Binary Stream

Canada · www.binarystream.com · 20 vendors

Resilience scores

Technology vendors

Services catalogue

3 services in catalogue across 3 categories; runs on 20 sub-vendors.

Insights

Last updated 2026-08-15 · revision 1

20 direct vendors, 202 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Binary Stream demonstrates medium-high migration readiness (68/100). Strengths include the company's internal tech stack being heavily aligned with modern Microsoft cloud technologies, including Microsoft Azure and Microsoft Dynamics 365. Their core products are designed as extensions for these platforms, utilizing technologies like AL (Application Language for Business Central extensions), indicating strong expertise in developing and deploying solutions within a cloud ERP ecosystem. This positions them well for migrations *within* the Microsoft cloud environment (e.g., from Dynamics GP to Dynamics 365 Finance & SCM). Weaknesses and Unknowns: A primary challenge for migration readiness, particularly if considering a move *away* from the Microsoft ecosystem, is the significant vendor lock-in with Microsoft. Their products are deeply embedded in Microsoft Dynamics, and a licensing agreement further solidifies this relationship. While the provided vendor data shows geographic diversity for *some* vendors, the core dependency on Microsoft is high. The continued support for Microsoft Dynamics GP, a legacy platform, also suggests a need to manage older technology alongside newer cloud solutions. There is no explicit data on whether their *own* product architecture employs advanced cloud-native patterns like containerization or microservices beyond being 'embedded' extensions. Crucially, data on regulatory environment, data residency requirements, and financial stability (which would impact funding for migration initiatives) is missing, introducing significant unknowns into the assessment. The 'Total Vendors: 0' data point is noted as contradictory and ignored in favor of the more detailed vendor geographic diversity.

Compliance

8 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Assessment Required

ISO 27001 is the internationally recognized standard for information security management systems (ISMS). Binary Stream is a global software company with operations in Canada and India, serving customers in 30+ countries across regulated industries. ISO 27001 certification is increasingly expected by enterprise customers, particularly in healthcare, finance, and manufacturing sectors. The absence of any publicly disclosed ISO 27001 certification is a gap for a company of Binary Stream's scale and global reach. Risk is Medium because: (1) ISO 27001 is not legally mandated but is a strong market expectation for enterprise software vendors; (2) Binary Stream's development centre in India (Chandigarh) adds cross-border data handling complexity that ISO 27001 controls would address; (3) serving regulated industries without demonstrated ISMS certification may create procurement barriers with security-conscious enterprise customers.

Evidence: https://binarystream.com/privacy-policy/, https://binarystream.com/about/, https://www.iso.org/isoiec-27001-information-security.html

SOC 2 (source) — Assessment Required

Binary Stream is a software-as-a-service (SaaS) and cloud-based ERP add-on vendor operating on Microsoft Dynamics 365 (a cloud platform). Enterprise software vendors serving large organizations across healthcare, finance, manufacturing, and other regulated industries are increasingly expected by customers and prospects to hold SOC 2 Type II reports as evidence of security, availability, and confidentiality controls. The absence of any publicly disclosed SOC 2 certification or report is a notable gap for a company of Binary Stream's profile (100+ employees, 2,000+ users, 30+ countries, serving regulated industries). Risk is Medium because: (1) SOC 2 is not legally mandated but is a strong market expectation for B2B software vendors; (2) lack of SOC 2 may create competitive disadvantage and customer trust issues, particularly with enterprise and regulated-industry customers; (3) Binary Stream's solutions are embedded in Microsoft's cloud infrastructure, which itself holds extensive certifications, but this does not automatically extend to Binary Stream's own development and operational practices.

