GlobalX

Australia · www.globalx.com.au · 29 vendors

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 1 category; runs on 29 sub-vendors.

Insights

Last updated 2026-08-02 · revision 2

29 direct vendors, 272 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

GlobalX exhibits a moderate level of migration readiness, largely due to its modern technological foundation. The adoption of cloud-based SaaS for key products and a well-documented RESTful API architecture (GlobalX API Connect with Swagger) indicates a modular and adaptable system, which is highly conducive to migration efforts. However, several critical unknowns significantly impact the readiness score. There is no specified data on data residency requirements, which are paramount for any cloud migration strategy. Financial stability data (revenue concentration, growth history) is also missing, making it difficult to assess the company's capacity to fund a substantial migration project. While the geographic diversity of vendors (9 countries for 28 services) could mitigate single-vendor lock-in, managing 28 external services from potentially many different vendors across various international jurisdictions could introduce considerable complexity, coordination challenges, and potential legal/contractual hurdles during a large-scale migration. The specific vendor lock-in risk remains 'Unknown'. Furthermore, the company operates in a complex regulatory environment (e.g., AML/CTF, PEXA, ARNECC compliance), which would necessitate meticulous planning to ensure continuous adherence throughout any migration process.

Compliance

10 in-scope frameworks identified; showing 3.

SOC 2 (source) — Assessment Required

GlobalX provides cloud-based SaaS products including Matter Centre (cloud conveyancing software), Open Practice (legal practice management), TrustOnline (trust accounting), IDSecure (identity verification), and API services. These are cloud-hosted services processing sensitive personal, financial, and legal data on behalf of clients (law firms, conveyancers, financial institutions). SOC 2 is the industry-standard assurance framework for cloud service providers, assessing security, availability, processing integrity, confidentiality, and privacy controls. GlobalX's clients — particularly financial institutions and large law firms — may contractually require SOC 2 reports as part of vendor due diligence. The absence of publicly available SOC 2 reports is a potential gap for enterprise clients. Risk is medium because while SOC 2 is not legally mandated in Australia, it is increasingly expected by enterprise customers and may be required under client contracts.

Evidence: https://globalx.com.au/software/, https://globalx.com.au/integration/api/, https://www.aicpa.org/resources/landing/system-and-organization-controls-soc-suite-of-services

Notifiable Data Breaches — Assessment Required

The NDB scheme mandates that Australian entities covered by the Privacy Act must notify the OAIC and affected individuals when an eligible data breach is likely to result in serious harm. GlobalX handles highly sensitive personal data (identity verification, financial, legal, property data) across multiple platforms and cloud services, making it a high-value target for data breaches. The company's Privacy Policy does not explicitly describe its NDB response procedures or breach notification timelines. Given the volume and sensitivity of data processed, any breach could trigger mandatory notification obligations. Failure to comply with NDB requirements can result in significant regulatory action by the OAIC.

Evidence: https://globalx.com.au/privacy-policy/, https://www.oaic.gov.au/privacy/notifiable-data-breaches

Anti-Money Laundering and Counter-Terrorism Financing Act 2006 — Partially Compliant

GlobalX explicitly offers an 'AML Accelerate' product for AML/CTF compliance, and its services include identity verification (IDSecure), property settlements, and financial information brokering — all of which are relevant to AML/CTF obligations. The company serves law firms, conveyancers, and financial institutions that are reporting entities under the AML/CTF Act. As a technology and information services provider to these entities, GlobalX may itself be a reporting entity or a designated service provider under AUSTRAC's framework. The legal and conveyancing sector is a known high-risk area for money laundering (particularly through property transactions), and AUSTRAC has been actively expanding its oversight of professional services. Non-compliance risk is high given the sector and the company's role in property settlements.

Evidence: https://globalx.com.au/software/aml-accelerate/, https://www.austrac.gov.au/business/how-comply-guidance-and-resources/guidance-resources/legal-practitioners, https://www.legislation.gov.au/Details/C2020C00025

Financials

Financial Resilience Score: 5/10

GlobalX operates from an entrenched market position as one of two dominant intermediaries connecting Australian legal, conveyancing and financial-services professionals to government registries (land titles, ASIC company search, PPSR, etc.). Switching costs are high because the platform is embedded in customer workflows, and revenue is largely composed of recurring search-transaction fees and SaaS subscriptions (Matter Centre, Open Practice, TrustOnline), producing predictable cash flows. The diversified product portfolio spans Search, Software, Property Settlements/PEXA integration, Support Services, and Integration/API offerings. However, financial resilience is materially constrained by parent-level leverage. Dye & Durham took on significant debt during 2020-2022 to fund an aggressive M&A programme (including GlobalX and UK acquisitions). Elevated interest expense and covenant pressure have been highlighted in Dye & Durham disclosures and equity analyst reports; refinancing risk indirectly affects the Australian operations. Additionally, revenue is sensitive to residential and commercial real-estate transaction volumes in Australia, which are cyclical and rate-sensitive. Regulatory and registry dependence adds further risk: government-owned registries (e.g., NSW LRS, Landgate WA, Land Use Victoria) set wholesale pricing, and PEXA is a dominant eConveyancing partner. Changes in registry pricing or new competitors could compress margins. Ownership by a TSX-listed parent provides access to capital and audit-grade disclosure, partially offsetting these risks.

Key strengths: Entrenched market position as one of two dominant Australian legal/property information intermediaries, High switching costs due to embedded workflow integration, Recurring transactional and SaaS revenue model producing predictable cash flows, Diversified product portfolio across Search, Software, Property Settlements, and Integration/API, Ownership by TSX-listed parent Dye & Durham providing capital access and audit-grade disclosure

Risk factors: Concentration on cyclical, rate-sensitive Australian property/conveyancing transaction volumes, Regulatory and registry pricing dependence (NSW LRS, Landgate WA, Land Use Victoria, PEXA), Significant parent-level leverage from Dye & Durham's 2020-2022 debt-funded M&A programme, Refinancing risk and covenant pressure at parent level, Rebrand and integration risk from GlobalX to Dye & Durham transition, Currency translation exposure (AUD revenues translated into CAD for consolidated reporting)

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report