eBay Inc.
United States · www.ebay.com · 32 vendors
eBay Inc. is an American multinational e-commerce company that operates an online marketplace, connecting millions of buyers and sellers globally. It facilitates consumer-to-consumer and business-to-consumer sales through online auctions and fixed-price listings.
Resilience scores
- Digital Sovereignty: 72
- Digital Resilience: 9
- Financial Resilience: 8
Technology vendors
- Adobe Inc. — Technology — United States
- Quantum Metric — United States
- Stripe, Inc. — Financial Services — United States
- and 32 more
Services catalogue
1 service in catalogue across 1 category; runs on 32 sub-vendors.
- Affiliate marketing
Insights
Last updated 2026-09-13 · revision 5
32 direct vendors, 337 subvendors
Direct vendors by controlling owner country (sample)
- Netherlands: 1
- Australia: 2
- Czech Republic: 1
Subvendors by controlling owner country (sample)
- Switzerland: 1
- China: 13
- Brazil: 1
Migration Readiness: 10/10
Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.
eBay Inc. exhibits exceptionally high migration readiness. Its internal tech stack is highly aligned with modern cloud-native principles, featuring extensive use of Kubernetes, Docker, microservices architecture, and a multi-cloud strategy (GCP, Azure). This indicates a modular, portable, and scalable infrastructure, ideal for seamless migration to or between cloud environments. The company's strong financial stability, with consistent revenues around USD 10 billion, provides ample resources to fund any significant migration initiatives. A critical factor contributing to high readiness is the stated "Total Vendors: 0", which suggests minimal critical vendor lock-in. This absence of significant external vendor dependencies greatly simplifies migration planning and execution by removing complex contract negotiations, data egress challenges, and technology compatibility issues often associated with third-party services. While specific data residency requirements and the regulatory environment were not provided, based on the available technical and organizational data, eBay is extremely well-positioned for any large-scale digital migration.
Compliance
14 in-scope frameworks identified; showing 3.
GDPR (source) — Partially Compliant
eBay operates one of the world's largest e-commerce marketplaces and processes personal data of hundreds of millions of EU/EEA residents (buyers, sellers, employees). The scale of data processing creates inherently elevated risk. eBay has faced regulatory scrutiny in Europe, including a €1.1 million fine from the Hamburg Data Protection Authority in 2020 related to data subject rights. The complexity of cross-border data transfers (EU-US), reliance on Standard Contractual Clauses post-Schrems II, and the breadth of personal data processed (financial, behavioral, location, identity) all elevate risk. GDPR fines can reach €20 million or 4% of global annual turnover — for eBay (~$10B+ revenue), this represents a potential exposure exceeding $400M. Enforcement by EU DPAs against large US tech/e-commerce platforms has intensified since 2021.
Evidence: https://www.ebay.com/help/policies/member-behaviour-policies/user-privacy-notice-privacy-policy?id=4260, https://www.ebayinc.com/company/privacy-center/, https://www.ebayinc.com/company/privacy-center/privacy-notice/state-privacy-disclosures/, https://www.ebay.com/help/policies/member-behaviour-policies/ebay-cookie-notice?id=4267, https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001065088&type=10-K&dateb=&owner=include&count=10
PCI DSS (source) — Compliant
eBay processes billions of dollars in payment card transactions annually through its marketplace platform. PCI DSS compliance is mandatory for any entity that stores, processes, or transmits cardholder data. As a Level 1 merchant (processing over 6 million card transactions per year), eBay is subject to the most stringent PCI DSS requirements including annual on-site assessments by a Qualified Security Assessor (QSA). Risk is High because the volume and value of payment card data processed by eBay makes it a high-value target for cybercriminals, and any breach could result in significant fines, card brand penalties, and reputational damage. The 2014 data breach (though not specifically payment card data) demonstrated the consequences of security failures.
Evidence: https://www.pcisecuritystandards.org/, https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001065088&type=10-K&dateb=&owner=include&count=10, https://pages.ebay.com/payment/2.0/terms.html
COPPA — Compliant
COPPA applies to online services directed to children under 13 or that have actual knowledge of collecting personal information from children under 13. eBay's terms of service require users to be 18+ (or 13+ with parental consent in some jurisdictions), and eBay does not direct its services to children. Risk is Medium because eBay's open marketplace model means minors may attempt to use the platform, and the FTC actively enforces COPPA. Non-compliance fines can reach $51,744 per violation per day.
Evidence: https://www.ebay.com/help/policies/member-behaviour-policies/user-agreement?id=4259, https://www.ebay.com/help/policies/member-behaviour-policies/user-privacy-notice-privacy-policy?id=4260, https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa
Financials
Three-year financials
- 2025: revenue USD 11.1B, EBIT USD 2.28B, equity USD 4.62B
- 2024: revenue USD 10.3B, EBIT USD 2.32B, equity USD 5.16B
- 2023: revenue USD 10.1B, EBIT USD 1.94B, equity USD 6.40B
Financial Resilience Score: 8/10
eBay demonstrates strong financial resilience despite stagnant top-line growth. The company operates a high-margin, asset-light platform with operating margins consistently above 20% and generates approximately US$1.5-2.0 billion in free cash flow annually. Its balance sheet is robust, with positive equity of ~US$3.35 billion at end of FY2024, approximately US$6 billion in cash and short-term investments, and additional long-term equity stakes providing further flexibility. The transactional marketplace model produces stable, recurring cash flows even when GMV is flat. Growing advertising monetization (Promoted Listings running at ~2.0-2.1% of GMV in FY2024, generating over US$1 billion annualized and growing double-digits) and focus-category strategy in luxury watches, sneakers, collectibles, and refurbished goods are enhancing take rates and unit economics. The company consistently returns capital via multi-billion-dollar buybacks and a growing dividend. However, resilience is tempered by structural challenges: revenue growth is stuck in low single digits, GMV is essentially flat, active buyer count is stagnant or declining, and competition from Amazon, Shopify, Temu, Shein, and Facebook Marketplace is intense. FX exposure (roughly half of revenue is non-US) and volatility from mark-to-market equity investments (which drove a reported net loss in FY2023 despite positive operating income) add earnings variability.
Key strengths: Operating margins consistently above 20%, Free cash flow of ~US$1.5-2.0 billion annually, ~US$6 billion cash and short-term investments at year-end 2024, Recurring transactional revenue model with stable cash flows, Growing high-margin advertising revenue (>US$1B annualized), Focus category strategy driving above-average GMV growth, Consistent multi-billion-dollar share repurchases and growing dividend, Positive stockholders' equity growing to US$3.35B in FY2024
Risk factors: Stagnant top line and flat GMV growth, Intense competition from Amazon, Shopify, Etsy, Temu, Shein, Facebook Marketplace, Marketplace maturity with flat/declining active buyer growth, Macro/consumer discretionary exposure in collectibles, motors, luxury, FX exposure with ~half of revenue from outside the US, Equity investment volatility (Adevinta mark-to-market swings), Regulatory risks: digital services taxes, EU DSA, marketplace-facilitator rules, Trust & safety / counterfeit and fraud risk requiring ongoing investment
Revenue by geography
- United States: 52%
- International: 48%
Revenue by product/service
- Net Transaction Revenues: 92%
- Marketing Services and Other Revenues: 8%
Workforce by country
- International: 5550
- United States: 5250
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.