{
  "slug": "cryptpad",
  "category": "office-suites",
  "name": "CryptPad",
  "description": "End-to-end encrypted collaboration suite with rich text, spreadsheets, presentations, Markdown, Kanban, forms, diagrams and a file drive. Use the hosted CryptPad.fr service or self-host it.",
  "website": "https://cryptpad.org",
  "source": "https://github.com/cryptpad/cryptpad",
  "license": "AGPL-3.0",
  "platforms": [],
  "jurisdiction": {
    "code": "FR",
    "name": "France",
    "eyes": "Nine Eyes",
    "eu": true,
    "gdpr": true,
    "cloud_act": null
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "D",
  "score": 56,
  "coverage": 100,
  "summary": "CryptPad scores 56 out of 100 (grade D) on the office suites criteria. It meets 3 of 8 criteria: open source, no ads or data sales and TLS configuration. It partly meets no trackers or telemetry and security headers. It does not meet independent audit, transparency report and tells users about requests. It is based in France: Nine Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B+.",
  "url": "https://privacyratings.com/office-suites/cryptpad/",
  "markdown": "https://privacyratings.com/office-suites/cryptpad/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://github.com/cryptpad/cryptpad/blob/main/LICENSE",
      "note": "AGPL-3.0."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://github.com/cryptpad/cryptpad/blob/main/lib/stats.js",
      "note": "No third-party trackers. Self-hosted servers send a daily instance report to the CryptPad team by default, which administrators can turn off."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://cryptpad.org/pricing/",
      "note": "Funded by paid plans on CryptPad.fr, support contracts, grants and donations, with no ads."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No independent audit is published."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No transparency report or government request policy is published."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published policy on notifying users about data requests."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=cryptpad.org&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=cryptpad.org",
      "note": "Grade B+ (80/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "B+",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [],
    "tested_at": "2026-10-01T07:01:36.363Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}