Evidence, on your terms

Explore the dataBuild your shortlist.

Every condition below is something we found at an address we checked, with the date. Public transparency score, not a product or security rating.

10 of 8,729 measured vendors match all 3 conditions.

Web analytics, remove
Data processing agreement, remove
European Union, remove
Clear all

Refine your shortlist

Category

Order

More conditions 2 applied

What we found published

Match findings from the public pages we checked.

Data processing agreement
Subprocessor list
Data location stated
Status page with history
Public pricing
Certifications named
Uptime SLA with a figure
HTTPS enforced with HSTS
No third-party tracking before consent
security.txt (RFC 9116)
Notice before subprocessors change
Named privacy contact

Certification named

Which vendors name this certification for themselves on a public page?

SOC 2 Type II 489
ISO/IEC 27001 426
SOC 2 285
HIPAA 153
PCI DSS 67
Cyber Essentials 43
ISO/IEC 27017 38
ISO 9001 37

6 more

ISO/IEC 27701 37
CSA STAR 34
FedRAMP 22
ISO/IEC 27018 22
HITRUST CSF 17
ISO 22301 14

Hosting location named

Which vendors name this location when they say where the data sits?

United States 1276
European Union 348
Germany 188
Canada 163
European Economic Area 157
Ireland 140
Australia 131
United Kingdom 86

14 more

Frankfurt 80
India 47
Netherlands 43
Virginia 43
France 39
Singapore 38
Switzerland 31
Belgium 23
Sydney 22
us-east 22
Japan 20
London 16
Brazil 12
Oregon 12

Uptime figure

Which vendors name this as the highest uptime figure on their SLA page?

99.9 % 72
100 % 54
99.5 % 40
99.99 % 31
99 % 24
99.95 % 21
99.8 % 10

Subprocessor named

Whose subprocessor list names this provider?

Amazon Web Services 466
Twilio 232
Salesforce 206
Google Cloud 203
Stripe 199
Slack 194
Zendesk 181
SendGrid 168

20 more

Cloudflare 167
Microsoft Azure 167
HubSpot 158
Sentry 143
Datadog 139
Intercom 136
Atlassian 128
Snowflake 122
Mailgun 82
MongoDB 77
Segment 72
Okta 68
Auth0 58
New Relic 42
Workato 36
Heroku 23
DigitalOcean 18
Fastly 13
Akamai 9
Algolia 9

Subprocessor notice period

Which vendors promise this much notice before a subprocessor changes?

30 days 78
10 days 21
14 days 10
15 days 9

Privacy contact

Which vendors publish this kind of privacy contact?

Dedicated privacy address 2158
Named data protection officer 1731

Third-party host on first load

Whose front page loads this third party before anyone clicks?

googletagmanager.com 5933
gstatic.com 4040
googleapis.com 3745
google.com 3728
doubleclick.net 3026
google-analytics.com 2834
google.de 2424
hs-banner.com 1987

