Java and Kotlin framework privacy ratings
Web and application frameworks for the JVM, written in Java, Kotlin or Scala.
12 Java and Kotlin frameworks are rated against 4 public criteria, and 12 have enough evidence for a letter grade. Of the 9 with a known jurisdiction, 6 are based in a Five Eyes country, and 7 in the wider Fourteen Eyes.
Open-source Java and Kotlin frameworks only · Criteria for this category · Suggest an addition · Markdown
| Name | Grade | Score | Data | Jurisdiction | Open source | No trackers or telemetry | No ads or data sales | Independent audit |
|---|---|---|---|---|---|---|---|---|
Eclipse Foundation toolkit for building reactive, event-driven applications on the JVM with non-blocking I/O, usable from Java, Kotlin and other JVM languages. |
Grade B | 80 | 100% | Belgium Fourteen Eyes | Yes | Yes | Yes | No |
Java framework from Oracle for building microservices, offered as a lightweight functional API (Helidon SE) and a MicroProfile implementation (Helidon MP). |
Grade B | 80 | 100% | United States Five Eyes | Yes | Yes | Yes | No |
Lightweight web framework for Java and Kotlin built on the Jetty server, with a small handler-based API for REST APIs and WebSockets. |
Grade B | 80 | 100% | – | Yes | Yes | Yes | No |
Web framework for Java and Scala with a stateless, non-blocking architecture, hot reloading during development and type-safe templates. |
Grade B | 80 | 100% | – | Yes | Yes | Yes | No |
Java framework for building RESTful web services that bundles Jetty, Jersey and Jackson into one application package with built-in metrics and health checks. |
Grade C | 70 | 100% | – | Yes | Yes | Partial | No |
Java framework for cloud and Kubernetes applications, designed for fast startup and low memory use, with GraalVM native compilation and a live-reload dev mode. |
Grade C | 65 | 100% | United States Five Eyes | Yes | Partial | Yes | No |
Apache MVC framework for building Java web applications, based on actions, interceptors and result views. |
Grade D | 50 | 100% | United States Five Eyes | Yes | No | Yes | No |
Web application framework for the Groovy language built on Spring Boot, with convention over configuration, the GORM data layer and GSP templates. |
Grade D | 50 | 100% | United States Five Eyes | Yes | No | Yes | No |
Kotlin framework from JetBrains for building asynchronous servers and HTTP clients with coroutines, extended through plugins. |
Grade D | 50 | 100% | Czechia Outside Eyes | Yes | No | Yes | No |
JVM framework for microservices and serverless applications in Java, Kotlin and Groovy, using compile-time dependency injection instead of reflection. |
Grade D | 50 | 100% | United States Five Eyes | Yes | No | Yes | No |
Java framework from the Spring project for building standalone applications, with auto-configuration, embedded web servers and starter dependencies. |
Grade D | 50 | 100% | United States Five Eyes | Yes | No | Yes | No |
Java framework for building web application user interfaces, with server-side Java UI components (Flow) and React-based views (Hilla). Some components and tools are commercial. |
Grade F | 35 | 100% | Finland Outside Eyes | Partial | No | Yes | No |
Questions
What is the most private option among Java and Kotlin frameworks?
No pick has been made yet. The table above is sorted by score, based on public evidence.
How are Java and Kotlin frameworks rated?
Each entry answers 4 questions: open source, no trackers or telemetry, no ads or data sales and independent audit. Answers need links to evidence. See the full criteria.
Does jurisdiction matter?
Jurisdiction decides which laws can compel a provider to hand over data. Each entry shows its country and whether it is in the Five, Nine or Fourteen Eyes. The data a provider can hand over depends mostly on what it stores and who holds the keys. Read about jurisdictions and the CLOUD Act.