# Proofpoint Email Protection privacy rating

Secure email gateway for organizations that filters inbound and outbound mail for spam, phishing, malware and impersonation. It runs as a cloud service or on premises in front of Microsoft 365, Google Workspace or other mail servers.

## Summary

Proofpoint Email Protection scores 41 out of 100 (grade D) on the spam and virus filtering criteria. It meets 2 of 8 criteria: tells users about requests and TLS configuration. It partly meets no ads or data sales, independent audit, transparency report and security headers. It does not meet open source and no trackers or telemetry. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.

- Website: https://www.proofpoint.com/us/products/email-protection
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Web
- Home page trackers: Google Ads, Google DoubleClick
- Category: [Spam and virus filtering](https://privacyratings.com/spam-filters/)
- Grade: D (41/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The website uses third-party analytics and a DoubleClick advertising tag, and the privacy policy describes behavioral retargeting by an ad partner. | https://www.proofpoint.com/us/legal/privacy-policy |
| No ads or data sales | Partial | Paid business service with no ads, but a third-party partner uses website cookies to retarget visitors with Proofpoint ads on other sites. | https://www.proofpoint.com/us/legal/privacy-policy |
| Independent audit | Partial | Proofpoint holds ISO 27001 certification for in-scope products, but no audit report is public. | https://www.proofpoint.com/us/legal/trust/faqs |
| Transparency report | Partial | A law enforcement statement describes legal review of each request and challenges to overbroad ones, but no request counts are published. | https://www.proofpoint.com/us/legal/trust/information-disclosure-and-law-enforcement-statement |
| Tells users about requests | Yes | Proofpoint promises to promptly notify affected customers of requests whenever permitted by law. | https://www.proofpoint.com/us/legal/trust/information-disclosure-and-law-enforcement-statement |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=admin.proofpoint.com&hideResults=on |
| Security headers | Partial | Grade B (75/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=admin.proofpoint.com |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/spam-filters/proofpoint-email-protection/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/spam-filters/proofpoint-email-protection.md