Comp AI vs Eramba: privacy compared
Comp AI and Eramba are both rated in compliance automation against the same 9 public criteria. Comp AI is based in the United States (Five Eyes); Eramba is based in the United Kingdom (Five Eyes).
| Criterion | Comp AI Our pick | Eramba |
|---|---|---|
| Grade | Grade F F (35/100) | Grade F F (25/100) |
| Jurisdiction | United States Five Eyes | United Kingdom Five Eyes |
| Open source Is all the source code needed to run the product public? | Partial source | Partial source |
| No trackers or telemetry Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default? | No source | No |
| No ads or data sales Is the product funded without advertising, ad targeting or selling user data? | Partial source | Partial source |
| Independent audit Has an independent security or privacy audit been published within the last three years? | Partial source | No |
| Transparency report Does the provider regularly publish how many government and legal requests it receives and how it responds? | No source | Not applicable |
| Tells users about requests Does the provider promise to tell users about requests for their data, unless a court forbids it? | No | Not applicable |
| TLS configuration Does the website pass the Qualys SSL Labs test with a grade of A or better? | Yes source | Not applicable |
| Security headers Does the website pass the Mozilla HTTP Observatory test with a grade of A or better? | Partial source | Not applicable |
| Modern web standards Does the website score 90% or higher on the Internet.nl website test? | No source | Not applicable |
Which is more private, Comp AI or Eramba?
Comp AI scores higher on the public criteria: 35 out of 100, against 25 for Eramba. Comp AI does better on independent audit. How scoring works
Summaries
Comp AI. Comp AI scores 35 out of 100 (grade F) on the compliance automation criteria. It meets 1 of 9 criteria: TLS configuration. It partly meets open source, no ads or data sales, independent audit and security headers. It does not meet no trackers or telemetry, transparency report, tells users about requests and modern web standards. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A, Mozilla HTTP Observatory grade B+ and Internet.nl website score 66%.
Eramba. Eramba scores 25 out of 100 (grade F) on the compliance automation criteria. It partly meets open source and no ads or data sales. It does not meet no trackers or telemetry and independent audit. It is based in the United Kingdom: Five Eyes member; GDPR-style data protection law; CLOUD Act data access agreement with the US.
Compare all 11 compliance automation