Domain registrars
Gandi privacy rating
French domain registrar and hosting provider with free WHOIS privacy on most extensions, TOTP and security-key login, and a yearly transparency report.
Summary
Gandi scores 45 out of 100 (grade D) on the domain registrars criteria. It meets 3 of 12 criteria: no ads or data sales, transparency report and two-factor login. It partly meets independent audit, TLS configuration, security headers, Free WHOIS privacy and transfer and registry lock. It does not meet open source, no trackers or telemetry, tells users about requests and honest renewal pricing. It is based in France: Nine Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A- and Mozilla HTTP Observatory grade B.
Score 45 out of 100. How scoring works
Criteria
- No
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The privacy policy lists AT Internet audience-measurement cookies, which can be opted out of.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Funded by paid domain and hosting services. No ads.
-
Partial
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
The site states an ISO 27001 and ISO 22301 certification by BSI. No audit report is published.
-
Yes
Transparency report Weight 2 of 3
Does the provider regularly publish how many government and legal requests it receives and how it responds?
Yearly reports with counts of information requests from authorities and content notices.
-
No
Tells users about requests Weight 1 of 3
Does the provider promise to tell users about requests for their data, unless a court forbids it?
No published policy on notifying users about data requests.
-
Partial
Free WHOIS privacy Weight 2 of 3
Is registrant data hidden from public WHOIS and RDAP at no extra cost?
Free and on by default, but some extensions do not support the anonymized contact option.
-
No
Honest renewal pricing Weight 1 of 3
Are renewal prices the same as, or close to, the first-year price?
A .com registers for about 11 EUR but renews for about 32 EUR per year.
-
Yes
Two-factor login Weight 2 of 3
Do accounts support two-factor authentication with an authenticator app or security key?
TOTP apps and security keys are supported.
-
Partial
Transfer and registry lock Weight 1 of 3
Is transfer lock on by default, with registry lock available?
Transfer lock is available on most extensions. Registry lock is not offered to regular accounts.
Automated tests
-
Partial
TLS configuration Weight 2 of 3
Does the website pass the Qualys SSL Labs test with a grade of A or better?
Grade A-
-
Partial
Security headers Weight 1 of 3
Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
Grade B (70/100+)
-
Not tested yet
Modern web standards Weight 1 of 3
Does the website score 90% or higher on the Internet.nl website test?
Not tested yet.