CareerArc

United States · www.careerarc.com · 13 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 13 sub-vendors.

Insights

Last updated 2026-08-16 · revision 2

13 direct vendors, 223 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

CareerArc's migration readiness is assessed as moderate-to-low. The company demonstrates some familiarity with cloud-based services through its use of modern SaaS platforms such as HubSpot and Zendesk. Additionally, the integration with various social media APIs (LinkedIn, Facebook, X, Instagram) suggests a modular approach to its systems, which could potentially aid in a component-based migration. However, several significant challenges and unknowns exist. The core application framework, Ruby on Rails, is not inherently cloud-native or microservices-based, which could necessitate substantial refactoring efforts for a full cloud migration. Crucially, there is a lack of data concerning the regulatory environment, data residency requirements, and financial stability (ability to fund migration), all of which are critical for planning and executing a successful migration. The "Vendor Lock-in Risk" is unknown, and while "Total Vendors: 0" is stated, the presence of "Total Services: 18" and "Vendor HQ Countries" implies a reliance on external services. The complexity of managing 18 services, potentially from various vendors, could introduce significant challenges during a migration process. The substantial gaps in critical data, combined with a core tech stack that is not explicitly cloud-native, contribute to a lower migration readiness score.

Compliance

7 in-scope frameworks identified; showing 3.

CAN-SPAM Act — Partially Compliant

CareerArc sends commercial emails to users and job seekers as part of its service. The Privacy Policy references opt-in/opt-out mechanisms for marketing communications, which aligns with CAN-SPAM requirements. However, the policy does not explicitly reference CAN-SPAM compliance, and the opt-out mechanism details are general. Risk is Low because CAN-SPAM is a relatively straightforward compliance requirement, CareerArc has opt-out mechanisms in place, and enforcement actions against SaaS HR platforms are uncommon.

Evidence: https://careerarc.com/privacy

CPRA — Partially Compliant

CareerArc is headquartered in Burbank, California, making CCPA/CPRA directly applicable. The Privacy Policy includes a 'Your California Rights' section, demonstrating awareness of California privacy law. However, the section references the older California Civil Code §1798.83 (Shine the Light law) rather than the full CCPA/CPRA framework. The policy does not include a 'Do Not Sell or Share My Personal Information' link, does not address CPRA's sensitive personal information category, and does not describe the full suite of CCPA consumer rights (right to know, right to delete, right to opt-out of sale/sharing, right to correct, right to limit use of sensitive PI). Risk is Medium because: (1) CareerArc is a California-based company subject to CCPA/CPRA; (2) the Privacy Policy appears to address only the older Shine the Light law rather than the full CCPA/CPRA; (3) enforcement by the California Privacy Protection Agency (CPPA) is active; (4) fines can reach $7,500 per intentional violation.

Evidence: https://careerarc.com/privacy, https://cppa.ca.gov/

DMCA — Compliant

CareerArc has a designated DMCA copyright agent and a documented notice-and-takedown procedure in its Terms of Service. This is a standard compliance requirement for online platforms hosting user-generated content. Risk is Low because the required compliance mechanisms are in place.

Evidence: https://careerarc.com/terms

Financials

Three-year financials

Financial Resilience Score: 5/10

CareerArc is a private LLC with no public financial disclosures, making a rigorous assessment of financial resilience impossible from primary sources. No audited revenue, EBIT, equity, or cash position data is available. Third-party estimator sites suggest annual revenue in the range of US$15–40 million, but these are modeled estimates and vary widely. Qualitative signals are mixed but lean moderately positive. The company has a ~16-year operating history since its 2009 founding, a diversified blue-chip customer base (Panera, Nintendo, Kaiser, Cognizant, Ulta, Hobby Lobby), broad integration with 80+ ATS platforms, and a recurring SaaS revenue model. A product refresh (HireSocial launch in February 2025) and new CEO (Stephen Roos, January 2025) indicate active reinvestment. Offsetting risks include complete lack of financial transparency, intense competition from LinkedIn Recruiter, Indeed, ZipRecruiter, and employee advocacy tools, exposure to cyclical hiring spend (vulnerable during hiring freezes), execution risk from CEO transition and rebrand, and no evidence of a recent large funding round to clarify growth capital position. A mid-range score reflects the balance between long operating tenure and enterprise customers versus zero visibility into financial health.

Key strengths: 16-year operating history since 2009, Blue-chip enterprise customer base (Panera, Nintendo, Kaiser, Cognizant, Ulta, Hobby Lobby), Integration with 80+ Applicant Tracking Systems, Recurring SaaS subscription revenue model, 2025 product refresh (HireSocial launch) and new CEO signal active reinvestment, Industry recognition (Stevie Awards, Built In LA Best Places to Work)

Risk factors: Zero public financial transparency (no audited financials, no SEC filings), Intense competition from LinkedIn Recruiter, Indeed, ZipRecruiter, and employee advocacy tools, Revenue tied to cyclical hiring spend (hiring freezes compress demand), CEO transition in January 2025 creates execution risk during strategic reset, Small/mid-scale vendor competing with well-capitalized incumbents, No confirmed recent funding round; growth capital position unclear

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report