SaaS Ranking

Xendit

What Xendit publishes, measured on their own site. Every result below links the page we found it on, or lists the addresses we checked.

Not ranked: not enough data. We could measure 3 of 12 criteria for Xendit, which is below our threshold. That is a statement about our measurement, not about Xendit.

Vendor site: xendit.co · category: Payment processing

–

Data processing agreement

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 8 addresses we checked
  1. https://xendit.co/legal/dpa – blocked or unavailable (HTTP 403)
  2. https://xendit.co/dpa – blocked or unavailable (HTTP 403)
  3. https://xendit.co/legal/data-processing-agreement – blocked or unavailable (HTTP 403)
  4. https://xendit.co/data-processing-agreement – blocked or unavailable (HTTP 403)
  5. https://xendit.co/legal/data-processing-addendum – blocked or unavailable (HTTP 403)
  6. https://xendit.co/legal/gdpr – blocked or unavailable (HTTP 403)
  7. https://xendit.co/trust/dpa – blocked or unavailable (HTTP 403)
  8. https://xendit.co/privacy/dpa – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

–

Subprocessor list

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 7 addresses we checked
  1. https://xendit.co/legal/subprocessors – blocked or unavailable (HTTP 403)
  2. https://xendit.co/subprocessors – blocked or unavailable (HTTP 403)
  3. https://xendit.co/sub-processors – blocked or unavailable (HTTP 403)
  4. https://xendit.co/legal/sub-processors – blocked or unavailable (HTTP 403)
  5. https://xendit.co/trust/subprocessors – blocked or unavailable (HTTP 403)
  6. https://xendit.co/privacy/subprocessors – blocked or unavailable (HTTP 403)
  7. https://xendit.co/legal/subprocessor-list – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

–

Data location stated

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 7 addresses we checked
  1. https://xendit.co/security – blocked or unavailable (HTTP 403)
  2. https://xendit.co/trust – blocked or unavailable (HTTP 403)
  3. https://xendit.co/legal/privacy – blocked or unavailable (HTTP 403)
  4. https://xendit.co/privacy – blocked or unavailable (HTTP 403)
  5. https://xendit.co/privacy-policy – blocked or unavailable (HTTP 403)
  6. https://xendit.co/compliance – blocked or unavailable (HTTP 403)
  7. https://xendit.co/legal/privacy-policy – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

✓

Status page with history

A public status page with incident history.

Source: https://status.xendit.co/ · checked 2026-08-31

–

Public pricing

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 5 addresses we checked
  1. https://xendit.co/pricing – blocked or unavailable (HTTP 403)
  2. https://xendit.co/pricing/ – blocked or unavailable (HTTP 403)
  3. https://xendit.co/plans – blocked or unavailable (HTTP 403)
  4. https://xendit.co/en/pricing – blocked or unavailable (HTTP 403)
  5. https://xendit.co/pricing-plans – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

–

Certifications named

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 6 addresses we checked
  1. https://xendit.co/security – blocked or unavailable (HTTP 403)
  2. https://xendit.co/trust – blocked or unavailable (HTTP 403)
  3. https://xendit.co/trust-center – blocked or unavailable (HTTP 403)
  4. https://xendit.co/compliance – blocked or unavailable (HTTP 403)
  5. https://xendit.co/legal/security – blocked or unavailable (HTTP 403)
  6. https://trust.xendit.co/ – The name "trust.xendit.co" could not be resolved.

Is this wrong? Send us the URL

–

Uptime SLA with a figure

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 6 addresses we checked
  1. https://xendit.co/legal/sla – blocked or unavailable (HTTP 403)
  2. https://xendit.co/sla – blocked or unavailable (HTTP 403)
  3. https://xendit.co/legal/service-level-agreement – blocked or unavailable (HTTP 403)
  4. https://xendit.co/trust/sla – blocked or unavailable (HTTP 403)
  5. https://xendit.co/uptime – blocked or unavailable (HTTP 403)
  6. https://xendit.co/legal/uptime-sla – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

✗

HTTPS enforced with HSTS

No enforced HTTPS with HSTS found.

Checked 2 addresses on 2026-08-31.

Show the 2 addresses we checked
  1. http://xendit.co/ – redirects to https://xendit.co/
  2. https://xendit.co/ – no HSTS header

Is this wrong? Send us the URL

✗

No third-party tracking before consent

No consent-free first load found.

Checked 1 address on 2026-08-31.

Show the 1 address we checked
  1. https://xendit.co/ – third-party requests before any interaction: challenges.cloudflare.com

Is this wrong? Send us the URL

–

security.txt (RFC 9116)

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 1 address we checked
  1. https://xendit.co/.well-known/security.txt – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

–

Notice before subprocessors change

Not measured. This criterion was added after the latest run, so it has not been measured yet. The next run covers it.

–

Named privacy contact

Not measured. This criterion was added after the latest run, so it has not been measured yet. The next run covers it.