{
  "generated_from": "https://saas-ranking.com/mortgage-lending/q2",
  "disclaimer": "Every result describes what we found at the addresses we checked on the date given. It is not a statement about what the vendor does or does not have. The score is a public transparency score, not a product or security rating.",
  "snapshot": "r7.74650",
  "snapshot_run": 7,
  "score_version": "v1",
  "vendor": {
    "name": "Q2",
    "domain": "q2.com"
  },
  "category": {
    "slug": "mortgage-lending",
    "name": "Lending and mortgage software"
  },
  "score": 30,
  "band": "E",
  "measured": 12,
  "of": 12,
  "criteria": [
    {
      "key": "dpa",
      "name": "Data processing agreement",
      "weight": 3,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://q2.com/legal/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/legal/data-processing-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/data-processing-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/legal/data-processing-addendum",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/legal/gdpr",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/trust/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/privacy/dpa",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-05T05:05:31.761Z"
    },
    {
      "key": "subprozessoren",
      "name": "Subprocessor list",
      "weight": 3,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://q2.com/legal/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/sub-processors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/legal/sub-processors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/trust/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/privacy/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/legal/subprocessor-list",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-05T05:05:31.767Z"
    },
    {
      "key": "datenregion",
      "name": "Data location stated",
      "weight": 3,
      "result": "found",
      "source_url": "https://www.q2.com/privacy-policy",
      "addresses_checked": [
        {
          "url": "https://q2.com/security",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/trust",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/legal/privacy",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/privacy",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/privacy-policy",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-05T05:05:31.770Z"
    },
    {
      "key": "statusseite",
      "name": "Status page with history",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://status.q2.com/",
          "result": "The name \"status.q2.com\" could not be resolved."
        },
        {
          "url": "https://q2.com/status",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com.statuspage.io/",
          "result": "Could not be fetched: fetch failed."
        }
      ],
      "note": null,
      "measured_on": "2026-09-05T05:05:31.774Z"
    },
    {
      "key": "preise",
      "name": "Public pricing",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://q2.com/pricing",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/pricing/",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/plans",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/en/pricing",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/pricing-plans",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-05T05:05:31.774Z"
    },
    {
      "key": "zertifizierungen",
      "name": "Certifications named",
      "weight": 1,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://q2.com/security",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/trust",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/trust-center",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/compliance",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/legal/security",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://trust.q2.com/",
          "result": "The name \"trust.q2.com\" could not be resolved."
        }
      ],
      "note": null,
      "measured_on": "2026-09-05T05:05:31.775Z"
    },
    {
      "key": "sla",
      "name": "Uptime SLA with a figure",
      "weight": 1,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://q2.com/legal/sla",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/sla",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/legal/service-level-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/trust/sla",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/uptime",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/legal/uptime-sla",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-05T05:05:31.775Z"
    },
    {
      "key": "transport",
      "name": "HTTPS enforced with HSTS",
      "weight": 2,
      "result": "found",
      "source_url": "https://q2.com/",
      "addresses_checked": [
        {
          "url": "http://q2.com/",
          "result": "redirects to https://q2.com/"
        },
        {
          "url": "https://q2.com/",
          "result": "HSTS max-age=31536000"
        }
      ],
      "note": null,
      "measured_on": "2026-09-05T05:05:31.776Z"
    },
    {
      "key": "tracker_vor_einwilligung",
      "name": "No third-party tracking before consent",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://q2.com/",
          "result": "third-party requests before any interaction: app.hubspot.com, browser.sentry-cdn.com, cdn.cookielaw.org, distillery.wistia.com, embed-cloudfront.wistia.com, fast.wistia.com, fast.wistia.net, fonts.googleapis.com, fonts.gstatic.com, geolocation.onetrust.com, js.hs-analytics.net, js.hs-banner.com, js.hubspot.com, pipedream.wistia.com, www.googletagmanager.com"
        }
      ],
      "note": null,
      "measured_on": "2026-09-05T05:05:31.777Z"
    },
    {
      "key": "security_txt",
      "name": "security.txt (RFC 9116)",
      "weight": 1,
      "result": "found",
      "source_url": "https://security.q2.com/.well-known/security.txt",
