# Vonage privacy rating

Communications APIs from Vonage, formerly Nexmo, for SMS, voice calls, video, WhatsApp and phone number verification.

## Summary

Vonage scores 18 out of 100 (grade F) on the SMS and voice APIs criteria. It meets 1 of 10 criteria: TLS configuration. It partly meets message content deleted or redacted. It does not meet open source, no trackers or telemetry and security headers. Still needing evidence: no ads or data sales, independent audit, transparency report, tells users about requests and EU data location. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade D.

- Website: https://www.vonage.com/communications-apis/
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: Cloudflare Web Analytics (cookieless analytics), OneTrust (not scored)
- Category: [SMS and voice APIs](https://privacyratings.com/communications-apis/)
- Grade: F (18/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The website loads Adobe Launch and 6sense scripts. |  |
| No ads or data sales | Unknown |  |  |
| Independent audit | Unknown |  |  |
| Transparency report | Unknown |  |  |
| Tells users about requests | Unknown |  |  |
| TLS configuration | Yes | Grade A | https://www.ssllabs.com/ssltest/analyze.html?d=vonage.com&hideResults=on |
| Security headers | No | Grade D (30/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=vonage.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Message content deleted or redacted | Partial | Server logs keep message text for up to one month and call detail records for 13 months. Auto-redact removes message text before it is stored, and is turned on by request. | https://developer.vonage.com/en/messaging/sms/message-privacy |
| EU data location | Unknown |  |  |

Source: https://privacyratings.com/communications-apis/vonage/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/communications-apis/vonage.md