559 more

hubspot.com 1969
hs-analytics.net 1934
licdn.com 1915
linkedin.com 1846
hsforms.com 1767
hs-scripts.com 1709
jsdelivr.net 1665
facebook.net 1458
googlesyndication.com 1453
cloudfront.net 1445
hsadspixel.net 1428
cloudflare.com 1422
clarity.ms 1240
facebook.com 1240
hscollectedforms.net 1130
hubapi.com 1023
website-files.com 1023
bing.com 1014
hsforms.net 845
bing.net 793
onetrust.com 707
cookiebot.com 672
cookielaw.org 661
usemessages.com 650
amazonaws.com 596
cloudflareinsights.com 594
unpkg.com 594
hotjar.com 587
hsappstatic.net 578
cdn-cookieyes.com 554
cookieyes.com 528
redditstatic.com 520
youtube.com 520
typekit.net 515
g2.com 513
reddit.com 510
hubspotusercontent-na1.net 493
zoominfo.com 432
sentry-cdn.com 423
fontawesome.com 420
ytimg.com 417
zi-scripts.com 390
openai.com 384
vimeo.com 383
visualwebsiteoptimizer.com 356
googleadservices.com 347
intercom.io 347
jquery.com 335
vimeocdn.com 328
g2crowd.com 325
wistia.com 322
ads-twitter.com 308
ahrefs.com 306
twitter.com 297
t.co 282
apollo.io 278
aplo-evnt.com 269
lfeeder.com 267
invalid 253
qualified.com 244
capterra.com 242
marketo.net 242
usercentrics.eu 240
sentry.io 225
mktoresp.com 222
6sc.co 214
hs-sites.com 208
posthog.com 198
wistia.net 170
clickcease.com 153
hubspotonwebflow.com 152
osano.com 152
segment.com 149
intellimize.co 146
adnxs.com 145
bootstrapcdn.com 143
amplitude.com 142
framerusercontent.com 139
6sense.com 138
crazyegg.com 138
claydar.com 137
plausible.io 137
framer.com 132
on.aws 131
getnitropack.com 128
vector.co 128
calendly.com 127
sanity.io 127
wp.com 126
dreamdata.cloud 125
adroll.com 118
salesloft.com 118
clearbitscripts.com 114
weglot.com 111
chilipiper.com 110
newrelic.com 110
ctfassets.net 109
run.app 109
demandbase.com 108
segment.io 108
company-target.com 107
nr-data.net 106
adsrvr.org 103
tiktok.com 101
pubmatic.com 100
casalemedia.com 97
nitrocdn.com 96
hubspot.net 94
trustpilot.com 94
adobedtm.com 91
hubspotusercontent-eu1.net 91
rubiconproject.com 91
tiktokw.us 90
usbrowserspeed.com 90
webflow.services 89
contentsquare.net 88
pardot.com 88
cookie-script.com 87
storylane.io 84
trustarc.com 84
navattic.com 82
storyblok.com 82
factors.ai 81
github.com 78
zohocdn.com 77
stackadapt.com 76
termly.io 76
cr-relay.com 74
vidyard.com 74
acsbapp.com 73
embedly.com 73
iubenda.com 73
firstpromoter.com 72
wixstatic.com 72
parastorage.com 71
tawk.to 71
wixapps.net 71
zdassets.com 71
mxpnl.com 70
optimizely.com 70
quora.com 70
wix.com 70
bizible.com 69
addtoany.com 68
rlcdn.com 68
ipapi.co 67
cloudinary.com 66
zendesk.com 64
drda.io 63
omappapi.com 63
tremorhub.com 63
grsm.io 62
ipify.org 62
mux.com 62
ipinfo.io 61
stripe.com 61
convertexperiments.com 60
partnerlinks.io 60
getwarmly.com 59
ggpht.com 59
hubspotvideo.com 59
mouseflow.com 59
squarespace.com 59
youtube-nocookie.com 59
squarespace-cdn.com 58
bunny.net 57
sqspcdn.com 57
bizibly.com 55
finsweet.com 55
leadinfo.com 55
leadinfo.net 55
matomo.cloud 55
zoho.com 54
prismic.io 53
userway.org 53
wdfl.co 53
wpengine.com 53
axept.io 52
hs-sites-eu1.com 52
profitwell.com 52
snitcher.com 52