      "addresses_checked": [
        {
          "url": "https://q2.com/.well-known/security.txt",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-05T05:05:31.779Z"
    },
    {
      "key": "subprozessor_meldung",
      "name": "Notice before subprocessors change",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://q2.com/legal/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/sub-processors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/legal/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/legal/data-processing-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/trust/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/legal/sub-processors",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-05T05:05:31.780Z"
    },
    {
      "key": "datenschutzkontakt",
      "name": "Named privacy contact",
      "weight": 1,
      "result": "found",
      "source_url": "https://www.q2.com/privacy-policy",
      "addresses_checked": [
        {
          "url": "https://q2.com/legal/privacy",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/privacy",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://q2.com/privacy-policy",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-05T05:05:31.780Z"
    }
  ],
  "details": [
    {
      "key": "datenregion",
      "name": "Hosting location named",
      "value": "european-union",
      "subject": null,
      "quote": "r of Information Q2 engages third party service providers which host our customer data and maintain servers and systems in the United States. Our European Union affiliates and customers may transfer p...",
      "source_url": "https://www.q2.com/privacy-policy",
      "measured_on": "2026-09-05T05:05:31.771Z"
    },
    {
      "key": "datenregion",
      "name": "Hosting location named",
      "value": "united-states",
      "subject": null,
      "quote": "r of Information Q2 engages third party service providers which host our customer data and maintain servers and systems in the United States.",
      "source_url": "https://www.q2.com/privacy-policy",
      "measured_on": "2026-09-05T05:05:31.771Z"
    },
    {
      "key": "datenschutzkontakt_art",
      "name": "Privacy contact",
      "value": "dedicated-address",
      "subject": null,
      "quote": "[address]@q2.com",
      "source_url": "https://www.q2.com/privacy-policy",
      "measured_on": "2026-09-05T05:05:31.781Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "cookielaw.org",
      "subject": null,
      "quote": "cdn.cookielaw.org",
      "source_url": "https://q2.com/",
      "measured_on": "2026-09-05T05:05:31.778Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "googleapis.com",
      "subject": null,
      "quote": "fonts.googleapis.com",
      "source_url": "https://q2.com/",
      "measured_on": "2026-09-05T05:05:31.778Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "googletagmanager.com",
      "subject": null,
      "quote": "www.googletagmanager.com",
      "source_url": "https://q2.com/",
      "measured_on": "2026-09-05T05:05:31.778Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "gstatic.com",
      "subject": null,
      "quote": "fonts.gstatic.com",
      "source_url": "https://q2.com/",
      "measured_on": "2026-09-05T05:05:31.778Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "hs-analytics.net",
      "subject": null,
      "quote": "js.hs-analytics.net",
      "source_url": "https://q2.com/",
      "measured_on": "2026-09-05T05:05:31.778Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "hs-banner.com",
      "subject": null,
      "quote": "js.hs-banner.com",
      "source_url": "https://q2.com/",
      "measured_on": "2026-09-05T05:05:31.778Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "hubspot.com",
      "subject": null,
      "quote": "app.hubspot.com, js.hubspot.com",
      "source_url": "https://q2.com/",
      "measured_on": "2026-09-05T05:05:31.778Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "onetrust.com",
      "subject": null,
      "quote": "geolocation.onetrust.com",
      "source_url": "https://q2.com/",
      "measured_on": "2026-09-05T05:05:31.778Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "sentry-cdn.com",
      "subject": null,
      "quote": "browser.sentry-cdn.com",
      "source_url": "https://q2.com/",
      "measured_on": "2026-09-05T05:05:31.778Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "wistia.com",
      "subject": null,
      "quote": "distillery.wistia.com, embed-cloudfront.wistia.com, fast.wistia.com, pipedream.wistia.com",
      "source_url": "https://q2.com/",
      "measured_on": "2026-09-05T05:05:31.778Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "wistia.net",
      "subject": null,
      "quote": "fast.wistia.net",
      "source_url": "https://q2.com/",
      "measured_on": "2026-09-05T05:05:31.778Z"
    },
    {
      "key": "hsts_frist",
      "name": "HSTS max-age",
      "value": "31536000",
      "subject": null,
      "quote": "max-age=31536000; includeSubDomains; preload",
      "source_url": "https://q2.com/",
      "measured_on": "2026-09-05T05:05:31.777Z"
    },
    {
      "key": "hsts_option",
      "name": "HSTS option",
      "value": "include-subdomains",
      "subject": null,
      "quote": "max-age=31536000; includeSubDomains; preload",
      "source_url": "https://q2.com/",
      "measured_on": "2026-09-05T05:05:31.777Z"
    },
    {
      "key": "hsts_option",
      "name": "HSTS option",
      "value": "preload",
      "subject": null,
      "quote": "max-age=31536000; includeSubDomains; preload",
      "source_url": "https://q2.com/",
      "measured_on": "2026-09-05T05:05:31.777Z"
    },
    {
      "key": "security_txt_ablauf",
      "name": "security.txt expiry",
      "value": "2027-09-16",
      "subject": null,
      "quote": "Expires: 2027-09-16T02:36:41z",
      "source_url": "https://security.q2.com/.well-known/security.txt",
      "measured_on": "2026-09-05T05:05:31.779Z"
    }
  ]
}