Convert Insights

United States · www.convert.com · 17 vendors

Convert Experiences is a privacy-first A/B testing and personalization platform. It helps growth marketers, e-commerce teams, and CRO agencies run reliable experiments to optimize website conversions and user experience. The platform offers tools for A/B testing, split testing, multivariate testing, and personalization.

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 1 category; runs on 17 sub-vendors.

Insights

Last updated 2026-08-15 · revision 1

17 direct vendors, 249 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Convert Insights exhibits high migration readiness, primarily driven by its modern and cloud-native oriented tech stack. The extensive use of Amazon Web Services (AWS), coupled with practices like Infrastructure as Code (IaC), container orchestration, and CI/CD pipelines, indicates a highly automated, portable, and flexible infrastructure that is well-suited for migration to new environments or cloud platforms. The company's own product, Convert Experiences API, being a secure, token-based REST API, also suggests an API-first approach that facilitates integrations and data portability. Proactive engagement with compliance, evidenced by SOC 2 compliance management (Sprinto) and GDPR-compliant login infrastructure (Hetzner), suggests a structured approach to regulatory requirements that would aid in navigating compliance during a migration. While 'Vendor Lock-in Risk: Unknown' is noted, the presence of multiple named vendors (e.g., AWS, Hetzner, Akamai, Vimeo, Sprinto, Asana, Slack, CharlieHR) and geographic diversity in vendor origins (4-5 countries) suggests a lower risk of monolithic vendor lock-in compared to a company with very few, highly concentrated vendors. The main challenges for migration readiness stem from the lack of data on financial stability (revenue concentration, growth history), which makes it impossible to assess the company's capacity to fund a potentially costly migration. Furthermore, 'Data Residency Requirements: Not specified' means potential constraints could emerge and complicate migration planning if not clarified early.

Compliance

9 in-scope frameworks identified; showing 3.

CCPA — Compliant

Convert Insights explicitly claims CCPA compliance and displays a CCPA Compliant badge on its website. The company states it was well-positioned for CCPA when it was signed due to prior GDPR compliance work. The company's privacy-by-design approach (no personal data storage beyond what is required for service operation, first-party cookies only, opt-out mechanisms) aligns well with CCPA requirements. The risk level is Low because the company has proactively addressed CCPA requirements and its minimal data collection approach reduces exposure. The company also provides an opt-out mechanism at https://www.convert.com/opt-out/ and honors Do Not Track (DNT) headers.

Evidence: https://www.convert.com/privacy/, https://www.convert.com/security/, https://www.convert.com/opt-out/, https://www.convert.com/

SOC 2 (source) — Compliant

Convert Insights has achieved SOC 2 Type 2 attestation, which is the highest level of SOC 2 compliance (Type 2 covers a period of time, not just a point-in-time assessment). The company displays a SOC 2 Type 2 Compliant badge prominently on its website and security page, and states compliance is managed through Sprinto (a compliance automation platform). SOC 2 Type 2 is directly relevant to Convert as a cloud SaaS provider, as it demonstrates that security, availability, processing integrity, confidentiality, and privacy controls have been independently assessed and found effective over a sustained period. The risk level is Low because the company has achieved the most rigorous level of SOC 2 attestation. The primary residual risk is that the SOC 2 report itself is not publicly available for review, and the currency of the attestation (renewal date) is not disclosed.

Evidence: https://www.convert.com/security/, https://www.convert.com/

BDSG — Compliant

Convert Insights explicitly claims compliance with TTDSG (Telekommunikation-Telemedien-Datenschutz-Gesetz) and BDSG (Bundesdatenschutzgesetz) on its homepage. This is particularly relevant given that the company stores all data on servers in Frankfurt, Germany, and serves German businesses and their website visitors. TTDSG governs the use of cookies and tracking technologies in Germany, while BDSG implements GDPR at the national level in Germany. The company's first-party cookie approach and privacy-by-design architecture align with TTDSG requirements. The risk level is Low because the company has explicitly addressed these German-specific regulations and its technical architecture (first-party cookies, no personal data storage) minimizes compliance risk.

Evidence: https://www.convert.com/, https://www.convert.com/privacy/, https://www.convert.com/security/

Financials

Three-year financials

Financial Resilience Score: 7/10

Convert Insights, Inc. appears to be a durable, bootstrapped, profitable niche SaaS player with approximately 15 years of continuous operation. The company operates a recurring subscription revenue model with pricing starting at US$399/month, which typically produces high gross margins and predictable cash flow. As a bootstrapped/self-funded company with no publicly disclosed VC funding, its continued existence and product investment over 15 years strongly implies profitability and positive cash flow generation. Founder-CEO Dennis van der Heijden remains in place, suggesting owner-operated stability. The company benefits from a diversified, distributed workforce across 20+ countries which lowers geographic salary costs versus US/EU-only competitors. Strong enterprise certifications (SOC 2 Type 2, ISO 27001, HIPAA-ready, GDPR/CCPA compliant) support enterprise sales. Third-party estimates place annual revenue in the ~US$10–20 million range, though these are not audited figures. The company's self-reported donation of 10% of top-line revenue to social/environmental causes further implies meaningful revenue scale. Risks include small scale in a consolidating market against much larger venture-funded players (Optimizely, AB Tasty, VWO, LaunchDarkly), pricing pressure risk post-Google Optimize sunset, no disclosed external funding limiting runway for large R&D or M&A moves, and concentration in the CRO/experimentation niche as a single-product-line company. The small team of ~61 people relative to the enterprise segment they're targeting and opaque financials present additional concerns for procurement/vendor due-diligence assessments.

Key strengths: Long operating history (~15 years) with stable installed base of ~40,000 sites optimized, Recurring SaaS subscription revenue model with high gross margins and predictable cash flow, Bootstrapped/self-funded profile with no publicly disclosed VC funding, suggesting profitability, Founder-CEO Dennis van der Heijden remains in place, providing owner-operated stability, Diversified, distributed workforce across 20+ countries lowering geographic salary costs, Strong enterprise certifications (SOC 2 Type 2, ISO 27001, HIPAA-ready, GDPR/CCPA), Clear niche positioning as affordable, privacy-first, EU-hosted alternative to Optimizely and VWO, Consistent G2 recognition as High Performer through 2024-2026

Risk factors: Small scale in a consolidating market against much larger venture-funded competitors, Post-Google Optimize sunset (2023) attracted new entrants creating pricing pressure, No disclosed external funding limits runway for large R&D or M&A moves, Concentration in CRO/experimentation niche as single-product-line company, Small team (~61 people) relative to enterprise segment being targeted, Opaque financials present risk for procurement/vendor due-diligence assessments, Revenue exposure if experimentation budgets are cut during marketing recession

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report