Alchemy

United States · www.alchemy.com · 48 vendors

Alchemy is a blockchain development platform that provides tools and APIs for building, monitoring, and scaling decentralized applications (dApps) and Web3 products. It offers infrastructure and services like blockchain APIs, data indexing, and transaction monitoring, enabling developers to focus on product innovation.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 48 sub-vendors.

Insights

Last updated 2026-07-05 · revision 2

48 direct vendors, 357 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Alchemy exhibits strong migration readiness, primarily driven by its highly modern and cloud-native technical stack. The extensive use of AWS and GCP, Kubernetes, Docker, Terraform, and other cloud-agnostic tools signifies a highly portable and flexible infrastructure. The adoption of microservices-oriented technologies like Istio (Service Mesh) and a focus on distributed systems further reduces monolithic dependencies, making components easier to move or re-platform. The company's core business revolves around Web3, Layer 2 Rollups, and smart contracts, which are inherently designed for decentralized and flexible deployment environments. The absence of specified data residency requirements is a positive, as it removes a common and complex hurdle for migrations. Vendor relationships show geographic diversity across 8 countries, which can reduce the complexity of migrating away from or renegotiating with specific vendors if needed. However, significant unknowns impact the overall migration readiness score. The 'Regulatory Environment' data is missing, and complex or evolving regulations could introduce substantial challenges and costs during a migration. Crucially, the 'Vendor Lock-in Risk' is stated as 'Unknown'. High vendor lock-in, if present, could severely impede migration efforts by making it difficult or costly to switch providers or technologies. While the geographic diversity of vendors is good, the lack of information on the total number of vendors prevents an assessment of vendor concentration, which is a key indicator of potential lock-in. The 'Total Vendors: 0' data point is contradictory to the provided vendor geographic diversity, so the assessment assumes the geographic diversity data is valid for existing vendors, while acknowledging the lack of a specific vendor count.

Compliance

6 in-scope frameworks identified; showing 3.

PCI DSS (source) — Assessment Required

Alchemy's Terms of Service explicitly define 'Restricted Data' to include PCI DSS cardholder data and prohibit its storage or transmission through Alchemy's services. However, Alchemy processes payments from subscribers (credit cards, billing) and its platform is used by fintech companies (Visa, Circle, Stripe) that handle payment data. The extent to which Alchemy itself is in-scope for PCI DSS (as a service provider) depends on whether cardholder data flows through its infrastructure. Risk is Medium because Alchemy contractually prohibits PCI DSS data in its services but serves major payment industry clients, creating potential indirect exposure.

Evidence: https://legal.alchemy.com/, https://www.alchemy.com/security

GDPR (source) — Partially Compliant

Alchemy (HQ: USA) explicitly acknowledges GDPR applicability in its Data Protection Addendum (DPA), Privacy Notice, and Standard Contractual Clauses (SCCs). The company has implemented SCCs for EEA/UK/Swiss data transfers, references EEA supervisory authorities, and maintains a subprocessor list. However, no independent GDPR audit or DPO appointment has been publicly disclosed. The company serves a global developer base including EU/EEA residents, processes personal data (IP addresses, wallet addresses, account data), and transfers it internationally. Risk is Medium rather than High because Alchemy has contractual mechanisms (DPA, SCCs, UK Addendum) in place, but the absence of a publicly confirmed DPO, formal GDPR audit, or EU representative appointment introduces residual compliance uncertainty.

Evidence: https://legal.alchemy.com/, https://www.alchemy.com/security, https://trust.alchemy.com/

US Export Controls — Partially Compliant

Alchemy's Terms of Service contain extensive export control and trade sanctions provisions, explicitly referencing U.S. Export Administration Regulations (EAR), OFAC sanctions, and prohibiting use by Restricted Persons or in sanctioned jurisdictions (Cuba, Iran, North Korea, Syria, restricted regions of Ukraine). The blockchain/crypto industry faces heightened OFAC scrutiny (e.g., Tornado Cash sanctions). Alchemy's global developer base and permissionless API access model create inherent compliance challenges. Risk is Medium because contractual provisions exist but enforcement and monitoring of end-user compliance at scale is operationally complex.

Evidence: https://legal.alchemy.com/

Financials

Three-year financials

Financial Resilience Score: 7/10

Alchemy is a well-capitalized private blockchain infrastructure company that has raised approximately $565 million in total equity funding, with its last priced round in February 2022 at a $10.2 billion post-money valuation. Multiple sources indicate management has communicated a multi-year cash runway, providing significant resilience against the crypto-cycle downturn. The company's blue-chip customer base including Visa, Stripe, Circle, Robinhood, JPMorgan, Shopify, Chainlink, Uniswap, and OpenSea reduces single-customer concentration risk and provides revenue diversification across both traditional fintech and crypto-native applications. However, the company faces meaningful risks including exposure to crypto market cycles, which pressured usage-based revenue across the sector during 2022-2023. The high $10.2B valuation from early 2022 creates down-round risk given private crypto-infrastructure comparables have re-rated significantly. Competition from Infura (ConsenSys), QuickNode, Ankr, Chainstack, Blockdaemon and chain-native providers creates ongoing pricing pressure. The company conducted workforce reductions in both 2022 and 2023 (~20% and further trims), consistent with sector-wide crypto-winter cost adjustments. As a private company with no audited financials, external stakeholders cannot verify margins, burn rate, or actual cash position, adding opacity risk.

Key strengths: Very well-capitalized with ~$565M raised across seed to Series C1, Last valuation of $10.2B post-money (Feb 2022), Blue-chip enterprise customer base (Visa, Stripe, Circle, JPMorgan, Robinhood), High switching costs from embedded RPC/node infrastructure, Broad chain coverage (100+ chains) reducing single-L1 dependency, Product breadth expanding into account abstraction, rollups-as-a-service, AI agents, Elite investor roster (a16z, Coatue, Lightspeed, Silver Lake, Pantera), Self-reported $1T+ annual transaction volume and 100M+ end-users

Risk factors: Crypto-cycle exposure impacting usage-based revenue, Down-round risk given top-of-market 2022 valuation, Intense competition from Infura, QuickNode, Ankr, Chainstack, Blockdaemon, Pricing pressure from free/open public RPCs and chain-native providers, US and global crypto regulatory uncertainty, Opacity - no audited financials to verify margins, burn rate, or cash position, Reported layoffs in 2022 and 2023 (~20% workforce reductions), No IPO filed and no publicly disclosed revenue or profitability metrics

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report