Evidence: https://binarystream.com/about/, https://binarystream.com/privacy-policy/, https://www.aicpa-cima.com/resources/landing/system-and-organization-controls-soc-suite-of-services

PIPEDA — Assessment Required

PIPEDA (and its successor, Bill C-27 / Consumer Privacy Protection Act, currently in legislative process) is Canada's federal private-sector privacy law and directly applies to Binary Stream as a Canadian-incorporated company (Binary Stream Software Inc., Burnaby, BC). The company's privacy policy explicitly references CASL compliance and designates a privacy officer, indicating awareness of Canadian privacy obligations. However, the privacy policy is minimal and does not fully address all PIPEDA requirements (e.g., accountability principle, limiting collection, accuracy, safeguards, openness, individual access, challenging compliance). Risk is Medium because: (1) PIPEDA applies with certainty as Binary Stream is a Canadian company; (2) the privacy policy is basic and may not fully satisfy PIPEDA's 10 fair information principles; (3) the Office of the Privacy Commissioner of Canada (OPC) has enforcement authority; (4) Canada's proposed Bill C-27 (CPPA) would significantly strengthen privacy obligations including mandatory breach reporting, privacy management programs, and higher penalties.

Evidence: https://binarystream.com/privacy-policy/, https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/, https://www.parl.ca/DocumentViewer/en/44-1/bill/C-27/first-reading

Financials

Three-year financials

Financial Resilience Score: 7/10

Binary Stream is a mature, founder-led, privately held Canadian ISV with a 25-year operating history and an apparently healthy recurring-revenue franchise anchored in the Microsoft Dynamics ecosystem. The business model is built on ERP add-on subscriptions and annual maintenance licences, which historically generate high-visibility, high-retention revenue streams. Reported customer retention of 97% and customer satisfaction of 93% suggest low churn and predictable renewals, while the company's self-funded growth (no known outside PE or VC funding) and lack of dilutive financing events point to internally cash-generative operations. Strategic validation from Microsoft is a significant positive: multiple President's Club recognitions, membership in the Microsoft Partner Advisory Council (2023), the Microsoft AI Cloud Partner Program (2025), and most notably Microsoft's 2022 licensing of Binary Stream's Subscription Billing Suite for Dynamics 365 Finance — a likely material royalty/licence revenue stream and a clear endorsement of IP quality. Diversified end-market exposure across healthcare, hospitality, real estate, telecom, manufacturing, software, and insurance reduces single-industry concentration risk, and the India development centre in Chandigarh provides cost-efficient delivery. However, because the company is a private Canadian corporation not required to file public accounts, and is not listed on any exchange or SEDAR+/EDGAR, specific revenue, EBIT, and equity figures are not verifiable from primary sources. Key structural risks include heavy platform concentration on Microsoft Dynamics (Microsoft could absorb functionality natively), legacy Dynamics GP end-of-life migration risk, competition from well-funded SaaS ISVs (Zuora, Chargebee, Sage Intacct add-ons), and key-person risk around founder/CEO Lak Chahal. The score reflects strong qualitative indicators offset by limited financial transparency.

Key strengths: Recurring-revenue subscription/maintenance business model with high visibility, 97% customer retention and 93% customer satisfaction, 25-year operating history, self-financed growth with no known dilutive financing, Deep Microsoft alignment — President's Club, Partner Advisory Council, AI Cloud Partner Program, 2022 Microsoft licensing deal for Subscription Billing Suite for Dynamics 365 Finance, Diversified end-market exposure across healthcare, hospitality, real estate, telecom, manufacturing, Cost-efficient delivery via India Global Development Centre, Tuck-in M&A capability (Vertical Leap acquisition in 2022)

Risk factors: Heavy platform concentration on Microsoft Dynamics ecosystem, Microsoft could build competing native functionality into Dynamics 365, Legacy Dynamics GP end-of-life creating multi-year revenue-transition risk, Private ownership limits financial transparency for counterparties, Competition from well-funded SaaS ISVs (Zuora, Chargebee, Sage Intacct add-ons, Aptitude), Key-person risk around founder/CEO Lak Chahal, No audited disclosure of liquidity, leverage, or profitability

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report