Gorgias
What Gorgias publishes, measured on their own site. Every result below links the page we found it on, or lists the addresses we checked.
- 71out of 100
- 9/10Criteria measured
- 2026-08-31Checked
Vendor site: gorgias.com · category: Helpdesk
Data processing agreement
Published and readable without a login.
Source: https://www.gorgias.com/legal/data-processing-agreement · checked 2026-08-31
Subprocessor list
Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.
Show the 7 addresses we checked
https://gorgias.com/legal/subprocessors– reached, no match (HTTP 404)https://gorgias.com/subprocessors– reached, no match (HTTP 404)https://gorgias.com/sub-processors– reached, no match (HTTP 404)https://gorgias.com/legal/sub-processors– reached, no match (HTTP 404)https://gorgias.com/trust/subprocessors– reached, no match (HTTP 404)https://gorgias.com/privacy/subprocessors– excluded by robots.txthttps://gorgias.com/legal/subprocessor-list– reached, no match (HTTP 404)
Data location stated
The hosting location is stated on a public page.
Source: https://www.gorgias.com/legal/privacy · checked 2026-08-31
Status page with history
A public status page with incident history.
Source: https://status.gorgias.com/ · checked 2026-08-31
Public pricing
Actual numbers on a public page.
Source: https://www.gorgias.com/pricing · checked 2026-08-31
Certifications named
SOC 2 or ISO 27001 named on a public page.
Source: https://www.gorgias.com/security · checked 2026-08-31
Uptime SLA with a figure
No uptime figure found.
Checked 6 addresses on 2026-08-31.
Show the 6 addresses we checked
https://gorgias.com/legal/sla– reached, no match (HTTP 404)https://gorgias.com/sla– reached, no match (HTTP 404)https://gorgias.com/legal/service-level-agreement– reached, no match (HTTP 404)https://gorgias.com/trust/sla– reached, no match (HTTP 404)https://gorgias.com/uptime– reached, no match (HTTP 404)https://gorgias.com/legal/uptime-sla– reached, no match (HTTP 404)
HTTPS enforced with HSTS
No enforced HTTPS with HSTS found.
Checked 2 addresses on 2026-08-31.
Show the 2 addresses we checked
http://gorgias.com/– redirects to https://gorgias.com/https://gorgias.com/– no HSTS header
No third-party tracking before consent
No consent-free first load found.
Checked 1 address on 2026-08-31.
Show the 1 address we checked
https://gorgias.com/– third-party requests before any interaction: 117498912.intellimizeio.com, accounts.finsweet.com, api.company-target.com, api.intellimize.co, app.optibase.io, b.clarity.ms, browser.sentry-cdn.com, bundle.5gtb.com, cdn.embedly.com, cdn.intellimize.co, cdn.jsdelivr.net, cdn.prod.website-files.com, cdn.segment.com, challenges.cloudflare.com, cloudflare.com, config.gorgias.chat, connect.facebook.net, d3e54v103j8qbb.cloudfront.net, distillery.wistia.com, dsum-sec.casalemedia.com, embed-ssl.wistia.com, fast.wistia.com, fast.wistia.net, hubspotv2.use1-marketplace-1p-apps-prod-red.if.webflow.services, id.rlcdn.com, image2.pubmatic.com, js.hsforms.net, log.intellimize.co, partners.tremorhub.com, pipedream.wistia.com, pixel.rubiconproject.com, s.company-target.com, scripts.clarity.ms, tag-logger.demandbase.com, tag.demandbase.com, www.clarity.ms, www.google-analytics.com, www.googleadservices.com, www.googletagmanager.com
security.txt (RFC 9116)
Served at /.well-known/security.txt.
Source: https://gorgias.com/.well-known/security.txt · checked 2026-08-31