How we rank: IT companies
The Score (0–100) is a weighted sum of the factors below. Each factor is the weighted average of its metrics; each metric is calculated from one published fact. Missing facts score zero, and a service is ranked only when enough of its Score is backed by facts.
A service is ranked only when at least 60% of its Score is backed by verified facts.
Proof of work 30%
At least three public case studies naming the client, stated partner status with a named vendor, and the company's own open-source code. An anonymous "large bank" does not count as a named client.
| Metric | Rule |
|---|---|
| Case studies with named clients | Yes = 100, No = 0 |
| Partner of a named vendor | Yes = 100, No = 0 |
| Open source | Yes = 100, No = 0 |
Transparency 25%
Whether a legal entity of this country is given with its registration number, annual reports are published, a code of conduct and a privacy policy exist, and how many of four contact channels are listed: phone, email, form or chat, address.
| Metric | Rule |
|---|---|
| Legal entity with registration number | Yes = 100, No = 0 |
| Annual reports | Yes = 100, No = 0 |
| Code of conduct | Yes = 100, No = 0 |
| Privacy policy | Yes = 100, No = 0 |
| Contact channels (of 4) | Linear from 0 (0) to 4 (100) |
Certificates 25%
Whether current ISO/IEC 27001 and ISO 9001 certificates and a SOC 2 report are stated. "We work to ISO standards" is not a certificate. We do not check the documents with certification bodies.
| Metric | Rule |
|---|---|
| ISO 27001 certificate | Yes = 100, No = 0 |
| ISO 9001 certificate | Yes = 100, No = 0 |
| SOC 2 report | Yes = 100, No = 0 |
Experience and scale 20%
Year founded (scale up to 30 years) and stated headcount (logarithmic scale up to 10,000 people). Figures are as stated; for a group they may cover the whole group.
| Metric | Rule |
|---|---|
| Year founded | Full score at 30+ years |
| Employees (stated) | Logarithmic, full score at 10,000 |