# IronVest privacy rating

Privacy service formerly called Abine Blur that provides masked virtual payment cards, masked email addresses and masked phone numbers, along with password management.

## Summary

IronVest scores 47 out of 100 (grade D) on the virtual cards criteria. It meets 3 of 8 criteria: no ads or data sales, tells users about requests and TLS configuration. It partly meets independent audit, transparency report and security headers. It does not meet open source and no trackers or telemetry. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B+.

- Website: https://ironvest.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Android, iOS, Web
- Home page trackers: Google Fonts (not scored)
- Category: [Virtual cards](https://privacyratings.com/virtual-cards/)
- Grade: D (47/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The Exodus report finds AppsFlyer, Google Crashlytics, Google Firebase Analytics and Segment in the Android app. The website loads Google Analytics after consent. | https://reports.exodus-privacy.eu.org/en/reports/com.abine.dnt/latest/ |
| No ads or data sales | Yes | Funded by subscriptions. The privacy policy states personal data is never sold or shared for cross-context behavioral advertising. | https://ironvest.com/legal/privacy |
| Independent audit | Partial | States it holds SOC 2 Type II, but the report is not public. | https://ironvest.com/legal/security |
| Transparency report | Partial | The privacy policy says information is provided only under valid court orders, but no request counts are published. | https://ironvest.com/legal/privacy |
| Tells users about requests | Yes | The privacy policy promises to notify users of law enforcement requests when legally permitted. | https://ironvest.com/legal/privacy |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=ironvest.com&hideResults=on |
| Security headers | Partial | Grade B+ (80/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=ironvest.com |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/virtual-cards/ironvest/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/virtual-cards/ironvest.md