Capitalize

United States · www.hicapitalize.com · 18 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 18 sub-vendors.

Insights

Last updated 2026-08-16 · revision 2

18 direct vendors, 205 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

The company demonstrates medium migration readiness, primarily due to significant unknowns. The most critical challenge is the 'Unknown' status of 'Vendor Lock-in Risk,' which makes it impossible to accurately gauge the effort and cost involved in transitioning away from current vendor services. The absence of detailed 'Internal Tech Stack' information (e.g., cloud-native architecture, containerization, microservices adoption) prevents a clear understanding of the architectural flexibility and technical effort required for a migration. While 'Key Technologies' suggest modern capabilities, the underlying implementation details are missing. 'Data Residency Requirements' are 'Not specified,' which could introduce unforeseen complexities and compliance hurdles during a migration. Additionally, the lack of financial stability data means the company's capacity to fund a potentially substantial migration project is unclear. The company's operations being confined to the United States could simplify some aspects of regulatory compliance during migration, but this is overshadowed by the other significant unknowns. The contradiction of 'Total Vendors: 0' versus other vendor details makes it difficult to assess the actual number of vendor relationships and potential concentration.

Compliance

8 in-scope frameworks identified; showing 3.

FinCEN — Assessment Required

The Bank Secrecy Act and FinCEN regulations impose Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements on financial institutions. Whether Capitalize is directly subject to BSA/AML requirements depends on its regulatory classification. As a facilitator of retirement account rollovers (not a money transmitter or bank), Capitalize may not be a directly regulated entity under BSA, but its IRA custodian partners are. However, if Capitalize collects and transmits funds or acts as an intermediary in financial transactions, BSA obligations could apply. Risk is Medium given the financial nature of the business.

Evidence: https://www.hicapitalize.com/, https://www.fincen.gov/resources/statutes-regulations/bank-secrecy-act, https://www.fincen.gov/financial-institutions

ISO 27001 (source) — Assessment Required

ISO 27001 certification is not legally mandated for US fintech companies but is a recognized best practice for information security management, particularly for companies handling sensitive financial data. Capitalize processes retirement account data, SSNs, and financial credentials, making robust information security management critical. The risk level is Medium because while ISO 27001 is voluntary, the absence of a formal ISMS (Information Security Management System) in a company handling this data type increases operational and reputational risk. Regulatory bodies such as the SEC and FINRA also expect robust cybersecurity frameworks from financial services firms.

Evidence: https://www.hicapitalize.com/, https://www.iso.org/isoiec-27001-information-security.html

ERISA — Assessment Required

ERISA is the foundational federal law governing US private-sector retirement plans, including 401(k) plans. Capitalize's entire business model is built around facilitating 401(k) rollovers — a core ERISA-regulated activity. As a platform that advises users on retirement account decisions and facilitates rollovers, Capitalize may be subject to ERISA fiduciary standards, particularly under the DOL's evolving fiduciary rule framework. Non-compliance with ERISA fiduciary standards can result in significant civil liability, DOL enforcement actions, and prohibited transaction penalties. This is the highest-priority regulatory risk for Capitalize.

Evidence: https://www.hicapitalize.com/, https://www.dol.gov/agencies/ebsa/laws-and-regulations/rules-and-regulations/completed-rulemaking/1210-AC02, https://www.dol.gov/sites/dolgov/files/ebsa/laws-and-regulations/rules-and-regulations/completed-rulemaking/1210-AB32/retirement-security-rule-pte-fact-sheet.pdf

Financials

Three-year financials

Financial Resilience Score: 6/10

Capitalize is a private, venture-backed US fintech operating in the attractive 401(k) rollover niche. The company has raised approximately $33–34M in cumulative equity across seed, Series A (2021, ~$12–13M), and Series B (2023, ~$19M) rounds, backed by tier-1 fintech investors including Canapi Ventures, RRE Ventures, Greycroft, and Bling Capital. This suggests continued access to growth capital, though actual revenue, EBIT, and equity balances are not publicly disclosed since the company does not file with the SEC. The business model is capital-light and referral-fee based, with IRA partners (Betterment, Fidelity, SoFi, Robinhood) paying Capitalize when consumers open new accounts. This structure supports scalable unit economics without heavy regulatory capital requirements. Operational proxy metrics are encouraging: the company reported facilitating over $1B in cumulative retirement asset rollovers as of the 2023 Series B announcement. However, the resilience score is tempered by significant risks: single-product concentration in 401(k)-to-IRA rollovers, dependency on referral fees that partners could renegotiate, undisclosed profitability and cash burn, macro sensitivity to job-change velocity and equity market levels, and competitive pressure from Meet Beagle, Pontera, Retirable, and incumbent record-keepers like Fidelity and Vanguard. Regulatory risk from potential DOL fiduciary rule tightening also poses a structural threat.

Key strengths: Cumulative equity raised of ~$33–34M across seed, Series A, and Series B rounds, Tier-1 VC backing from Canapi Ventures, RRE Ventures, Greycroft, and Bling Capital, Capital-light referral-fee business model with no consumer fees, Over $1B in cumulative retirement assets facilitated as of 2023, Structural tailwind: $600B+ annual US 401(k)-to-IRA rollover market, Diversified partnerships with major IRA providers (Betterment, Fidelity, SoFi, Robinhood), Regulatory alignment with SECURE Act 2.0 and DOL portability focus

Risk factors: Single-product concentration in 401(k)-to-IRA rollover workflow, Revenue dependency on partner referral fees that could be renegotiated or in-sourced, Undisclosed profitability and cash burn — runway cannot be independently assessed, Macro sensitivity to job-change velocity and equity market levels, Regulatory risk from potential DOL fiduciary rule tightening, Competition from Meet Beagle, Pontera, Retirable, and incumbents (Fidelity, Vanguard, Empower), Private company with no public financial disclosure

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report