App hosting platform privacy ratings
Platforms that deploy and run web apps, from hosted services to self-hosted alternatives.
16 app hosting platforms are rated against 9 public criteria, and 16 have enough evidence for a letter grade. Of the 13 with a known jurisdiction, 11 are based in a Five Eyes country, and 12 in the wider Fourteen Eyes.
Open-source app hosting platforms only · Criteria for this category · Suggest an addition · Markdown
| Name | Grade | Score | Data | Jurisdiction | Open source | No trackers or telemetry | No ads or data sales | Independent audit | Transparency report | Tells users about requests | TLS configuration | Security headers | Modern web standards |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Open-source, self-hosted platform that deploys apps to your own server with git push, using Heroku-compatible buildpacks or Dockerfiles. |
Grade B | 80 | 100% | – | Yes | Yes | Yes | No | Not applicable | Not applicable | Not applicable | Not applicable | Not applicable |
Open-source command-line tool from 37signals that deploys containerized web apps to your own servers over SSH, with zero-downtime deploys through kamal-proxy. |
Grade B | 80 | 100% | – | Yes | Yes | Yes | No | Not applicable | Not applicable | Not applicable | Not applicable | Not applicable |
Open-source, self-hosted platform for deploying apps, databases and one-click services to your own servers over SSH. A paid hosted Coolify Cloud dashboard is also available. |
Grade C | 65 | 100% | Hungary Outside Eyes | Yes | Partial | Yes | No | Not applicable | Not applicable | Not applicable | Not applicable | Not applicable |
Open-source, self-hosted platform for deploying apps and databases on Docker Swarm, with nginx load balancing, Let's Encrypt certificates, a web dashboard and one-click apps. |
Grade D | 50 | 100% | – | Yes | No | Yes | No | Not applicable | Not applicable | Not applicable | Not applicable | Not applicable |
Self-hosted platform for deploying apps and databases with Docker, Docker Swarm and Traefik, managed from a web dashboard. A hosted Dokploy Cloud is also available. |
Grade D | 50 | 100% | United States Five Eyes | Yes | No | Yes | No | Not applicable | Not applicable | Not applicable | Not applicable | Not applicable |
Static website hosting from GitHub repositories, with custom domains, HTTPS, and builds through GitHub Actions or Jekyll. |
Grade D | 50 | 100% | United States Five Eyes | No | No | Partial | Partial | Yes | Yes | Yes | Yes | Not tested yet |
Platform as a service owned by Salesforce that runs apps in managed containers called dynos, with Git-based deploys, add-ons, and managed Postgres and Key-Value Store. |
Grade D | 50 | 100% | United States Five Eyes | No | No | Partial | Partial | Yes | Yes | Yes | Yes | Not tested yet |
Serverless platform that runs JavaScript, TypeScript, Python and WebAssembly on Cloudflare's global network, and hosts static sites and full-stack apps, including those formerly on Cloudflare Pages. |
Grade D | 47 | 100% | United States Five Eyes | No | No | Partial | Partial | Yes | Yes | Yes | Partial | Not tested yet |
Platform that runs apps as lightweight virtual machines on its own hardware in regions around the world, deployed with the flyctl command-line tool. |
Grade F | 38 | 100% | United States Five Eyes | No | No | Partial | Partial | Partial | Yes | Yes | No | Not tested yet |
Cloud platform for deploying apps, databases and services from Git repositories or Docker images, with usage-based billing. |
Grade F | 36 | 100% | United States Five Eyes | No | No | Yes | Partial | Partial | Yes | Not tested yet | No | Not tested yet |
Platform for building and deploying websites and web apps from Git, with a global CDN, serverless and edge functions, forms and deploy previews. |
Grade F | 34 | 100% | United States Five Eyes | No | No | No | Partial | Partial | Yes | Yes | Partial | Not tested yet |
Cloud platform for hosting web services, static sites, background workers, cron jobs and managed Postgres and Key Value databases, deployed from Git or container images. |
Grade F | 29 | 100% | United States Five Eyes | No | No | Partial | Partial | Partial | Yes | Not tested yet | No | Not tested yet |
Serverless platform for deploying apps, APIs, databases and GPU workloads from Git or Docker images in regions around the world. |
Grade F | 28 | 100% | France Nine Eyes | No | No | Yes | No | No | No | Yes | Partial | Not tested yet |
Platform for deploying services, jobs, databases and GPU workloads on Northflank's cloud or in a customer's own cloud account, built on Kubernetes. |
Grade F | 28 | 100% | United Kingdom Five Eyes | No | No | Partial | Partial | No | No | Yes | Partial | Not tested yet |
Cloud platform for deploying frontend and full-stack web apps from Git, with serverless and edge functions and a global CDN. Made by the company behind Next.js. |
Grade F | 28 | 100% | United States Five Eyes | No | No | Partial | Partial | No | No | Yes | Partial | Not tested yet |
Serverless hosting from Deno Land for JavaScript and TypeScript apps, running on the Deno runtime with deploys from Git or the command line. |
Grade F | 22 | 100% | United States Five Eyes | No | No | Partial | No | No | No | Yes | Partial | Not tested yet |
Questions
What is the most private option among app hosting platforms?
No pick has been made yet. The table above is sorted by score, based on public evidence.
How are app hosting platforms rated?
Each entry answers 9 questions: open source, no trackers or telemetry, no ads or data sales, independent audit, transparency report, tells users about requests, TLS configuration, security headers and modern web standards. Answers need links to evidence. See the full criteria.
Does jurisdiction matter?
Jurisdiction decides which laws can compel a provider to hand over data. Each entry shows its country and whether it is in the Five, Nine or Fourteen Eyes. The data a provider can hand over depends mostly on what it stores and who holds the keys. Read about jurisdictions and the CLOUD Act.