{
  "generated_from": "https://saas-ranking.com/performance-management/culture-exploit",
  "disclaimer": "Every result describes what we found at the addresses we checked on the date given. It is not a statement about what the vendor does or does not have. The score is a public transparency score, not a product or security rating.",
  "snapshot": "r128.107528",
  "snapshot_run": 128,
  "score_version": "v1",
  "vendor": {
    "name": "Culture Exploit",
    "domain": "cultureexploit.com"
  },
  "category": {
    "slug": "performance-management",
    "name": "Performance management"
  },
  "score": 17,
  "band": "F",
  "measured": 12,
  "of": 12,
  "criteria": [
    {
      "key": "dpa",
      "name": "Data processing agreement",
      "weight": 3,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://cultureexploit.com/legal/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/legal/data-processing-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/data-processing-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/legal/data-processing-addendum",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/legal/gdpr",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/trust/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/privacy/dpa",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "subprozessoren",
      "name": "Subprocessor list",
      "weight": 3,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://cultureexploit.com/legal/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/sub-processors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/legal/sub-processors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/trust/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/privacy/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/legal/subprocessor-list",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "datenregion",
      "name": "Data location stated",
      "weight": 3,
      "result": "found",
      "source_url": "https://cultureexploit.com/privacy-policicy/",
      "addresses_checked": [
        {
          "url": "https://cultureexploit.com/security",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/trust",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/legal/privacy",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "statusseite",
      "name": "Status page with history",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://status.cultureexploit.com/",
          "result": "The name \"status.cultureexploit.com\" could not be resolved."
        },
        {
          "url": "https://cultureexploit.com/status",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com.statuspage.io/",
          "result": "Could not be fetched: fetch failed."
        }
      ],
      "note": null,
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "preise",
      "name": "Public pricing",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://cultureexploit.com/pricing",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/pricing/",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/plans",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/en/pricing",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/pricing-plans",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "zertifizierungen",
      "name": "Certifications named",
      "weight": 1,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://cultureexploit.com/security",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/trust",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/trust-center",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/compliance",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/legal/security",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://trust.cultureexploit.com/",
          "result": "The name \"trust.cultureexploit.com\" could not be resolved."
        }
      ],
      "note": null,
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "sla",
      "name": "Uptime SLA with a figure",
      "weight": 1,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://cultureexploit.com/legal/sla",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/sla",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/legal/service-level-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/trust/sla",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/uptime",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/legal/uptime-sla",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "transport",
      "name": "HTTPS enforced with HSTS",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "http://cultureexploit.com/",
          "result": "redirects to https://cultureexploit.com/"
        },
        {
          "url": "https://cultureexploit.com/",
          "result": "no HSTS header"
        }
      ],
      "note": null,
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "tracker_vor_einwilligung",
      "name": "No third-party tracking before consent",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://cultureexploit.com/",
          "result": "third-party requests before any interaction: accounts.google.com, apis.google.com, connect.facebook.net, embed.tawk.to, fonts.bunny.net, fonts.googleapis.com, fonts.gstatic.com, forms.hscollectedforms.net, js.hs-analytics.net, js.hs-banner.com, js.hs-scripts.com, js.hsadspixel.net, js.hscollectedforms.net, maps.googleapis.com, maps.gstatic.com, region1.google-analytics.com, static.hotjar.com, www.google-analytics.com, www.google.com, www.googletagmanager.com"
        }
      ],
      "note": null,
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "security_txt",
      "name": "security.txt (RFC 9116)",
      "weight": 1,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://cultureexploit.com/.well-known/security.txt",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "subprozessor_meldung",
      "name": "Notice before subprocessors change",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://cultureexploit.com/legal/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/sub-processors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/legal/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/dpa",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/legal/data-processing-agreement",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/trust/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://cultureexploit.com/legal/sub-processors",
          "result": "reached, no match (HTTP 404)"
        }
      ],
      "note": null,
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "datenschutzkontakt",
      "name": "Named privacy contact",
      "weight": 1,
      "result": "found",
      "source_url": "https://cultureexploit.com/privacy-policicy/",
      "addresses_checked": [
        {
          "url": "https://cultureexploit.com/legal/privacy",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-21T02:08:13.688Z"
    }
  ],
  "details": [
    {
      "key": "datenregion",
      "name": "Hosting location named",
      "value": "european-union",
      "subject": null,
      "quote": "SECURITY The System complies with present EU data protection laws and regulations, and your Data is stored and processed in accordance with the legal regulations applicable within the European Union.",
      "source_url": "https://cultureexploit.com/privacy-policicy/",
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "datenschutzkontakt_art",
      "name": "Privacy contact",
      "value": "data-protection-officer",
      "subject": null,
      "quote": "Data Protection Officer",
      "source_url": "https://cultureexploit.com/privacy-policicy/",
      "measured_on": "2026-09-21T02:08:13.689Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "bunny.net",
      "subject": null,
      "quote": "fonts.bunny.net",
      "source_url": "https://cultureexploit.com/",
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "facebook.net",
      "subject": null,
      "quote": "connect.facebook.net",
      "source_url": "https://cultureexploit.com/",
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "google-analytics.com",
      "subject": null,
      "quote": "region1.google-analytics.com, www.google-analytics.com",
      "source_url": "https://cultureexploit.com/",
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "google.com",
      "subject": null,
      "quote": "accounts.google.com, apis.google.com, www.google.com",
      "source_url": "https://cultureexploit.com/",
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "googleapis.com",
      "subject": null,
      "quote": "fonts.googleapis.com, maps.googleapis.com",
      "source_url": "https://cultureexploit.com/",
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "googletagmanager.com",
      "subject": null,
      "quote": "www.googletagmanager.com",
      "source_url": "https://cultureexploit.com/",
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "gstatic.com",
      "subject": null,
      "quote": "fonts.gstatic.com, maps.gstatic.com",
      "source_url": "https://cultureexploit.com/",
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "hotjar.com",
      "subject": null,
      "quote": "static.hotjar.com",
      "source_url": "https://cultureexploit.com/",
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "hs-analytics.net",
      "subject": null,
      "quote": "js.hs-analytics.net",
      "source_url": "https://cultureexploit.com/",
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "hs-banner.com",
      "subject": null,
      "quote": "js.hs-banner.com",
      "source_url": "https://cultureexploit.com/",
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "hs-scripts.com",
      "subject": null,
      "quote": "js.hs-scripts.com",
      "source_url": "https://cultureexploit.com/",
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "hsadspixel.net",
      "subject": null,
      "quote": "js.hsadspixel.net",
      "source_url": "https://cultureexploit.com/",
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "hscollectedforms.net",
      "subject": null,
      "quote": "forms.hscollectedforms.net, js.hscollectedforms.net",
      "source_url": "https://cultureexploit.com/",
      "measured_on": "2026-09-21T02:08:13.688Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "tawk.to",
      "subject": null,
      "quote": "embed.tawk.to",
      "source_url": "https://cultureexploit.com/",
      "measured_on": "2026-09-21T02:08:13.688Z"
    }
  ]
}