{
  "slug": "clickup",
  "category": "task-management",
  "name": "ClickUp",
  "description": "Work management platform with tasks, docs, whiteboards, chat, goals and AI features. Data is hosted by ClickUp on AWS.",
  "website": "https://clickup.com",
  "license": null,
  "platforms": [
    "web",
    "windows",
    "macos",
    "linux",
    "android",
    "ios"
  ],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "F",
  "score": 20,
  "coverage": 100,
  "summary": "ClickUp scores 20 out of 100 (grade F) on the task management criteria. It partly meets no ads or data sales and independent audit. It does not meet open source and no trackers or telemetry. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.",
  "url": "https://privacyratings.com/task-management/clickup/",
  "markdown": "https://privacyratings.com/task-management/clickup/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://reports.exodus-privacy.eu.org/en/reports/co.mangotechnologies.clickup/latest/",
      "note": "Exodus finds Amplitude, Sentry, Singular and Split in the Android app, and the privacy policy describes advertising and analytics partners that use cookies and pixels."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://clickup.com/privacy",
      "note": "Funded by subscriptions, and the privacy policy states that data is not sold. Advertising partners use cookies and tracking technologies, and data is used to deliver ClickUp advertising."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://clickup.com/security",
      "note": "States SOC 1 Type 2, SOC 2 Type 2, SOC 3 and ISO 27001 certifications, but the reports are only available from sales."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    }
  },
  "tests": {
    "ssllabs": null,
    "observatory": null,
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Google Analytics",
        "host": "inline code",
        "effect": "no"
      },
      {
        "name": "Google Tag Manager",
        "host": "www.googletagmanager.com",
        "effect": "no"
      },
      {
        "name": "OneTrust",
        "host": "cdn.cookielaw.org",
        "effect": "none"
      }
    ],
    "tested_at": "2026-10-01T07:02:28.443Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}