unifyintent.com 52
zohopublic.com 52
app-us1.com 51
googlevideo.com 51
mountain.com 51
sf-syn.com 51
usefathom.com 51
hubspotfeedback.com 50
ubembed.com 50
ketchcdn.com 49
taboola.com 49
b-cdn.net 48
cookiehub.eu 48
crisp.chat 48
intellimizeio.com 48
leadsy.ai 48
liadm.com 47
clearbitjs.com 46
clearbit.com 45
googleoptimize.com 45
ml314.com 45
github.io 44
imgix.net 44
callrail.com 43
cookiepro.com 43
fullstory.com 43
outbrain.com 43
cookiehub.net 42
wpenginepowered.com 42
azure.com 41
clickagy.com 39
demdex.net 39
hubspotusercontent-na2.net 39
livechatinc.com 39
marketo.com 39
pagesense.io 39
stripe.network 39
transcend-cdn.com 38
digitaloceanspaces.com 37
jetboost.io 37
reo.dev 37
softwareadvice.com 37
bc0a.com 36
sharethis.com 36
cookiebot.eu 35
privacy-center.org 35
consentpro.com 34
heapanalytics.com 34
ip-api.com 34
oktopost.com 34
pingdom.net 34
spotify.com 34
geojs.io 33
wsimg.com 33
datocms-assets.com 32
byspotify.com 31
consentmanager.net 31
gaconnector.com 31
revenuehero.io 31
bidswitch.net 30
datagrail.io 30
eyeota.net 30
getapp.com 30
growthbook.io 30
helpscout.net 30
partnerstack.com 30
plyr.io 30
secureserver.net 30
trackcmp.net 30
3lift.com 29
cookiefirst.com 29
openx.net 29
promptwatch.com 29
adoberesources.net 28
litix.io 28
chimpstatic.com 27
elfsight.com 27
influ2.com 27
leadforensics.com 27
lemlist.com 27
optibase.io 27
rudderlabs.com 27
rudderstack.com 27
searchatlas.com 27
bugsnag.com 26
datadoghq-browser-agent.com 26
shortpixel.ai 26
tapad.com 26
albacross.com 25
cookieinformation.com 25
default.com 25
mailchimp.com 25
pathfactory.com 24
amazon-adsystem.com 23
bugherd.com 23
driftt.com 23
piwik.pro 23
simpli.fi 23
zencdn.net 23
everesttech.net 22
getkoala.com 22
go-mpulse.net 22
sayprimer.com 22
smartlook.com 22
statuspage.io 22
tiqcdn.com 22
w.org 22
enzuzo.com 21
luckyorange.com 21
pages.dev 21
propensity.com 21
supabase.co 21
vercel.app 21
vibe.co 21
adtrafficquality.google 20
awswaf.com 20
bidr.io 20
browser-intake-datadoghq.com 20
dubcdn.com 20
launchdarkly.com 20
leandata.com 20
mutinycdn.com 20
pinterest.com 20
windows.net 20
builder.io 19
ccm19.de 19
gaug.es 19
lltrck.com 19
nrich.ai 19
openfpcdn.io 19
propensity-abm.com 19
scene7.com 19
brevo.com 18
customer.io 18
hscta.net 18
lottie.host 18
pinimg.com 18
refokus.com 18
rocketcdn.me 18
site.com 18
slater.app 18
tailwindcss.com 18
unsplash.com 18
workers.dev 18
ywxi.net 18
azureedge.net 17
cal.com 17
cleantalk.org 17
elfsightcdn.com 17
fonts.net 17
g10498469755.co 17
githubusercontent.com 17
hu-manity.co 17
luckyorange.net 17
okt.to 17
omtrdc.net 17
pipedrive.com 17
popt.in 17
tapfiliate.com 17
vercel-storage.com 17
abtasty.com 16
chatbase.co 16
clearout.io 16
dwin1.com 16
gatedcontent.com 16
metricool.com 16
paddle.com 16
pipedriveassets.com 16
senja.io 16
sibautomation.com 16
tidio.co 16
trustedsite.com 16
trustindex.io 16
wonderpush.com 16
yandex.ru 16
adobe.io 15
akstat.io 15
fontshare.com 15
gartner.com 15
getclicky.com 15
hs-sites-na2.com 15
impactcdn.com 15
instant.page 15
kameleoon.io 15
ldnfrpl.com 15
mplat-ppcprotect.com 15
producthunt.com 15
