Checkout.com

UK · www.checkout.com · 13 vendors

Checkout.com is a financial technology company that provides a cloud-based end-to-end payment gateway and platform. It offers payment processing services, operating as a payment gateway, acquirer, and processor for enterprise clients globally. The company's platform supports online transactions, fraud detection, identity verification, and various payment methods across numerous currencies.

Resilience scores

Disruption prediction

Checkout.com has an estimated 11% probability of disruption in the next 6 months.

8 of Checkout.com's 13 vendors monitored for disruptions.

Technology vendors

Services catalogue

16 services in catalogue across 5 categories; runs on 13 sub-vendors.

Insights

Last updated 2026-08-15 · revision 1

13 direct vendors, 190 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Checkout.com exhibits a high degree of migration readiness, largely attributable to its advanced and modern internal technology stack. The company operates on a cloud-native infrastructure with a microservices architecture, supported by multi-availability zone deployments and robust CI/CD pipelines. The presence of internal platforms for AI hosting and deployment (Arrakis) and AI workflow automation (Symphony) underscores a sophisticated and adaptable infrastructure that is well-suited for migration. Key technologies like Cloud-Native Platform Architecture, RESTful APIs, and Agentic AI Systems further indicate a flexible and modular system, minimizing technical hurdles for potential migrations. In terms of vendor relationships, while the data presents a contradiction with 'Total Vendors: 0' alongside 'Vendor HQ Countries' and 'Vendor Geographic Diversity', assuming the latter is accurate, the geographic diversity of vendor HQs (5 unique countries for 13 services) suggests that the vendor ecosystem is not overly concentrated geographically, which could simplify vendor transitions or integrations during a migration. However, significant unknowns prevent a perfect score. The 'Vendor Lock-in Risk' is explicitly stated as 'Unknown', which is a critical factor for migration planning. The lack of specific information regarding the 'Regulatory Environment' and 'Data Residency Requirements' is also a major limitation, as these factors can introduce substantial complexity and cost to any migration effort. Additionally, financial stability data (ability to fund migration) is not provided. While the technical foundation is exceptionally strong, these missing pieces introduce uncertainties that temper the overall migration readiness score.

Compliance

16 in-scope frameworks identified; showing 3.

GDPR (source) — Compliant

Checkout.com is a large-scale payment processor handling personal data (cardholder data, merchant data, employee data) across the EU/EEA and globally. GDPR compliance is mandatory and well-established given their FCA authorisation, ACPR licence in France (passported across all 28 EEA states), and ICO registration as a Data Controller (ZA071209). The risk is Medium rather than Low because: (1) the volume and sensitivity of payment data processed is extremely high; (2) cross-border data transfers (e.g., to US, Singapore, UAE, Australia) require robust transfer mechanisms (SCCs, adequacy decisions); (3) enforcement by EU DPAs against payment processors has intensified post-Schrems II; (4) any breach involving payment data would trigger mandatory 72-hour notification obligations and could result in fines up to 4% of global annual turnover. The company's ICO registration and EU licensing structure indicate active compliance management, reducing likelihood of systemic non-compliance.

Evidence: https://www.checkout.com/legal/certificates, https://www.checkout.com/legal/privacy-policy, https://ico.org.uk/ESDWebPages/Entry/ZA071209, https://trust.checkout.com/, https://www.checkout.com/legal/cookie-policy

ACPR — Compliant

ACPR authorisation is the foundation of Checkout.com's EU/EEA operations, covering 28 EEA member states via passport. The risk is High because: (1) the ACPR licence covers the entire EEA market — revocation would eliminate EU operations; (2) EU payment services regulation (PSD2/PSD3) imposes extensive obligations including Strong Customer Authentication (SCA), open banking, and safeguarding; (3) PSD3 and PSR (Payment Services Regulation) are in legislative process, requiring compliance updates; (4) each of the 28 passported states may have additional national requirements. The confirmed ACPR licence (number 17208) demonstrates active compliance.

Evidence: https://www.checkout.com/legal/certificates, https://www.regafi.fr/

CBUAE — Compliant

CBUAE licence is confirmed for Checkout MENA FZ-LLC. The risk is Medium because: (1) the UAE is a rapidly evolving regulatory environment with increasing requirements; (2) the CBUAE has been actively developing its payment services regulatory framework; (3) the confirmed licence demonstrates active compliance; (4) UAE's AML/CTF requirements are stringent given FATF monitoring.

Evidence: https://www.checkout.com/legal/certificates, https://www.centralbank.ae/

Financials

Three-year financials

Financial Resilience Score: 7/10

Checkout.com maintains a strong financial position underpinned by approximately US$1.8bn raised cumulatively across Series A-D funding rounds, with the January 2022 Series D of US$1bn at a US$40bn valuation providing multi-year runway. Founder-CEO Guillaume Pousaz has repeatedly stated the company has not required additional capital since, and retains majority control, allowing a long-term strategic horizon without near-term IPO pressure. The company's blue-chip enterprise customer base including eBay, Microsoft, Spotify, Uber, Shein, Alibaba, and others provides recurring high-volume transaction flows, while its direct regulatory licences across the UK, EU, US, UAE, Singapore, Hong Kong, and Australia reduce reliance on partner banks. However, resilience is tempered by persistent operating losses during 2021-2023 driven by heavy hiring, international expansion, and product development, with UK-entity losses reported in the US$300m+ range for 2022. The internal valuation was cut from US$40bn to approximately US$11bn in December 2022, reflecting broader fintech multiples compression. Additional risks include the loss of Binance as a major crypto client in August 2023, concentration in transaction-fee-based acquiring economics vulnerable to take-rate compression, and intense competition from Adyen, Stripe, PayPal/Braintree, Worldpay, and Fiserv. Limited public disclosure as a private company also reduces external ability to assess consolidated group resilience.

Key strengths: Approximately US$1.8bn raised cumulatively across Series A-D funding rounds, Series D of US$1bn in January 2022 providing multi-year runway, Blue-chip enterprise customer base (eBay, Microsoft, Spotify, Uber, Shein, Alibaba), Direct regulatory licences across UK, EU, US, UAE, Singapore, Hong Kong, Australia, Founder-controlled with majority stake, no near-term IPO pressure, Processed US$300bn in e-commerce payment volume in 2025, ~10x growth in processed volume over five years (2020-2025)

Risk factors: Persistent operating losses during 2021-2023 period, Valuation compression from US$40bn to ~US$11bn in December 2022, Loss of Binance as major crypto client in August 2023, Revenue concentration in transaction-fee-based acquiring economics, Intense competition from Adyen, Stripe, PayPal/Braintree, Worldpay, Fiserv, Limited public financial disclosure as a private company, Headcount reductions of ~5-10% during 2023 fintech cost cuts, Exposure to global e-commerce slowdown and take-rate compression

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report