Instructure
What Instructure publishes, measured on their own site. Every result below links the page we found it on, or lists the addresses we checked.
- 45out of 100
- 10/12Criteria measured
- 2026-08-31Checked
Vendor site: instructure.com · category: Learning management
Data processing agreement
No data processing agreement found.
Checked 8 addresses on 2026-08-31.
Show the 8 addresses we checked
https://instructure.com/legal/dpa– reached, no match (HTTP 404)https://instructure.com/dpa– reached, no match (HTTP 404)https://instructure.com/legal/data-processing-agreement– reached, no match (HTTP 404)https://instructure.com/data-processing-agreement– reached, no match (HTTP 404)https://instructure.com/legal/data-processing-addendum– reached, no match (HTTP 404)https://instructure.com/legal/gdpr– reached, no match (HTTP 404)https://instructure.com/trust/dpa– reached, no match (HTTP 404)https://instructure.com/privacy/dpa– reached, no match (HTTP 404)
Subprocessor list
No subprocessor list found.
Checked 7 addresses on 2026-08-31.
Show the 7 addresses we checked
https://instructure.com/legal/subprocessors– reached, no match (HTTP 404)https://instructure.com/subprocessors– reached, no match (HTTP 404)https://instructure.com/sub-processors– reached, no match (HTTP 404)https://instructure.com/legal/sub-processors– reached, no match (HTTP 404)https://instructure.com/trust/subprocessors– reached, no match (HTTP 404)https://instructure.com/privacy/subprocessors– reached, no match (HTTP 404)https://instructure.com/legal/subprocessor-list– reached, no match (HTTP 404)
Data location stated
The hosting location is stated on a public page.
Source: https://www.instructure.com/policies/product-privacy-policy · checked 2026-08-31
Status page with history
A public status page with incident history.
Source: https://status.instructure.com/ · checked 2026-08-31
Public pricing
No public pricing with figures found.
Checked 5 addresses on 2026-08-31.
Show the 5 addresses we checked
https://instructure.com/pricing– reached, no match (HTTP 404)https://instructure.com/pricing/– reached, no match (HTTP 404)https://instructure.com/plans– reached, no match (HTTP 404)https://instructure.com/en/pricing– reached, no match (HTTP 404)https://instructure.com/pricing-plans– reached, no match (HTTP 404)
Certifications named
SOC 2 or ISO 27001 named on a public page.
Source: https://trust.instructure.com/ · checked 2026-08-31
Uptime SLA with a figure
No uptime figure found.
Checked 6 addresses on 2026-08-31.
Show the 6 addresses we checked
https://instructure.com/legal/sla– reached, no match (HTTP 404)https://instructure.com/sla– reached, no match (HTTP 404)https://instructure.com/legal/service-level-agreement– reached, no match (HTTP 404)https://instructure.com/trust/sla– reached, no match (HTTP 404)https://instructure.com/uptime– reached, no match (HTTP 404)https://instructure.com/legal/uptime-sla– reached, no match (HTTP 404)
HTTPS enforced with HSTS
HTTP redirects to HTTPS and the HSTS header is set.
Source: https://instructure.com/ · checked 2026-08-31
No third-party tracking before consent
No consent-free first load found.
Checked 1 address on 2026-08-31.
Show the 1 address we checked
https://instructure.com/– third-party requests before any interaction: 100.20.58.101, 515-xyl-514.mktoresp.com, a.usbrowserspeed.com, ad.doubleclick.net, alb.reddit.com, analytics.twitter.com, api-gateway.scriptintel.io, api.company-target.com, app.qualified.com, bat.bing.com, bat.bing.net, browser.sentry-cdn.com, cdn.cookielaw.org, cdn.jsdelivr.net, connect.facebook.net, distillery.wistia.com, dsum-sec.casalemedia.com, dx.mountain.com, embed-ssl.wistia.com, fast.wistia.com, fast.wistia.net, fonts.googleapis.com, geolocation.onetrust.com, googleads.g.doubleclick.net, id.rlcdn.com, image2.pubmatic.com, instant.page, js.qualified.com, js.zi-scripts.com, munchkin.marketo.net, partners.tremorhub.com, pipedream.wistia.com, pixel.rubiconproject.com, px.ads.linkedin.com, region1.analytics.google.com, s.company-target.com, sdk.getlimy.ai, snap.licdn.com, static.addtoany.com, static.ads-twitter.com, stats.g.doubleclick.net, t.co, tag-logger.demandbase.com, tag.demandbase.com, unpkg.com, www.facebook.com, www.google.com, www.google.de, www.googletagmanager.com, www.redditstatic.com
security.txt (RFC 9116)
Served at /.well-known/security.txt.
Source: https://www.instructure.com/.well-known/security.txt · checked 2026-08-31
Notice before subprocessors change
Not measured. This criterion was added after the latest run, so it has not been measured yet. The next run covers it.
Named privacy contact
Not measured. This criterion was added after the latest run, so it has not been measured yet. The next run covers it.