recaptcha.net 15
sitescout.com 15
visualstudio.com 15
webflow.com 15
zoho.eu 15
arcade.software 14
cloudflarestream.com 14
driftapi.com 14
dynatrace.com 14
en25.com 14
gravatar.com 14
klaviyo.com 14
metadata.io 14
mida.so 14
mktoweb.com 14
pdscrb.com 14
rsms.me 14
salesforce-scrt.com 14
scriptintel.io 14
statcounter.com 14
varify.io 14
calltrk.com 13
d41.co 13
featureassets.org 13
getsitecontrol.com 13
hellobar.com 13
hubspotusercontent30.net 13
imagekit.io 13
prodregistryv2.org 13
rive.app 13
schemaapp.com 13
sleeknote.com 13
techtarget.com 13
tolt.io 13
truste.com 13
wisepops.com 13
wisepops.net 13
yahoo.com 13
zohopublic.eu 13
aspnetcdn.com 12
brightcove.net 12
calibermind.com 12
cello.so 12
coveo.com 12
embed.ly 12
fw-cdn.com 12
greenhouse.io 12
hlx.page 12
iconify.design 12
iconnode.com 12
mapbox.com 12
marker.io 12
olark.com 12
salesforce.com 12
schema-flow.com 12
shopify.com 12
typeform.com 12
usergems.com 12
vidzflow.com 12
wpmucdn.com 12
yandex.com 12
arcade.show 11
aws53.cloud 11
boltdns.net 11
brightcove.com 11
cdn-api-weglot.com 11
cdnfonts.com 11
civiccomputing.com 11
contentstack.io 11
cr-proxy.com 11
debugbear.com 11
drift.com 11
equalweb.com 11
getswan.com 11
happierleads.com 11
imagedelivery.net 11
inspectlet.com 11
intentsify.io 11
jscloud.net 11
kinsta.cloud 11
leadpipe.com 11
optimonk.com 11
pcdn.co 11
provenexpert.com 11
roeyecdn.com 11
securiti.ai 11
simpleanalyticscdn.com 11
sitecorecloud.io 11
userled.io 11
userledclient.io 11
visibilitykit.ai 11
withgoogle.com 11
akamaihd.net 10
brightcovecdn.com 10
country.is 10
eloqua.com 10
flagcdn.com 10
googleusercontent.com 10
gtranslate.net 10
insent.ai 10
mailerlite.com 10
marketingautomation.services 10
ml-attr.com 10
myfonts.net 10
netlify.app 10
neverbounce.com 10
omr.com 10
roeye.com 10
salesviewer.com 10
salesviewer.org 10
sc-static.net 10
sequelvideo.com 10
shopifysvc.com 10
siteimproveanalytics.com 10
siteimproveanalytics.io 10
snapchat.com 10
terminus.services 10
tofuhq.com 10
typography.com 10
wikimedia.org 10
yimg.com 10
1mind.com 9
captcha-delivery.com 9
clickdimensions.com 9
cloudfunctions.net 9
comparesoft.com 9
ds360.co 9
etracker.com 9
framerstatic.com 9
freshchat.com 9
geoip-js.com 9
getdrip.com 9
gleap.io 9
heeet.io 9
hotjar.io 9
ksrndkehqnwntyxlhgto.com 9
leadconnectorhq.com 9
ninetailed.co 9
ojrq.net 9
parsely.com 9
r2.dev 9
railway.app 9
shop.app 9
sopro.io 9
speedcurve.com 9
sumome.com 9
survicate.com 9
umami.is 9
widen.net 9
zoho.in 9
addthis.com 8
aggle.net 8
appspot.com 8
b3mxnuvcer.com 8
basis.net 8
buzzfufighter.com 8
contentful.com 8
criteo.com 8
crozdesk.com 8
elementor.com 8
episerver.net 8
etracker.de 8
fastly.net 8
fraud0.com 8
fraudblocker.com 8
g1584674684.co 8
growsumo.com 8
hcaptcha.com 8
heap-api.com 8
herokuapp.com 8
insightcdn.net 8
knock-ai.com 8
leadlab.click 8
lusha.com 8
microsoft.com 8
ortto.app 8
pantheonsite.io 8
referralrock.com 8
rollbar.com 8
salespeak.ai 8
shields.io 8
spline.design 8
svdcdn.com 8
tctm.co 8
team.blue 8
trendemon.com 8
trygravity.ai 8
twimg.com 8
visitor-analytics.io 8
visitorqueue.com 8
yimg.jp 8

