Java and Kotlin frameworks
Spring Boot privacy rating
Java framework from the Spring project for building standalone applications, with auto-configuration, embedded web servers and starter dependencies.
Summary
Spring Boot scores 50 out of 100 (grade D) on the Java and Kotlin frameworks criteria. It meets 2 of 4 criteria: open source and no ads or data sales. It does not meet no trackers or telemetry and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.
Score 50 out of 100. How scoring works
Criteria
-
Yes
Open source Weight 3 of 3
Is all the source code needed to run the product public?
Apache 2.0-licensed.
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The framework has no telemetry, but the spring.io website loads Google Tag Manager, OneTrust and Cloudflare Web Analytics.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Developed by Broadcom and funded by its paid Tanzu Spring support, with no ads in the framework.
-
No
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
No independent audit is published.