# App hosting platforms privacy ratings

Platforms that deploy and run web apps, from hosted services to self-hosted alternatives.

| Name | Grade | Jurisdiction | Description |
| --- | --- | --- | --- |
| [Dokku](https://privacyratings.com/app-hosting/dokku/) | B (80/100) | Unknown | Open-source, self-hosted platform that deploys apps to your own server with git push, using Heroku-compatible buildpacks or Dockerfiles. |
| [Kamal](https://privacyratings.com/app-hosting/kamal/) | B (80/100) | Unknown | Open-source command-line tool from 37signals that deploys containerized web apps to your own servers over SSH, with zero-downtime deploys through kamal-proxy. |
| [Coolify](https://privacyratings.com/app-hosting/coolify/) | C (65/100) | Hungary | Open-source, self-hosted platform for deploying apps, databases and one-click services to your own servers over SSH. A paid hosted Coolify Cloud dashboard is also available. |
| [CapRover](https://privacyratings.com/app-hosting/caprover/) | D (50/100) | Unknown | Open-source, self-hosted platform for deploying apps and databases on Docker Swarm, with nginx load balancing, Let's Encrypt certificates, a web dashboard and one-click apps. |
| [Dokploy](https://privacyratings.com/app-hosting/dokploy/) | D (50/100) | United States (Five Eyes) | Self-hosted platform for deploying apps and databases with Docker, Docker Swarm and Traefik, managed from a web dashboard. A hosted Dokploy Cloud is also available. |
| [GitHub Pages](https://privacyratings.com/app-hosting/github-pages/) | D (50/100) | United States (Five Eyes) | Static website hosting from GitHub repositories, with custom domains, HTTPS, and builds through GitHub Actions or Jekyll. |
| [Heroku](https://privacyratings.com/app-hosting/heroku/) | D (50/100) | United States (Five Eyes) | Platform as a service owned by Salesforce that runs apps in managed containers called dynos, with Git-based deploys, add-ons, and managed Postgres and Key-Value Store. |
| [Cloudflare Workers](https://privacyratings.com/app-hosting/cloudflare-workers/) | D (47/100) | United States (Five Eyes) | Serverless platform that runs JavaScript, TypeScript, Python and WebAssembly on Cloudflare's global network, and hosts static sites and full-stack apps, including those formerly on Cloudflare Pages. |
| [Railway](https://privacyratings.com/app-hosting/railway/) | D (44/100) | United States (Five Eyes) | Cloud platform for deploying apps, databases and services from Git repositories or Docker images, with usage-based billing. |
| [Fly.io](https://privacyratings.com/app-hosting/fly-io/) | F (38/100) | United States (Five Eyes) | Platform that runs apps as lightweight virtual machines on its own hardware in regions around the world, deployed with the flyctl command-line tool. |
| [Netlify](https://privacyratings.com/app-hosting/netlify/) | F (34/100) | United States (Five Eyes) | Platform for building and deploying websites and web apps from Git, with a global CDN, serverless and edge functions, forms and deploy previews. |
| [Render](https://privacyratings.com/app-hosting/render/) | F (29/100) | United States (Five Eyes) | Cloud platform for hosting web services, static sites, background workers, cron jobs and managed Postgres and Key Value databases, deployed from Git or container images. |
| [Koyeb](https://privacyratings.com/app-hosting/koyeb/) | F (28/100) | France (Nine Eyes) | Serverless platform for deploying apps, APIs, databases and GPU workloads from Git or Docker images in regions around the world. |
| [Northflank](https://privacyratings.com/app-hosting/northflank/) | F (28/100) | United Kingdom (Five Eyes) | Platform for deploying services, jobs, databases and GPU workloads on Northflank's cloud or in a customer's own cloud account, built on Kubernetes. |
| [Vercel](https://privacyratings.com/app-hosting/vercel/) | F (28/100) | United States (Five Eyes) | Cloud platform for deploying frontend and full-stack web apps from Git, with serverless and edge functions and a global CDN. Made by the company behind Next.js. |
| [Deno Deploy](https://privacyratings.com/app-hosting/deno-deploy/) | F (22/100) | United States (Five Eyes) | Serverless hosting from Deno Land for JavaScript and TypeScript apps, running on the Deno runtime with deploys from Git or the command line. |

## Criteria

- **Open source** (weight 3): Is all the source code needed to run the product public?
- **No trackers or telemetry** (weight 3): Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
- **No ads or data sales** (weight 2): Is the product funded without advertising, ad targeting or selling user data?
- **Independent audit** (weight 2): Has an independent security or privacy audit been published within the last three years?
- **Transparency report** (weight 2): Does the provider regularly publish how many government and legal requests it receives and how it responds?
- **Tells users about requests** (weight 1): Does the provider promise to tell users about requests for their data, unless a court forbids it?
- **TLS configuration** (weight 2, automated): Does the website pass the Qualys SSL Labs test with a grade of A or better?
- **Security headers** (weight 1, automated): Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
- **Modern web standards** (weight 1, automated): Does the website score 90% or higher on the Internet.nl website test?

Source: https://privacyratings.com/app-hosting/