SaaS Ranking
Menu

Flagsmith

flagsmith.com · Feature flags and experimentation · checked 2026-09-03

35/100EBand E

Rank 9 of 16 in Feature flags and experimentation, where the median is 37.

We measured 12 of 12 criteria for Flagsmith on 2026-09-03. We found 5 with a source and did not find 7 at the addresses we checked. That is a transparency score of 35 out of 100, band E.

Overview

Transparency labelsaas-ranking.com

Flagsmith

flagsmith.com · Feature flags and experimentation

  1. A
  2. B
  3. C
  4. D
  5. E
  6. F
E 35of 100 Rank 9 of 16

Published commitments4 of 9 found

Measured behaviour1 of 3 found

Checked 2026-09-03. Every line links the page we found it on. A cross means we found nothing at the addresses we checked, not that the vendor has no such document. A transparency score, not a product rating.

We do not issue badges: a badge is the first step towards a paid placement, and there is none here. The SVG is a document with the date in it, for your own files.

The label is the whole measurement in one object: every criterion with its weight, the band, and the date. Public transparency score, not a product or security rating.

Every line in it links the page we found the result on, or lists the addresses we checked. A cross means we found nothing there, not that Flagsmith has no such document.

Gaps, heaviest first

✗

Data processing agreement

weight 3 of 3

No data processing agreement found.

Checked 8 addresses on 2026-09-03.

Show the 8 addresses we checked
  1. https://flagsmith.com/legal/dpa – reached, no match (HTTP 404)
  2. https://flagsmith.com/dpa – reached, no match (HTTP 404)
  3. https://flagsmith.com/legal/data-processing-agreement – reached, no match (HTTP 404)
  4. https://flagsmith.com/data-processing-agreement – reached, no match (HTTP 404)
  5. https://flagsmith.com/legal/data-processing-addendum – reached, no match (HTTP 404)
  6. https://flagsmith.com/legal/gdpr – reached, no match (HTTP 404)
  7. https://flagsmith.com/trust/dpa – reached, no match (HTTP 404)
  8. https://flagsmith.com/privacy/dpa – reached, no match (HTTP 404)

Is this wrong? Send us the URL

✗

Subprocessor list

weight 3 of 3

No subprocessor list found.

Checked 7 addresses on 2026-09-03.

Show the 7 addresses we checked
  1. https://flagsmith.com/legal/subprocessors – reached, no match (HTTP 404)
  2. https://flagsmith.com/subprocessors – reached, no match (HTTP 404)
  3. https://flagsmith.com/sub-processors – reached, no match (HTTP 404)
  4. https://flagsmith.com/legal/sub-processors – reached, no match (HTTP 404)
  5. https://flagsmith.com/trust/subprocessors – reached, no match (HTTP 404)
  6. https://flagsmith.com/privacy/subprocessors – reached, no match (HTTP 404)
  7. https://flagsmith.com/legal/subprocessor-list – reached, no match (HTTP 404)

Is this wrong? Send us the URL

✗

Data location stated

weight 3 of 3

We found this behind a sign-in, so it is not published openly.

Seen at https://www.flagsmith.com/privacy-policy · checked 2026-09-03

Show the 7 addresses we checked
  1. https://flagsmith.com/security – reached, no match (HTTP 404)
  2. https://flagsmith.com/trust – reached, no match (HTTP 404)
  3. https://flagsmith.com/legal/privacy – reached, no match (HTTP 404)
  4. https://flagsmith.com/privacy – reached, no match (HTTP 404)
  5. https://flagsmith.com/privacy-policy – found, but behind a sign-in
  6. https://flagsmith.com/compliance – reached, no match (HTTP 404)
  7. https://flagsmith.com/legal/privacy-policy – found, but behind a sign-in

Is this wrong? Send us the URL

✗

No third-party tracking before consent

weight 2 of 3

No consent-free first load found.

Checked 1 address on 2026-09-03.

