# Probo privacy rating

Open-source governance, risk and compliance platform for SOC 2, ISO 27001 and similar programs, covering risks, controls, vendors, access reviews and documents. It can be self-hosted, used as Probo Cloud, or paired with a managed compliance officer service.

## Summary

Probo scores 50 out of 100 (grade D) on the compliance automation criteria. It meets 4 of 8 criteria: open source, no ads or data sales, TLS configuration and security headers. It does not meet no trackers or telemetry, independent audit, transparency report and tells users about requests. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.

- Website: https://www.probo.com
- Source code: https://github.com/getprobo/probo
- License: MIT
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Web
- Home page trackers: Google Fonts (not scored)
- Category: [Compliance automation](https://privacyratings.com/compliance-automation/)
- Grade: D (50/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | MIT. | https://github.com/getprobo/probo/blob/main/LICENSE |
| No trackers or telemetry | No | The website uses PostHog Cloud analytics with a one-year cookie. | https://www.probo.com/cookie-policy |
| No ads or data sales | Yes | Funded by paid plans and services. The privacy policy says personal data is not sold or shared for cross-context behavioral advertising. | https://www.probo.com/privacy |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | No | No transparency report or government request policy is published. | https://www.probo.com/privacy |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=us.probo.com&hideResults=on |
| Security headers | Yes | Grade A+ (110/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=us.probo.com |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/compliance-automation/probo/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/compliance-automation/probo.md