Forsta

United States · www.forsta.com · 42 vendors

Forsta is a global technology company that powers an industry-leading Experience and Research Technology Platform. It gathers and analyzes data, translating findings into actionable insights to inform decision-making and drive growth for organizations. The company's HX (Human Experience) Platform breaks down silos between Customer Experience (CX), Employee Experience (EX), and Market Research to provide a comprehensive understanding of audience experiences.

Resilience scores

Technology vendors

Services catalogue

3 services in catalogue across 1 category; runs on 42 sub-vendors.

Insights

Last updated 2026-08-11 · revision 6

42 direct vendors, 325 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Forsta exhibits a medium level of migration readiness. Its primary strengths lie in its modern core technology stack, built on Microsoft Azure and incorporating advanced AI/ML capabilities, which provides a solid, cloud-friendly foundation for potential migration. Furthermore, its strong financial position, evidenced by consistent revenue growth and future projections, indicates ample capacity to fund significant migration initiatives. However, several factors present considerable challenges. The integration of acquired legacy platforms such as 'Forsta Plus (formerly Confirmit Horizons)' and 'Research HX (formerly FocusVision)' suggests the presence of older systems that may require complex refactoring or re-platforming during migration. The company's global operations and adherence to complex regulatory environments like GDPR, coupled with specific data residency requirements (dependent on customer contracts), necessitate meticulous planning for data transfer mechanisms, storage, and compliance validation in new environments. A significant unknown is the 'Vendor Lock-in Risk.' With 52 services from vendors across multiple countries, understanding the level of dependency and the ease of switching providers is critical. High vendor lock-in could substantially impede migration efforts. Lastly, the 'Assessment Required' status for SOC2 and ISO 27001 certifications implies that achieving these might be a necessary prerequisite or a substantial component of a migration strategy, adding to project scope and timeline.

Compliance

8 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Assessment Required

ISO 27001 is the international standard for Information Security Management Systems (ISMS). Forsta's Technical and Organizational Measures document describes a comprehensive security program including encryption, access controls, penetration testing, disaster recovery, incident response, and third-party audits — all consistent with ISO 27001 requirements. However, no ISO 27001 certificate was found publicly. The risk is Medium because Forsta's security practices appear mature and aligned with ISO 27001 principles, but the absence of a public certification means the formal ISMS has not been independently verified. Enterprise clients in regulated industries (financial services, insurance) often require ISO 27001 certification.

Evidence: https://legal.forsta.com/legal/forsta-technical-and-organizational-measures/, https://legal.forsta.com/

NIS2 (source) — Assessment Required

Forsta is a US-headquartered SaaS/technology company providing customer experience, market research, and employee experience platforms. NIS2 applies to entities operating in the EU in listed sectors. Forsta has an EU establishment (Forsta AS, Norway) and serves EU clients. As a digital provider/ICT service management company with EU operations, Forsta could potentially fall under NIS2 as an 'Important Entity' in the digital providers category (online marketplaces, online search engines, or cloud computing services). However, Forsta's core offering is survey/CX/market research SaaS, which does not clearly map to the NIS2 digital infrastructure or ICT service management categories. The risk level is Low because Forsta is not in a clearly listed NIS2 essential sector (energy, transport, banking, health, etc.), and its digital services may not meet the specific NIS2 digital provider thresholds. A formal legal assessment is required to determine if Forsta's EU operations meet NIS2 thresholds.

Evidence: https://legal.forsta.com/legal/privacy-notice/, https://www.forsta.com/company/about/, https://legal.forsta.com/

HIPAA (source) — Assessment Required

Forsta is not a healthcare company, but its platform serves clients across multiple industries including insurance and financial services. Forsta's privacy notice explicitly references 'protected health information' (PHI) as defined under HIPAA (45 CFR §160.103) within its definition of personal data, indicating awareness of HIPAA obligations. As a SaaS data processor, if any of Forsta's customers are HIPAA-covered entities or business associates and use Forsta's platform to process PHI, Forsta would be a Business Associate under HIPAA and would need a Business Associate Agreement (BAA). The risk is Medium because Forsta's platform could be used by healthcare-adjacent clients, and the explicit HIPAA reference in the privacy notice suggests this is a known consideration. No public BAA template or HIPAA compliance statement was found.

Evidence: https://legal.forsta.com/legal/privacy-notice/, https://www.forsta.com/industry/insurance/

Financials

Three-year financials

Financial Resilience Score: 7/10

Forsta is a private, PE-owned technology roll-up whose standalone financials are not publicly disclosed. The most concrete financial data point is the US$6.75 billion enterprise value implied by the May 2026 announced Qualtrics acquisition of Press Ganey Forsta, which validates significant scale and enterprise value. The company benefits from well-capitalized ownership by Leonard Green & Partners and Ares Management, enabling aggressive M&A activity including the InMoment acquisition in 2025. The company demonstrates strong market positioning as a Leader in the 2025 and 2026 Gartner Magic Quadrant for Voice of the Customer Platforms and IDC MarketScape for VoC. Its blue-chip client base includes Walmart, Verizon, GM, Allianz, Microsoft, Meta, Best Buy, and Virgin Money, with 2,500+ brands across 100+ countries. The successful US$6.75 bn liquidity event to Qualtrics validates the enterprise value. However, risks include a private-equity-backed capital structure likely carrying significant leverage from multiple large acquisitions, integration risk from merging 6-8 legacy platforms, competitive intensity with Qualtrics, Medallia, SurveyMonkey, Sprinklr, and Verint, potential customer overlap/churn from consolidation, and transition risk during the 2026 Qualtrics integration.

Key strengths: US$6.75 billion enterprise value from Qualtrics acquisition (May 2026), Well-capitalized PE ownership (Leonard Green & Partners, Ares Management), Scale and platform breadth combining Confirmit, FocusVision, InMoment, Rio SEO, ReviewTrackers, Dapresy, Blue-chip client base of 2,500+ brands including Walmart, Verizon, GM, Microsoft, Meta, Leader in 2025 and 2026 Gartner Magic Quadrant for VoC Platforms, Global reach across 100+ countries with 70,000+ projects/year, Successful liquidity event validates enterprise value

Risk factors: PE-backed capital structure likely carries significant leverage, Integration risk from merging 6-8 legacy platforms, Intense competition from Qualtrics, Medallia, SurveyMonkey, Sprinklr, Verint, Customer overlap/churn risk from consolidation of multiple brands, Transition risk during Qualtrics integration in 2026, No public financial disclosure limits transparency, Interest expense pressure from acquisition-heavy strategy

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report