Show the 1 address we checked
  1. https://flagsmith.com/ – third-party requests before any interaction: 143451822.hs-sites-eu1.com, ad.doubleclick.net, alb.reddit.com, analytics-ipv6.tiktokw.us, analytics.tiktok.com, api-eu1.hubapi.com, api-eu1.hubspot.com, app.firsttouch.ai, bat.bing.com, bat.bing.net, cdn.amplitude.com, cdn.firstpromoter.com, cdn.jsdelivr.net, cdn.prod.website-files.com, cdn.vimkit.app, cta-eu1.hubspot.com, d3e54v103j8qbb.cloudfront.net, fonts.googleapis.com, fonts.gstatic.com, forms-eu1.hsforms.com, hubspotonwebflow.com, js-eu1.hs-analytics.net, js-eu1.hs-banner.com, js-eu1.hs-scripts.com, js-eu1.hsadspixel.net, js-eu1.hsforms.net, js-eu1.hubspot.com, js-eu1.usemessages.com, perf-eu1.hsforms.com, px.ads.linkedin.com, region1.analytics.google.com, s3-us-west-2.amazonaws.com, scripts.clarity.ms, serve.albacross.com, snap.licdn.com, sr-client-cfg.eu.amplitude.com, static.reo.dev, stats.g.doubleclick.net, tag.clearbitscripts.com, u.clarity.ms, vimkit.io, www.clarity.ms, www.google.com, www.google.de, www.googletagmanager.com, www.gstatic.com, www.redditstatic.com

Is this wrong? Send us the URL

✗

Notice before subprocessors change

weight 2 of 3

No commitment to give notice before subprocessors change found.

Checked 8 addresses on 2026-09-03.

Show the 8 addresses we checked
  1. https://flagsmith.com/legal/subprocessors – reached, no match (HTTP 404)
  2. https://flagsmith.com/subprocessors – reached, no match (HTTP 404)
  3. https://flagsmith.com/sub-processors – reached, no match (HTTP 404)
  4. https://flagsmith.com/legal/dpa – reached, no match (HTTP 404)
  5. https://flagsmith.com/dpa – reached, no match (HTTP 404)
  6. https://flagsmith.com/legal/data-processing-agreement – reached, no match (HTTP 404)
  7. https://flagsmith.com/trust/subprocessors – reached, no match (HTTP 404)
  8. https://flagsmith.com/legal/sub-processors – reached, no match (HTTP 404)

Is this wrong? Send us the URL

✗

Certifications named

weight 1 of 3

No named certification found.

Checked 6 addresses on 2026-09-03.

Show the 6 addresses we checked
  1. https://flagsmith.com/security – reached, no match (HTTP 404)
  2. https://flagsmith.com/trust – reached, no match (HTTP 404)
  3. https://flagsmith.com/trust-center – reached, no match (HTTP 404)
  4. https://flagsmith.com/compliance – reached, no match (HTTP 404)
  5. https://flagsmith.com/legal/security – reached, no match (HTTP 404)
  6. https://trust.flagsmith.com/ – reached, no match (HTTP 200)

Is this wrong? Send us the URL

✗

security.txt (RFC 9116)

weight 1 of 3

No security.txt found.

Checked 1 address on 2026-09-03.

Show the 1 address we checked
  1. https://flagsmith.com/.well-known/security.txt – reached, no match (HTTP 404)

Is this wrong? Send us the URL

Evidence

The full source lists sit behind these two groups, so that the answer above stays readable.

Published, with a source 5
✓

Status page with history

weight 2 of 3

A public status page with incident history.

Source: https://status.flagsmith.com/ · checked 2026-09-03

✓

Public pricing

weight 2 of 3

Actual numbers on a public page.

Source: https://www.flagsmith.com/pricing · checked 2026-09-03

✓

HTTPS enforced with HSTS

weight 2 of 3

HTTP redirects to HTTPS and the HSTS header is set.

Source: https://flagsmith.com/ · checked 2026-09-03

✓

Uptime SLA with a figure

weight 1 of 3

An availability commitment with a figure.

Source: https://www.flagsmith.com/service-level-agreement · checked 2026-09-03

✓

Named privacy contact

weight 1 of 3

A data protection officer or a dedicated privacy address is named.

Source: https://www.flagsmith.com/privacy-policy · checked 2026-09-03

History

Not enough completed runs yet to draw a line. The next runs fill this in.

Compare