GitHub, Inc. Due Diligence
Run due diligence on GitHub, Inc.: check incident history and compliance and get alerts when suppliers or ownership change.
United States · owned by Microsoft Corporation (United States) · github.com · 54 vendors
GitHub is a developer platform that allows developers to create, store, manage and share their code. It uses Git, a version control system, to track changes in source code during software development.
Resilience scores
- Digital Sovereignty: 87
- Digital Resilience: 4
- Financial Resilience: 9
Disruption prediction
GitHub, Inc.: 13 critical incidents expected in the next three months, based on its recorded incident history.
Forecast estimates are rounded up to whole numbers.
Partial disruption reported (its status page, as of 2026-11-09 23:55 UTC): Degraded availability for GPT-5.3 Codex and GPT-5.6 models in Copilot
29 of GitHub, Inc.'s 54 vendors have incident tracking.
Technology vendors
- Adobe Inc. — Technology — United States
- Calendly — Technology — United States
- New Relic, Inc. — Technology — United States
- and 51 more
Services catalogue
26 services in catalogue across 9 categories; runs on 54 sub-vendors.
- Umbraco Cloud, Heartcore, Support
- Code Review
- Web Font Loader
Insights
Last updated 2026-11-04 · revision 29
54 direct vendors, 297 subvendors
Direct vendors by controlling owner country (sample)
- Canada: 1
- Australia: 1
- Sweden: 2
Subvendors by controlling owner country (sample)
- France: 10
- Japan: 4
- Ireland: 1
Compliance
10 in-scope frameworks identified; showing 3.
GDPR (source) — Evidence found
Evidence: https://docs.github.com/en/site-policy/privacy-policies/github-privacy-statement, https://docs.github.com/en/site-policy/privacy-policies/github-data-protection-agreement, https://github.com/trust-center/privacy, https://github.com/trust-center, https://docs.github.com/en/site-policy/privacy-policies/github-privacy-statement#how-github-secures-your-information
EU AI Act (source) — No public evidence
Evidence: https://github.com/trust-center, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32024R1689, https://www.microsoft.com/en-us/corporate-responsibility/responsible-ai-transparency-report, https://copilot.github.trust.page
SOC 2 (source) — Evidence found
Evidence: https://github.com/trust-center, https://ghec.github.trust.page/, https://docs.github.com/en/enterprise-cloud@latest/admin/overview/about-github-enterprise-cloud
Financials
Three-year financials
- 2024: revenue $2.0B
- 2023: revenue $2.0B
- 2022: revenue $1.0B
Financial Resilience Score: 9/10
GitHub's financial resilience is effectively equivalent to that of its parent company, Microsoft Corporation (AA+/Aaa credit rating), which acquired it in October 2018 for $7.5 billion in stock. As a wholly-owned subsidiary, GitHub has access to virtually unlimited capital, Microsoft's Azure cloud infrastructure, and its enterprise sales channels. This backing insulates GitHub from typical standalone SaaS liquidity or solvency risks. Operationally, GitHub holds a dominant market position as the de facto standard for source code hosting, with over 100 million developers on the platform and more than 90% of the Fortune 100 as customers. Its revenue has scaled from approximately $140M in 2016 to a $2B+ run rate in early 2024, representing an extraordinary ~40% CAGR. GitHub Copilot has emerged as one of the fastest-scaling SaaS products in history, driving over 40% of GitHub's revenue growth. However, standalone profitability is not disclosed and is widely believed to be under pressure due to high LLM inference costs. Competitive threats from Cursor, Anthropic Claude Code, Amazon Q Developer, and Google Gemini Code Assist are intensifying rapidly in the AI coding assistant space. Regulatory risks (Copilot copyright litigation, EU AI Act) and model supplier dependency (historically OpenAI) also warrant monitoring, though none threaten resilience given Microsoft's backing.
Key strengths: Wholly-owned subsidiary of Microsoft (AA+/Aaa credit), Dominant market position with 100M+ developers, 90%+ of Fortune 100 as customers, GitHub Copilot fastest-scaling SaaS product, $2B+ revenue run rate as of early 2024, ~40% revenue CAGR over 8 years, Diversified subscription revenue mix (Enterprise, Copilot, GHAS, Actions), Access to Azure infrastructure and Microsoft enterprise channels
Risk factors: Intensifying competition from Cursor, Claude Code, Amazon Q, Gemini Code Assist, High LLM inference costs pressuring Copilot margins, Historical dependency on OpenAI models (supplier/pricing risk), Ongoing Copilot copyright litigation (Doe v. GitHub), EU AI Act compliance and export control restrictions, Sensitivity to tech-sector hiring cycles, No disclosed standalone balance sheet, Standalone profitability believed to be under pressure
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.