Vonage privacy rating

Summary

Vonage scores 18 out of 100 (grade F) on the SMS and voice APIs criteria. It meets 1 of 10 criteria: TLS configuration. It partly meets message content deleted or redacted. It does not meet open source, no trackers or telemetry and security headers. Still needing evidence: no ads or data sales, independent audit, transparency report, tells users about requests and EU data location. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade D.

Score 18 out of 100. How scoring works

Criteria

• ✖No

  Open source ×3Weight 3 of 3

  Is all the source code needed to run the product public?

  Closed source.

• ✖No

  No trackers or telemetry ×3Weight 3 of 3

  Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?

  The website loads Adobe Launch and 6sense scripts.

• ?Unknown

  No ads or data sales ×2Weight 2 of 3

  Is the product funded without advertising, ad targeting or selling user data?

  Needs evidence. Add it

• ?Unknown

  Independent audit ×2Weight 2 of 3

  Has an independent security or privacy audit been published within the last three years?

  Needs evidence. Add it

• ?Unknown

  Transparency report ×2Weight 2 of 3

  Does the provider regularly publish how many government and legal requests it receives and how it responds?

  Needs evidence. Add it

• ?Unknown

  Tells users about requests ×1Weight 1 of 3

  Does the provider promise to tell users about requests for their data, unless a court forbids it?

  Needs evidence. Add it

• ◐Partial

  Message content deleted or redacted ×3Weight 3 of 3

  Can the text of messages be kept from being stored after delivery?

  Server logs keep message text for up to one month and call detail records for 13 months. Auto-redact removes message text before it is stored, and is turned on by request.

  developer.vonage.com

• ?Unknown

  EU data location ×1Weight 1 of 3

  Can messages, call records and logs be processed and stored in the European Union?

  Needs evidence. Add it

Automated tests

• ✔Yes

  TLS configuration ×2Weight 2 of 3

  Does the website pass the Qualys SSL Labs test with a grade of A or better?

  Grade A

  ssllabs.com

• ✖No

  Security headers ×1Weight 1 of 3

  Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?

  Grade D (30/100+)

  developer.mozilla.org

• …Not tested yet

  Modern web standards ×1Weight 1 of 3

  Does the website score 90% or higher on the Internet.nl website test?

  Not tested yet.