Gusto
What Gusto publishes, measured on their own site. Every result below links the page we found it on, or lists the addresses we checked.
Not ranked: not enough data. We could measure 3 of 10 criteria for Gusto, which is below our threshold. That is a statement about our measurement, not about Gusto.
Vendor site: gusto.com · category: HR and payroll
Data processing agreement
Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Show the 8 addresses we checked
https://gusto.com/legal/dpa– blocked or unavailable (HTTP 403)https://gusto.com/dpa– blocked or unavailable (HTTP 403)https://gusto.com/legal/data-processing-agreement– blocked or unavailable (HTTP 403)https://gusto.com/data-processing-agreement– blocked or unavailable (HTTP 403)https://gusto.com/legal/data-processing-addendum– blocked or unavailable (HTTP 403)https://gusto.com/legal/gdpr– blocked or unavailable (HTTP 403)https://gusto.com/trust/dpa– blocked or unavailable (HTTP 403)https://gusto.com/privacy/dpa– blocked or unavailable (HTTP 403)
Subprocessor list
Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Show the 7 addresses we checked
https://gusto.com/legal/subprocessors– blocked or unavailable (HTTP 403)https://gusto.com/subprocessors– blocked or unavailable (HTTP 403)https://gusto.com/sub-processors– blocked or unavailable (HTTP 403)https://gusto.com/legal/sub-processors– blocked or unavailable (HTTP 403)https://gusto.com/trust/subprocessors– blocked or unavailable (HTTP 403)https://gusto.com/privacy/subprocessors– blocked or unavailable (HTTP 403)https://gusto.com/legal/subprocessor-list– blocked or unavailable (HTTP 403)
Data location stated
Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Show the 7 addresses we checked
https://gusto.com/security– blocked or unavailable (HTTP 403)https://gusto.com/trust– blocked or unavailable (HTTP 403)https://gusto.com/legal/privacy– blocked or unavailable (HTTP 403)https://gusto.com/privacy– blocked or unavailable (HTTP 403)https://gusto.com/privacy-policy– blocked or unavailable (HTTP 403)https://gusto.com/compliance– blocked or unavailable (HTTP 403)https://gusto.com/legal/privacy-policy– blocked or unavailable (HTTP 403)
Status page with history
A public status page with incident history.
Source: https://status.gusto.com/ · checked 2026-08-31
Public pricing
Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Show the 5 addresses we checked
https://gusto.com/pricing– blocked or unavailable (HTTP 403)https://gusto.com/pricing/– blocked or unavailable (HTTP 403)https://gusto.com/plans– blocked or unavailable (HTTP 403)https://gusto.com/en/pricing– blocked or unavailable (HTTP 403)https://gusto.com/pricing-plans– blocked or unavailable (HTTP 403)
Certifications named
Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Show the 6 addresses we checked
https://gusto.com/security– blocked or unavailable (HTTP 403)https://gusto.com/trust– blocked or unavailable (HTTP 403)https://gusto.com/trust-center– blocked or unavailable (HTTP 403)https://gusto.com/compliance– blocked or unavailable (HTTP 403)https://gusto.com/legal/security– blocked or unavailable (HTTP 403)https://trust.gusto.com/– blocked or unavailable (HTTP 403)
Uptime SLA with a figure
Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Show the 6 addresses we checked
https://gusto.com/legal/sla– blocked or unavailable (HTTP 403)https://gusto.com/sla– blocked or unavailable (HTTP 403)https://gusto.com/legal/service-level-agreement– blocked or unavailable (HTTP 403)https://gusto.com/trust/sla– blocked or unavailable (HTTP 403)https://gusto.com/uptime– blocked or unavailable (HTTP 403)https://gusto.com/legal/uptime-sla– blocked or unavailable (HTTP 403)
HTTPS enforced with HSTS
HTTP redirects to HTTPS and the HSTS header is set.
Source: https://gusto.com/ · checked 2026-08-31
No third-party tracking before consent
No consent-free first load found.
Checked 1 address on 2026-08-31.
Show the 1 address we checked
https://gusto.com/– third-party requests before any interaction: brunhild.challenges.cloudflare.com, challenges.cloudflare.com
security.txt (RFC 9116)
Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Show the 1 address we checked
https://gusto.com/.well-known/security.txt– blocked or unavailable (HTTP 403)