# Duplicati privacy rating

Backup client with deduplication, compression and AES-256 encryption, managed through a web interface. Stores backups on local disks, SFTP, WebDAV and many cloud storage services.

## Summary

Duplicati scores 50 out of 100 (grade D) on the file sync and backup criteria. It meets 2 of 4 criteria: open source and no ads or data sales. It does not meet no trackers or telemetry and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

- Website: https://duplicati.com
- Source code: https://github.com/duplicati/duplicati
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Windows, macOS, Linux
- Home page trackers: Google Fonts (not scored), Google Tag Manager, PostHog, Zendesk (not scored)
- Category: [File sync and backup](https://privacyratings.com/file-sync/)
- Grade: D (50/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | Most code is MIT. A disk imaging module in the proprietary directory of the same repository uses the source-available Duplicati Inc Software license and needs a paid subscription. | https://github.com/duplicati/duplicati/blob/master/LICENSE |
| No trackers or telemetry | No | The client sends usage reports to Duplicati by default unless turned off, and the website loads PostHog and Google Tag Manager. | https://github.com/duplicati/duplicati/blob/master/Duplicati/Library/UsageReporter/Reporter.cs |
| No ads or data sales | Yes | Free client funded by paid Duplicati Console and enterprise plans, with no ads. | https://duplicati.com/pricing |
| Independent audit | No | No independent audit is published. |  |

Source: https://privacyratings.com/file-sync/duplicati/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/file-sync/duplicati.md