SaaS Ranking
Menu

Engineering and data / Feature flags and experimentation

ConfigCat

What ConfigCat publishes on configcat.com, measured on 2026-09-02. Every line links the page we found it on, or lists the addresses we checked.

Transparency 30/100 EBand E

Rank 5 of 6 in Feature flags and experimentationcategory median 34.5checked 2026-09-02

7 gaps found: 7 criteria not found at the addresses we checked. 5 found7 not found0 not measured

Public transparency score, not a product or security rating.

Transparency labelsaas-ranking.com

ConfigCat

configcat.com · Feature flags and experimentation

  1. A
  2. B
  3. C
  4. D
  5. E
  6. F
E 30of 100 Rank 5 of 6

Published commitments3 of 9 found

Measured behaviour2 of 3 found

Checked 2026-09-02. Every line links the page we found it on. A cross means we found nothing at the addresses we checked, not that the vendor has no such document. A transparency score, not a product rating.

We do not issue badges: a badge is the first step towards a paid placement, and there is none here. The SVG is a document with the date in it, for your own files.

Show the full transparency label

Transparency labelsaas-ranking.com

ConfigCat

configcat.com · Feature flags and experimentation

  1. A
  2. B
  3. C
  4. D
  5. E
  6. F
E 30of 100 Rank 5 of 6

Published commitments3 of 9 found

Measured behaviour2 of 3 found

Checked 2026-09-02. Every line links the page we found it on. A cross means we found nothing at the addresses we checked, not that the vendor has no such document. A transparency score, not a product rating.

We do not issue badges: a badge is the first step towards a paid placement, and there is none here. The SVG is a document with the date in it, for your own files.

Not found, heaviest first

✗

Data processing agreement

weight 3 of 3

No data processing agreement found.

Checked 8 addresses on 2026-09-02.

Show the 8 addresses we checked
  1. https://configcat.com/legal/dpa – reached, no match (HTTP 404)
  2. https://configcat.com/dpa – reached, no match (HTTP 404)
  3. https://configcat.com/legal/data-processing-agreement – reached, no match (HTTP 404)
  4. https://configcat.com/data-processing-agreement – reached, no match (HTTP 404)
  5. https://configcat.com/legal/data-processing-addendum – reached, no match (HTTP 404)
  6. https://configcat.com/legal/gdpr – reached, no match (HTTP 404)
  7. https://configcat.com/trust/dpa – reached, no match (HTTP 404)
  8. https://configcat.com/privacy/dpa – reached, no match (HTTP 404)

Is this wrong? Send us the URL

✗

Subprocessor list

weight 3 of 3

No subprocessor list found.

Checked 7 addresses on 2026-09-02.

Show the 7 addresses we checked
  1. https://configcat.com/legal/subprocessors – reached, no match (HTTP 404)
  2. https://configcat.com/subprocessors – reached, no match (HTTP 404)
  3. https://configcat.com/sub-processors – reached, no match (HTTP 404)
  4. https://configcat.com/legal/sub-processors – reached, no match (HTTP 404)
  5. https://configcat.com/trust/subprocessors – reached, no match (HTTP 404)
  6. https://configcat.com/privacy/subprocessors – reached, no match (HTTP 404)
  7. https://configcat.com/legal/subprocessor-list – reached, no match (HTTP 404)

Is this wrong? Send us the URL

✗

Data location stated

weight 3 of 3

No statement about data location found.

Checked 7 addresses on 2026-09-02.

Show the 7 addresses we checked
  1. https://configcat.com/security – reached, no match (HTTP 404)
  2. https://configcat.com/trust – reached, no match (HTTP 404)
  3. https://configcat.com/legal/privacy – reached, no match (HTTP 404)
  4. https://configcat.com/privacy – reached, no match (HTTP 404)
  5. https://configcat.com/privacy-policy – reached, no match (HTTP 404)
  6. https://configcat.com/compliance – reached, no match (HTTP 404)
  7. https://configcat.com/legal/privacy-policy – reached, no match (HTTP 404)

Is this wrong? Send us the URL

✗

Status page with history

weight 2 of 3

No public status page found.

Checked 3 addresses on 2026-09-02.

Show the 3 addresses we checked
  1. https://status.configcat.com/ – reached, no match (HTTP 200)
  2. https://configcat.com/status – reached, no match (HTTP 404)
  3. https://configcat.com.statuspage.io/ – Could not be fetched: fetch failed.

Is this wrong? Send us the URL

✗

No third-party tracking before consent

weight 2 of 3

No consent-free first load found.

Checked 1 address on 2026-09-02.

Show the 1 address we checked
  1. https://configcat.com/ – third-party requests before any interaction: ad.doubleclick.net, api2.amplitude.com, googleads.g.doubleclick.net, region1.analytics.google.com, region1.google-analytics.com, sr-client-cfg.amplitude.com, static.cloudflareinsights.com, stats.g.doubleclick.net, web-sdk.smartlook.com, www.google.com, www.google.de, www.googletagmanager.com

Is this wrong? Send us the URL

✗

Notice before subprocessors change

weight 2 of 3

No commitment to give notice before subprocessors change found.

Checked 8 addresses on 2026-09-02.

Show the 8 addresses we checked
  1. https://configcat.com/legal/subprocessors – reached, no match (HTTP 404)
  2. https://configcat.com/subprocessors – reached, no match (HTTP 404)
  3. https://configcat.com/sub-processors – reached, no match (HTTP 404)
  4. https://configcat.com/legal/dpa – reached, no match (HTTP 404)
  5. https://configcat.com/dpa – reached, no match (HTTP 404)
  6. https://configcat.com/legal/data-processing-agreement – reached, no match (HTTP 404)
  7. https://configcat.com/trust/subprocessors – reached, no match (HTTP 404)
  8. https://configcat.com/legal/sub-processors – reached, no match (HTTP 404)

Is this wrong? Send us the URL

✗

Named privacy contact

weight 1 of 3

No named privacy contact found.

Checked 7 addresses on 2026-09-02.

Show the 7 addresses we checked
  1. https://configcat.com/legal/privacy – reached, no match (HTTP 404)
  2. https://configcat.com/privacy – reached, no match (HTTP 404)
  3. https://configcat.com/privacy-policy – reached, no match (HTTP 404)
  4. https://configcat.com/legal/privacy-policy – reached, no match (HTTP 404)
  5. https://configcat.com/legal/privacy-notice – reached, no match (HTTP 404)
  6. https://configcat.com/trust/privacy – reached, no match (HTTP 404)
  7. https://configcat.com/datenschutz – reached, no match (HTTP 404)

Is this wrong? Send us the URL

Published evidence 5
✓

Public pricing

weight 2 of 3

Actual numbers on a public page.

Source: https://configcat.com/pricing/ · checked 2026-09-02

✓

HTTPS enforced with HSTS

weight 2 of 3

HTTP redirects to HTTPS and the HSTS header is set.

Source: https://configcat.com/ · checked 2026-09-02

✓

Certifications named

weight 1 of 3

SOC 2 or ISO 27001 named on a public page.

Source: https://configcat.com/trust-center/ · checked 2026-09-02

✓

Uptime SLA with a figure

weight 1 of 3

An availability commitment with a figure.

Source: https://configcat.com/policies/sla/ · checked 2026-09-02

✓

security.txt (RFC 9116)

weight 1 of 3

Served at /.well-known/security.txt.

Source: https://configcat.com/.well-known/security.txt · checked 2026-09-02

Keep going