzed.com
    Transparency 22/100 FBand F
    1. Data processing agreement: not found
    2. Subprocessor list: not found
    3. Data location stated: not found
    4. Status page with history: not found
    5. Public pricing: found
    6. Certifications named: found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): not found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: not found

    3 found9 gapsGaps Data processing agreement, Subprocessor list, +7

  • Bitwardenbitwarden.com
    Transparency 22/100 FBand F
    1. Data processing agreement: not found
    2. Subprocessor list: not found
    3. Data location stated: not found
    4. Status page with history: not found
    5. Public pricing: found
    6. Certifications named: found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): not found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: not found

    3 found9 gapsGaps Data processing agreement, Subprocessor list, +7

  • Nevisnevis.net
    Transparency 22/100 FBand F
    1. Data processing agreement: not found
    2. Subprocessor list: not found
    3. Data location stated: not found
    4. Status page with history: found
    5. Public pricing: not found
    6. Certifications named: not found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): not found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: found

    3 found9 gapsGaps Data processing agreement, Subprocessor list, +7

  • Stytchstytch.com
    Transparency 22/100 FBand F
    1. Data processing agreement: not found
    2. Subprocessor list: not found
    3. Data location stated: not found
    4. Status page with history: not found
    5. Public pricing: found
    6. Certifications named: not found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): not found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: found

    3 found9 gapsGaps Data processing agreement, Subprocessor list, +7

  • Asertoaserto.com
    Transparency 17/100 FBand F
    1. Data processing agreement: not found
    2. Subprocessor list: not found
    3. Data location stated: not found
    4. Status page with history: not found
    5. Public pricing: found
    6. Certifications named: not found
    7. Uptime SLA with a figure: not found
    8. HTTPS enforced with HSTS: found
    9. No third-party tracking before consent: not found
    10. security.txt (RFC 9116): not found
    11. Notice before subprocessors change: not found
    12. Named privacy contact: not found

    2 found10 gapsGaps Data processing agreement, Subprocessor list, +8

  • Tick 2 vendors to compare them. 0 of 2 selected 1 of 2 selected 2 of 2 selected More than 2 selected. A comparison sets 2 side by side.

What this does and does not say