# Mattermost privacy rating

Self-hostable team chat with channels, threads, calls and integrations, with desktop, mobile and web apps. Messages are not end-to-end encrypted, and server telemetry is on by default but can be turned off.

## Summary

Mattermost scores 45 out of 100 (grade D) on the team chat criteria. It meets 1 of 4 criteria: no ads or data sales. It partly meets open source and independent audit. It does not meet no trackers or telemetry. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

- Website: https://mattermost.com
- Source code: https://github.com/mattermost/mattermost
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: Google Tag Manager, OneTrust (not scored)
- Category: [Team chat](https://privacyratings.com/team-chat/)
- Also rated: [Mattermost Boards](https://privacyratings.com/task-management/mattermost-boards/) (Task management)
- Grade: D (45/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Partial | Most code is AGPL-3.0 and Apache-2.0, and some enterprise code is public under the source-available Mattermost Source Available License, but other paid enterprise features are built from a private repository. | https://github.com/mattermost/mattermost/blob/master/LICENSE.enterprise |
| No trackers or telemetry | No | The website loads Google Tag Manager, and server telemetry is on by default. | https://docs.mattermost.com/administration-guide/manage/telemetry |
| No ads or data sales | Yes | Funded by commercial licenses and subscriptions, with no ads in the product. | https://mattermost.com/pricing/ |
| Independent audit | Partial | SOC 2 Type II and other audit reports exist but are available only on request through the trust center. | https://trust.mattermost.com/ |

Source: https://privacyratings.com/team-chat/mattermost/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/team-chat/mattermost.md