SecurityScorecard provides security ratings. It continuously scores the cyber security posture of organisations, including their suppliers, and makes the results available to customers for self-monitoring and third-party risk management. The company describes its service as supply chain detection and response, and it is delivered as a cloud platform.
SecurityScorecard, Inc. is a US company. Its privacy policy states that the company is located in the United States and gives a New York address for its privacy team. Investors include venture and strategic investors such as Sequoia Capital and Moody's, and no majority owner is named. The privacy policy notes that service providers may be located in the United States and elsewhere, and that transfers outside the European Economic Area rely on standard contractual clauses. It does not name hosting regions or an EU data residency option. For a European organisation, the points to weigh are US jurisdiction over the provider and the storage location, which is not stated.