# Scrut Automation privacy rating

Hosted governance, risk and compliance platform that monitors cloud and SaaS systems and collects evidence for SOC 2, ISO 27001, GDPR, HIPAA and other frameworks, with vendor risk management and trust center pages.

## Summary

Scrut Automation scores 34 out of 100 (grade F) on the compliance automation criteria. It meets 2 of 8 criteria: no ads or data sales and TLS configuration. It partly meets independent audit and security headers. It does not meet open source, no trackers or telemetry, transparency report and tells users about requests. It is based in India: Not in the Five, Nine or Fourteen Eyes. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade B.

- Website: https://www.scrut.io
- Jurisdiction: India. Not in the Five, Nine or Fourteen Eyes.
- Platforms: Web
- Home page trackers: Google Tag Manager, HubSpot, Microsoft Clarity
- Category: [Compliance automation](https://privacyratings.com/compliance-automation/)
- Grade: F (34/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The privacy policy describes cookies and web beacons used to analyze visitor behavior, and the website loads HubSpot, Microsoft Clarity and Google Tag Manager. | https://www.scrut.io/privacy-policy |
| No ads or data sales | Yes | Paid service with no ads. The privacy policy states that no user or customer data is sold. | https://www.scrut.io/privacy-policy |
| Independent audit | Partial | States SOC 2 and ISO 27001 audits, but the reports are only available through its trust center. | https://www.scrut.io/company/security |
| Transparency report | No | No transparency report is published. The privacy policy only says data may be disclosed in response to legal process such as a search warrant, court order or subpoena. | https://www.scrut.io/privacy-policy |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A | https://www.ssllabs.com/ssltest/analyze.html?d=app.scrut.io&hideResults=on |
| Security headers | Partial | Grade B (75/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=app.scrut.io |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/compliance-automation/scrut/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/compliance-automation/scrut.md