Dun & Bradstreet, Inc. Due Diligence

Run due diligence on Dun & Bradstreet, Inc.: check compliance and get alerts when suppliers or ownership change.

United States · owned by Independent (United States) · dnb.com · 54 vendors

Dun & Bradstreet is a global provider of business data, analytics, and insights, maintaining records for over 650 million organizations across more than 250 markets worldwide. The company delivers verified business intelligence to help enterprises grow revenue, manage risk, reduce credit exposure, and manage global supply chains. Its flagship D&B Commercial Graph and D-U-N-S Number system are widely used standards for business identity and commercial decision-making.

Resilience scores

Technology vendors

Insights

Last updated 2026-10-11 · revision 2

54 direct vendors, 346 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 10/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Dun & Bradstreet exhibits exceptionally high migration readiness. Their internal tech stack is already heavily invested in modern, cloud-native technologies, including multi-cloud deployments across AWS, Azure, and GCP, alongside cloud data warehouses like Snowflake, Databricks, and Google BigQuery. The extensive use of REST APIs, graph databases, and integration of Generative AI/LLM technologies (ChatD&B, D&B.AI) signifies a highly modular and adaptable architecture, which is ideal for seamless migration and continuous evolution. The company's established expertise in navigating a complex global regulatory environment (GDPR, CCPA, SOC 2 Type II, ISO 27001, NIS2) means they have robust processes and knowledge to manage compliance during any migration efforts. Crucially, D&B's ability to offer data hosting in various regions to meet client-specific data residency requirements demonstrates a pre-existing distributed infrastructure and operational maturity in handling data location constraints, which is a significant advantage for large-scale migrations. Financially, their strong revenue and growth provide the necessary resources to fund and execute substantial migration projects. Finally, the low vendor lock-in risk, with 28 diverse vendors across 6 countries, ensures flexibility and reduces dependencies, making it easier to transition or integrate new services and platforms during a migration. The company's current state suggests they are already in a continuous state of digital transformation and migration.

Compliance

10 in-scope frameworks identified; showing 3.

FTC Act Section 5 — Adverse finding

As a major provider of business credit reporting services in the US, Dun & Bradstreet's marketing and operational practices fall directly under the FTC's jurisdiction to prevent unfair and deceptive trade practices.

Evidence: https://www.ftc.gov/news-events/news/press-releases/2022/04/federal-trade-commission-finalizes-order-against-dun-bradstreet-deceiving-businesses-failing-update, https://www.allaboutadvertisinglaw.com/2025/10/dun-bradstreet-faces-5-7m-ftc-penalty-for-violating-compliance-order-and-misleading-small-businesses.html, https://www.ftc.gov/news-events/news/press-releases/2025/09/dun-bradstreet-agrees-pay-57-million-resolve-alleged-violations-ftc-order, https://www.justice.gov/opa/pr/dun-bradstreet-pay-57m-resolve-alleged-violations-federal-trade-commission-order, https://www.sealpath.com/blog/data-security-regulations-financial-services/, https://complianceconcourse.willkie.com/resources/privacy-and-cybersecurity-us-state-data-broker-laws/

GDPR (source) — Evidence found

Dun & Bradstreet has numerous offices in the EU/EEA, processes personal data of EU residents, and offers services to businesses in the EU, making GDPR directly applicable.

Evidence: https://www.dnb.co.uk/utility-pages/privacy-policy.html, https://www.dnb.co.uk/about/choose-your-country.html, https://www.facebook.com/DunBradstreetEurope/, https://www.dnb.co.uk/utility-pages/customer-privacy-notice.html, https://www.dnb.co.uk/content/dam/web/int/Miscellaneous/files/DPA.pdf, https://www.law.kuleuven.be/ai-summer-school/blogpost/Blogposts/dun-bradstreet-a-pyrrhic-victory-for-the-contestation-of-ai-under-the-gdpr

ISO 27001 (source) — Evidence found

As a global data provider, particularly with significant operations in the UK and Europe, ISO 27001 certification is a standard expectation from customers to demonstrate a robust information security management system (ISMS).

Evidence: https://www.dnb.co.uk/about/accreditations.html, https://www.dnb.co.uk/why-dnb/our-data.html, https://www.dnb.co.uk/utility-pages/policies-codes-of-conduct.html, https://www.dnb.co.uk/content/dam/web/company/about/esg/reports/DnB_Global_ESG_Report_2024.pdf

Financials

Three-year financials

Financial Resilience Score: 5/10

Dun & Bradstreet exhibits a mixed resilience profile. On the positive side, the business model is highly recurring with a 96% annual revenue retention rate, a diversified client base (no single client >5% of revenue; top 50 ~25%), and significant scale advantages from the proprietary D-U-N-S identifier and Data Cloud covering ~600 million organisations. Adjusted EBITDA margins are strong at ~39%, and operating income grew 38.9% in FY2024 on modest 2.9% revenue growth, demonstrating operating leverage. Geographic diversification (~70% North America / ~30% International) provides some balance. However, the balance sheet is highly leveraged. Total debt of $3.55B at year-end 2024 generated interest expense of $263.7M, exceeding operating income of $194.8M and resulting in GAAP net losses in each of FY2022–FY2024. Following the August 2025 Clearlake take-private (financed with ~$5.5B of private credit on a ~$7.7B transaction value), leverage has likely increased further. Additional risks include ongoing FTC enforcement activity under a Consent Order running to 2042, multiple class actions, pension underfunding of ~$105M, FX exposure on ~31% of revenue, and reduced transparency as a private company. Revenue growth has also decelerated to ~3%, which was partly behind the board's acceptance of Clearlake's modest 8% takeover premium.

Key strengths: 96% annual revenue retention rate, Highly diversified customer base - no client >5% of revenue, top 50 ~25%, Adjusted EBITDA margin of ~39% with strong operating leverage, Proprietary D-U-N-S identifier and Data Cloud covering ~600M organisations, ~215,000 global clients; 17 of top 25 clients with >20-year relationships, Geographic diversification (~70% NA / ~30% International), Operating income up 38.9% in FY2024

Risk factors: High leverage: $3.55B total debt at YE2024; interest expense exceeds operating income, GAAP net losses in each of FY2022-FY2024, Further leverage increase post-Clearlake buyout (~$5.5B private credit), FTC Consent Order through 2042 and November 2024 notification of alleged violations, Multiple right-of-publicity class actions (DeBose, Batis), Pension underfunding of ~$105.1M, FX exposure on ~31% of international revenue (EUR, GBP, SEK), Decelerating revenue growth (from mid-single-digits to ~3%), Reduced transparency as privately-held company post-Aug 2025, Rising AI/data regulation (EU AI Act, PADFAA, CPRA, PIPL/DSL, DPDPA), Environmental liabilities (Gowanus Canal site)

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report