SaaS transparency ranking · Website builders

Website builders with a published DPA

Which vendors publish a data processing agreement you can read before you talk to sales?

8 of 31 Website builders vendors we measure, that is 26 %. Public transparency score, not a product or security rating.

Readable without a login, at one of the addresses we check. This is a list of what these vendors publish, found by us at the addresses we checked on the date in each row. Vendors that are not on it may publish the same thing somewhere we did not look, or behind a login – the list says nothing about them.

found, source linked
not found at the addresses we checked
not measured by us
12 criteria in the order of the methodology, heaviest first within each group.

1
Glideglideapps.com

Transparency 78/100 BBand B
1. Data processing agreement: found
2. Subprocessor list: found
3. Data location stated: found
4. Status page with history: found
5. Public pricing: found
6. Certifications named: found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): not found
11. Notice before subprocessors change: found
12. Named privacy contact: not found
8 found4 gapsGaps No third-party tracking before consent, Uptime SLA with a figure, +2Compare
2
Ghostghost.org

Transparency 65/100 CBand C
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: found
5. Public pricing: found
6. Certifications named: not found
7. Uptime SLA with a figure: found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): not found
11. Notice before subprocessors change: not measured
12. Named privacy contact: not measured
6 found4 gaps2 not measuredGaps Subprocessor list, No third-party tracking before consent, +2Compare
3
Hostingerhostinger.com

Transparency 65/100 CBand C
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: found
5. Public pricing: found
6. Certifications named: found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: not found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): found
11. Notice before subprocessors change: found
12. Named privacy contact: found
8 found4 gapsGaps Subprocessor list, HTTPS enforced with HSTS, +2Compare
4
Framerframer.com

Transparency 60/100 CBand C
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: not found
5. Public pricing: found
6. Certifications named: found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): found
11. Notice before subprocessors change: not measured
12. Named privacy contact: not measured
6 found4 gaps2 not measuredGaps Subprocessor list, Status page with history, +2Compare
5
Squarespacesquarespace.com

Transparency 57/100 CBand C
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: not found
4. Status page with history: found
5. Public pricing: found
6. Certifications named: not found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): found
11. Notice before subprocessors change: found
12. Named privacy contact: found
7 found5 gapsGaps Subprocessor list, Data location stated, +3Compare
6
Umsoumso.com

Transparency 48/100 DBand D
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: not found
5. Public pricing: not found
6. Certifications named: not found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): not found
11. Notice before subprocessors change: found
12. Named privacy contact: found
5 found7 gapsGaps Subprocessor list, Status page with history, +5Compare
7
Tildatilda.cc

Transparency 42/100 DBand D
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: found
4. Status page with history: not found
5. Public pricing: found
6. Certifications named: not found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: not found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): not measured
11. Notice before subprocessors change: not measured
12. Named privacy contact: not measured
3 found6 gaps3 not measuredGaps Subprocessor list, Status page with history, +4Compare
11
Supersuper.so

Transparency 35/100 EBand E
1. Data processing agreement: found
2. Subprocessor list: not found
3. Data location stated: not found
4. Status page with history: not found
5. Public pricing: found
6. Certifications named: not found
7. Uptime SLA with a figure: not found
8. HTTPS enforced with HSTS: found
9. No third-party tracking before consent: not found
10. security.txt (RFC 9116): not found
11. Notice before subprocessors change: not measured
12. Named privacy contact: not measured
3 found7 gaps2 not measuredGaps Subprocessor list, Data location stated, +5Compare

Website builders with a published DPA

Keep going