Start over

Vendors 1–10 of 10

Most transparent first

found, source linked
not found at the addresses we checked
not measured by us
12 criteria in the order of the methodology, heaviest first within each group.

Mixpanelmixpanel.com

Transparency 78/100 BBand B
1. Data processing agreement: found
2. Subprocessor list: found
3. Data location stated: found
4. Status page with history: found
5. Public pricing: found
6. Certifications named: not found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): found
11. Notice before subprocessors change: found
12. Named privacy contact: not found
8 found4 gapsGaps No third-party tracking before consent, Certifications named, +2Compare
PostHogposthog.com

Transparency 78/100 BBand B
1. Data processing agreement: found
2. Subprocessor list: found
3. Data location stated: found
4. Status page with history: not found
5. Public pricing: found
6. Certifications named: found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): found
11. Notice before subprocessors change: found
12. Named privacy contact: found
9 found3 gapsGaps Status page with history, No third-party tracking before consent, +1Compare
Amplitudeamplitude.com

Transparency 74/100 BBand B
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: found
5. Public pricing: found
6. Certifications named: found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): found
11. Notice before subprocessors change: found
12. Named privacy contact: found
9 found3 gapsGaps Subprocessor list, No third-party tracking before consent, +1Compare
Swetrixswetrix.com

Transparency 61/100 CBand C
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: not found
5. Public pricing: found
6. Certifications named: not found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: found
10. security.txt (RFC 9116): not found
11. Notice before subprocessors change: found
12. Named privacy contact: not found
6 found6 gapsGaps Subprocessor list, Status page with history, +4Compare
Rybbitrybbit.com

Transparency 57/100 CBand C
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: not found
5. Public pricing: found
6. Certifications named: found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): not found
11. Notice before subprocessors change: found
12. Named privacy contact: not found
6 found6 gapsGaps Subprocessor list, Status page with history, +4Compare
Matomomatomo.org

Transparency 52/100 DBand D
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: not found
5. Public pricing: found
6. Certifications named: found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): not found
11. Notice before subprocessors change: not found
12. Named privacy contact: found
6 found6 gapsGaps Subprocessor list, Status page with history, +4Compare
Selineseline.com

Transparency 52/100 DBand D
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: not found
5. Public pricing: found
6. Certifications named: not found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): not found
11. Notice before subprocessors change: found
12. Named privacy contact: not found
5 found7 gapsGaps Subprocessor list, Status page with history, +5Compare
Mouseflowmouseflow.com

Transparency 48/100 DBand D
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: not found
5. Public pricing: not found
6. Certifications named: not found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): not found
11. Notice before subprocessors change: found
12. Named privacy contact: found
5 found7 gapsGaps Subprocessor list, Status page with history, +5Compare
Plausibleplausible.io

Transparency 48/100 DBand D
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: not found
5. Public pricing: not found
6. Certifications named: not found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: not found
9. No third-party tracking before consent: found
10. security.txt (RFC 9116): not found
11. Notice before subprocessors change: found
12. Named privacy contact: found
5 found7 gapsGaps Subprocessor list, Status page with history, +5Compare
OpenPanelopenpanel.dev

Transparency 39/100 EBand E
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: not found
5. Public pricing: found
6. Certifications named: not found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: not found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): found
11. Notice before subprocessors change: not found
12. Named privacy contact: not found
4 found8 gapsGaps Subprocessor list, Status page with history, +6Compare
Tick 2 vendors to compare them. 0 of 2 selected 1 of 2 selected 2 of 2 selected More than 2 selected. A comparison sets 2 side by side.

What this does and does not say

Every condition is a finding, never an absence. There is no "without US hosting" here: we did not find the location, and that is not the same as the data not being there.
A vendor that does not match may still publish it. Somewhere we did not look, or behind a login. The list says nothing about vendors that are not on it.
Values come from quotes we kept. A certification named for a data centre is not counted here, and neither is a finding whose own sentence does not carry it. How good our own measurement is.

Every category we measure
Every value we read off their pages
How we score