AdRoll

United States · www.adroll.com · 27 vendors

AdRoll is a marketing and advertising platform that helps brands grow revenue and save time through multi-channel ad campaigns. It specializes in retargeting and prospecting services, leveraging AI and data-driven strategies to deliver personalized advertising solutions across various channels like display, social media, and email. The platform aims to help businesses, particularly mid-sized and direct-to-consumer brands, acquire and retain customers by optimizing their marketing efforts.

Resilience scores

Technology vendors

Services catalogue

3 services in catalogue across 2 categories; runs on 27 sub-vendors.

Insights

Last updated 2026-07-11 · revision 13

27 direct vendors, 291 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

AdRoll demonstrates very high migration readiness, primarily due to its highly modern, cloud-native architecture. The company is deeply integrated with Amazon Web Services (AWS), utilizing services like EC2, S3, DynamoDB, Kinesis, EMR, and ECS, indicating a scalable and flexible infrastructure. The extensive use of Docker points to a containerized environment, which significantly enhances portability and reduces friction for migrating workloads across different environments or cloud providers. Their tech stack includes modern languages (Python, Java, Go, Rust) well-suited for microservices architectures, further contributing to modularity and ease of migration. The presence of 8+ Public REST APIs and the AdRoll MCP Server built on an open protocol highlight an API-driven design, which simplifies integration and decoupling during migration efforts. Furthermore, AdRoll's data residency requirements are flexible; while processing EU data, transfers to the US are governed by Standard Contractual Clauses, and no mandatory in-country data storage requirements were identified. This absence of strict data localization significantly reduces complexity for potential migrations. The company's existing strong regulatory compliance (GDPR, CCPA/CPRA, SOC2, PCI DSS) means that while compliance must be maintained, the frameworks and processes are already in place to manage data during any transition. The primary area of uncertainty lies in the financial stability, as the company has undergone several rounds of layoffs and restructuring in recent years, which could potentially impact the funding available for a large-scale migration project. Additionally, the vendor data is contradictory ("Total Vendors: 0" vs. "Total Services: 34" and geographic diversity). While the tech stack itself suggests low lock-in to proprietary systems, the unknown number of external vendors and the explicitly stated "Vendor Lock-in Risk: Unknown" mean that potential dependencies and their associated complexities cannot be fully assessed. However, the inherent flexibility and modernity of AdRoll's core technology stack position it exceptionally well for any future migration initiatives.

Compliance

11 in-scope frameworks identified; showing 3.

COPPA — Compliant

AdRoll/NextRoll has explicitly implemented policies to exclude minors from its advertising services. The company does not serve customers whose sites target minors and does not knowingly collect data from individuals under 16. Risk is Low because the company has clear, documented policies and operational controls to prevent COPPA violations, and its B2B business model (serving advertisers, not directly targeting consumers) reduces direct COPPA exposure.

Evidence: https://www.nextroll.com/trust-center, https://www.nextroll.com/privacy, https://help.adroll.com/hc/en-us/articles/214493028

CPRA — Compliant

AdRoll/NextRoll has extensive CCPA/CPRA compliance infrastructure in place, including a dedicated CCPA section in its privacy policy, opt-out mechanisms, Do Not Sell/Share links, Global Privacy Control (GPC) signal recognition, CCPA metrics publication, and a privacy rights request portal. However, risk remains Medium because: (a) the adtech industry is under active CPPA (California Privacy Protection Agency) scrutiny; (b) the company sells personal data (B2B contact data via AdRoll ABM) which triggers heightened CCPA obligations; (c) the complexity of real-time bidding and data sharing creates ongoing compliance challenges; (d) CPRA enforcement has been active since 2023.

Evidence: https://www.nextroll.com/privacy, https://www.nextroll.com/privacy/ccpa-metrics, https://app.adroll.com/optout/email, https://nextroll-privacy.relyance.ai

NAI — Compliant

AdRoll/NextRoll is a member of the NAI and explicitly adheres to its code of conduct. The NAI provides industry self-regulation for interest-based advertising. Risk is Low because: (a) NAI membership is voluntary and demonstrates commitment to self-regulation; (b) NAI compliance is a positive indicator for regulators; (c) the company displays NAI membership seal and provides NAI opt-out tools.

Evidence: https://www.nextroll.com/privacy, https://www.networkadvertising.org/, https://www.nextroll.com/trust-center

Financials

Three-year financials

Financial Resilience Score: 5/10

AdRoll, operating under parent NextRoll, Inc., is a privately held ad-tech company that does not publish audited financial statements, making a definitive resilience assessment difficult. The company has a long operating history since 2006, an established brand serving 110,000-140,000 customers globally, and has raised over US$90 million from top-tier VCs including Foundation Capital, IVP, and Merus Capital. Two complementary product lines (AdRoll for D2C/e-commerce and AdRoll ABM for B2B) provide diversification, and the company has built proprietary ML/bidding technology and a substantial first-party data footprint over ~17 years. However, significant risks weigh against resilience. The core retargeting/programmatic display market faces structural pressure from third-party cookie deprecation, Apple ATT/ITP, GDPR/DMA, and Google Privacy Sandbox changes. Competition from Google, Meta, Amazon, The Trade Desk, and Criteo is intense. A history of restructurings and layoffs (2017, 2020, and reportedly 2022-2023) suggests ongoing margin and growth pressure. Additionally, the company has been VC-backed for ~18 years without an IPO or acquisition exit, which is unusually long and suggests late-stage investors are seeking liquidity. Limited financial transparency means external assessment of solvency and burn rate is speculative.

Key strengths: Long operating history since 2006 with established brand, 110,000-140,000 customers globally providing diversified base, Two complementary product lines (D2C and B2B/ABM), Proprietary ML/bidding technology and first-party data moat, Well-capitalized historically with >US$90M raised from top-tier VCs, SME/mid-market focus with low customer concentration risk

Risk factors: Structural pressure from third-party cookie deprecation and privacy regulations (GDPR/DMA, Apple ATT/ITP), Intense competition from Google, Meta, Amazon, The Trade Desk, and Criteo, History of restructurings and layoffs in 2017, 2020, and 2022-2023, No IPO or acquisition exit after ~18 years of VC backing, Limited financial transparency as private company, Slowing growth in legacy retargeting business

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report