# Postman privacy rating

API platform for designing, testing and documenting APIs, with collections, environments, mock servers and team workspaces synced to Postman's cloud.

## Summary

Postman scores 30 out of 100 (grade F) on the developer tools criteria. It meets 1 of 4 criteria: no ads or data sales. It partly meets independent audit. It does not meet open source and no trackers or telemetry. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

- Website: https://www.postman.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Windows, macOS, Linux, Web
- Home page trackers: Cloudflare Web Analytics (cookieless analytics), Facebook SDK, Google Tag Manager, LinkedIn Insight, Meta Pixel
- Category: [Developer tools](https://privacyratings.com/developer-tools/)
- Grade: F (30/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The website loads Google Tag Manager, the Meta pixel and HubSpot. | https://www.postman.com |
| No ads or data sales | Yes | Funded by paid plans, with no ads in the app. | https://www.postman.com/pricing/ |
| Independent audit | Partial | Holds SOC 2 Type II and ISO 27001 certifications, but reports are only available on request through its trust portal. | https://www.postman.com/security/ |

Source: https://privacyratings.com/developer-tools/postman/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/developer-tools/postman.md