{
  "slug": "gandi",
  "category": "domain-registrars",
  "name": "Gandi",
  "description": "French domain registrar and hosting provider with free WHOIS privacy on most extensions, TOTP and security-key login, and a yearly transparency report.",
  "website": "https://www.gandi.net/en",
  "license": null,
  "platforms": [],
  "jurisdiction": {
    "code": "FR",
    "name": "France",
    "eyes": "Nine Eyes",
    "eu": true,
    "gdpr": true,
    "cloud_act": null
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "D",
  "score": 45,
  "coverage": 100,
  "summary": "Gandi scores 45 out of 100 (grade D) on the domain registrars criteria. It meets 3 of 12 criteria: no ads or data sales, transparency report and two-factor login. It partly meets independent audit, TLS configuration, security headers, Free WHOIS privacy and transfer and registry lock. It does not meet open source, no trackers or telemetry, tells users about requests and honest renewal pricing. It is based in France: Nine Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A- and Mozilla HTTP Observatory grade B.",
  "url": "https://privacyratings.com/domain-registrars/gandi/",
  "markdown": "https://privacyratings.com/domain-registrars/gandi/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://www.gandi.net/en/contracts/privacy-policy",
      "note": "The privacy policy lists AT Internet audience-measurement cookies, which can be opted out of."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.gandi.net/en/domain/tld/com",
      "note": "Funded by paid domain and hosting services. No ads."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://www.gandi.net/en",
      "note": "The site states an ISO 27001 and ISO 22301 certification by BSI. No audit report is published."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.gandi.net/en/digital-service-act-transparency-report",
      "note": "Yearly reports with counts of information requests from authorities and content notices."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published policy on notifying users about data requests."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=www.gandi.net&hideResults=on",
      "note": "Grade A-"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=www.gandi.net",
      "note": "Grade B (70/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    },
    "free_whois_privacy": {
      "title": "Free WHOIS privacy",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://docs.gandi.net/en/domain_names/common_operations/whois_privacy.html",
      "note": "Free and on by default, but some extensions do not support the anonymized contact option."
    },
    "at_cost_renewals": {
      "title": "Honest renewal pricing",
      "weight": 1,
      "answer": "no",
      "evidence": "https://www.gandi.net/en/domain/tld/com",
      "note": "A .com registers for about 11 EUR but renews for about 32 EUR per year."
    },
    "two_factor": {
      "title": "Two-factor login",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://docs.gandi.net/en/account_management/security/totp.html",
      "note": "TOTP apps and security keys are supported."
    },
    "registry_lock": {
      "title": "Transfer and registry lock",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://docs.gandi.net/en/domain_names/transfer_out/transfer_lock.html",
      "note": "Transfer lock is available on most extensions. Registry lock is not offered to regular accounts."
    }
  },
  "tests": {
    "ssllabs": "A-",
    "observatory": "B",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Trustpilot",
        "host": "www.trustpilot.com",
        "effect": "none"
      }
    ],
    "tested_at": "2026-10-01T07:03:36.878Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}