// Trust & Security Report

    Datawrapper GmbH logo

    Datawrapper GmbH

    Data visualization platform for creating charts, maps, and tables without coding. Products: Free tier (core features), Custom tier ($599/month team plan), Enterprise tier (self-hosting, SSO, SLAs).

    Certifications held

    2

    Maturity

    Growth

    Trains on your data

    No

    Trust center

    No

    // Certification ledger

    Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.

    ISO 27001
    HELD

    Datawrapper is fully certified according to the ISO 27001 norm, the world's best-known standard for information security management systems. Audited yearly against the ISO 27001 standard to make sure all safety procedures are appropriate and up to date.

    Verify on datawrapper.de
    GDPR (Compliance Posture, not a cert)
    HELD

    Privacy Policy updated to reflect the demands of GDPR (General Data Protection Regulation), effective May 25, 2018. Named a person internally responsible for Data Protection.

    Verify on datawrapper.de
    > Show 3 unconfirmed / not-held certifications
    SOC 2 (Type 1 or Type 2)
    NOT CONFIRMED

    No public evidence of SOC 2 certification. Not mentioned on security page, terms, or privacy policy.

    source: datawrapper.de
    HIPAA
    NOT CONFIRMED

    No public evidence of HIPAA compliance or Business Associate Agreement availability.

    source: datawrapper.de
    Data Processing Agreement (DPA)
    NOT CONFIRMED

    Privacy policy references contracted companies authorized to process personal data per GDPR, but no publicly available standard DPA template. Contact support@datawrapper.de for formal DPA.

    source: datawrapper.de

    // Privacy & AI training

    Trains on customer data

    No

    Data processing agreement

    Not offered

    Data region

    European Economic Area (EEA) - Data centers in Stockholm and Frankfurt; AWS infrastructure.

    No public evidence of using customer data for AI model training. Platform integrates with AI tools (MCP) but does not train models on user visualizations or data.

    // Security controls

    Encryption in Transit

    TLS (Transport Layer Security) implemented across all systems

    datawrapper.de

    Encryption at Rest

    Data encrypted at rest; customer and system data backed up daily

    datawrapper.de

    Data Residency

    Western European data centers (Stockholm and Frankfurt); user data remains in EEA; AWS infrastructure

    datawrapper.de

    Penetration Testing

    Third-party penetration tests performed at least once annually

    datawrapper.de

    Code Review

    All code undergoes peer review; security testing in staging environments before release

    datawrapper.de

    Disaster Recovery

    Infrastructure distributed across two AWS datacenters; daily backups with matching encryption standards

    datawrapper.de

    Access Controls (Enterprise)

    SAML2 and OpenID-based Single Sign-On available for enterprise customers

    datawrapper.de

    Data Privacy

    Does not sell customer data to third parties; visualizations are tracking-free and CCPA-compliant

    datawrapper.de

    // Products & data scope

    Free PlanData Visualization

    data: Unlimited free visualizations (charts, maps, tables); PNG export; Datawrapper attribution

    No cost; core features for individuals and small projects

    Custom Plan (Team)Data Visualization

    data: $599/month or $5,990/year; 10 user licenses; SVG/PNG/PDF export; full customization; no attribution

    20% discount for non-profit organizations; additional users at $21/month each

    Enterprise PlanData Visualization

    data: Custom pricing; self-hosting option; SAML2/OpenID SSO; SLAs; on-demand support

    For large organizations requiring advanced security and control; data can be self-hosted in customer's own S3/GCS/SFTP

    // At a glance

    Pricing model

    Freemium with tiered subscriptions (Free, Custom, Enterprise)

    Self-hostable

    Yes

    // How we verified this

    Every certification marked HELD is confirmed against a verbatim quote on Datawrapper GmbH's own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.

    Last verified 2026-07-07. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.

    datawrapper.de

    > Browse all vendor trust reports