Frames

United States · getframes.io · 20 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 20 sub-vendors.

Insights

Last updated 2026-09-12 · revision 2

20 direct vendors, 206 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Frames demonstrates low-to-medium migration readiness, primarily due to its current technology stack and significant data gaps. The internal tech stack, heavily reliant on WordPress, Easy Digital Downloads, Bricks Builder, and Automatic.css, represents a traditional web application architecture. This is not inherently cloud-native, containerized, or microservices-based, which typically characterize high migration readiness. The specific reliance on Bricks Builder and Automatic.css suggests potential technical lock-in to the WordPress ecosystem, which could complicate migration to a different platform or a more modern, decoupled architecture, potentially requiring significant re-development or re-platforming efforts. A major challenge is the complete lack of financial data (revenue concentration, growth history), which makes it impossible to assess the company's financial capacity to fund a potentially complex and costly migration project. Furthermore, the "Vendor Lock-in Risk: Unknown" is a critical impediment to assessing migration complexity, especially given the "Total Services: 21" which implies numerous underlying dependencies that would need to be untangled. While no specific data residency requirements or complex regulatory environments are specified, this absence also means potential future requirements are unknown and could introduce unforeseen complexities. The contradictory "Total Vendors: 0" data, if interpreted as a lack of direct contractual vendor lock-in, could be a minor advantage, but the technical dependencies remain.

Compliance

4 in-scope frameworks identified; showing 3.

PCI DSS (source) — Assessment Required

Digital Gravy sells Frames licenses online and therefore processes cardholder data. They are contractually obligated by payment card brands to comply with the Payment Card Industry Data Security Standard (PCI DSS).

Failure to comply with PCI DSS for their own e-commerce transactions could result in fines and loss of ability to process payments. The risk is medium as they likely use a compliant third-party processor, but they still have obligations.

Evidence: https://www.scalecomputing.com/blog/what-is-pci-compliance-an-essential-guide-to-understanding-pci-dss-requirements, https://gravitypayments.com/support-library/account-management/pci-dss/, https://getframes.io/pricing/, https://getframes.io/account/, https://sprinto.com/blog/pci-for-saas/, https://www.zenskar.com/blog/pci-compliance-for-saas

ADA — Assessment Required

The Americans with Disabilities Act (ADA) applies to websites as places of public accommodation. Frames is a tool used to build websites, so its output must be capable of being ADA compliant.

As a tool for building websites, non-compliance could expose Frames' customers to litigation. The risk for Digital Gravy itself is medium as they are a product provider, but customer lawsuits could have reputational and financial impact.

Evidence: https://getframes.io/frames-process/, https://getframes.io/how-is-frames-different/, https://www.womentech.net/how-to/what-legal-requirements-must-tech-companies-meet-ensure-accessibility, https://www.onwardaccessibility.com/blog/2025/05/us-digital-accessibility-laws/, https://www.accountablehq.com/post/beginner-s-guide-to-ada-compliance-for-saas-companies, https://www.q4inc.com/resource-center/blog/website-accessibility-in-ir-understanding-ada

GDPR (source) — Assessment Required

The GDPR applies to companies that process the personal data of individuals in the EU. As Digital Gravy sells Frames online, it is possible they have customers in the EU, which would bring them under the scope of GDPR.

Given the company's small size and US focus, the number of EU customers is likely low, reducing the risk of significant fines. However, non-compliance could still lead to penalties and reputational damage.

Financials

Three-year financials

Financial Resilience Score: 6/10

Frames, operating as a product line under Digital Gravy, appears to be a small, bootstrapped, founder-led private SaaS/digital-goods business with a recurring subscription revenue model ($69-$99/year). The business benefits from predictable annual cash flow, a low operating cost base (fully digital product, no inventory, no COGS beyond hosting/software infrastructure), and a lean team of approximately 10 people. Product ecosystem lock-in (Frames requires an Automatic.css license) supports cross-sell and customer LTV, while founder Kevin Geary's substantial YouTube following provides low-cost customer acquisition. However, no audited financials, revenue figures, or equity data are publicly disclosed, limiting the ability to assess true financial strength. The business faces meaningful concentration risks: heavy dependency on the Bricks Builder plugin for WordPress, key-person concentration around founder Kevin Geary, a small team with limited redundancy, and potential cannibalization from Digital Gravy's newer Etch product. There is no visible external capital buffer (no disclosed equity raises or credit lines) to absorb demand shocks. The overall profile suggests a viable but vulnerable small business with moderate resilience.

Key strengths: Recurring annual subscription revenue model ($69-$99/year) providing predictable cash flow, Low operating cost base with fully digital product and no physical inventory, Bootstrapped/founder-led with no disclosed debt obligations, Product ecosystem lock-in (Frames requires Automatic.css license), Strong community/brand via Kevin Geary's YouTube following enables low-cost customer acquisition, Lean distributed international team (~10 people)

Risk factors: Platform-dependency risk on Bricks Builder plugin and WordPress ecosystem, Key-person concentration around founder Kevin Geary, Small team (~10 people) with limited redundancy in development and support, Potential cannibalization from Digital Gravy's newer Etch product, Low switching costs at $69-$99/year price point with competitive template libraries, No visible external capital buffer or credit lines to absorb demand shocks, No public financial disclosures limiting transparency

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report