GoTo Group, Inc.

United States · www.goto.com · 36 vendors

GoTo Technologies USA, Inc. is a software as a service (SaaS) company that provides cloud-based solutions for remote work, IT support, and unified communications. Its offerings include products for online meetings, screen sharing, secure remote access, and IT management. The company aims to simplify IT management and communications for businesses of all sizes.

Resilience scores

Disruption prediction

GoTo Group, Inc. has an estimated 11% probability of disruption in the next 6 months.

18 of GoTo Group, Inc.'s 36 vendors monitored for disruptions.

Technology vendors

Services catalogue

10 services in catalogue across 5 categories; runs on 36 sub-vendors.

Insights

Last updated 2026-08-16 · revision 2

36 direct vendors, 314 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

GoTo Group exhibits a high degree of migration readiness, primarily driven by its modern and cloud-centric technology stack. The company extensively utilizes major cloud providers like Amazon Web Services (AWS) and Microsoft Azure, indicating a significant existing cloud footprint. The adoption of containerization technologies such as Kubernetes and Docker further enhances portability and simplifies the migration of applications across different environments. Modern web frameworks like Next.js and React, coupled with a focus on cloud communications (UCaaS, CCaaS) and AI/ML, suggest an architecture that is likely microservices-oriented and highly adaptable. The use of both AWS and Azure implies a multi-cloud strategy, which inherently reduces vendor lock-in to a single cloud provider and improves flexibility for future migrations or workload distribution. However, a complete assessment of migration readiness is hampered by the lack of specific data on the regulatory environment and data residency requirements, which can significantly impact migration strategies and costs. Financial stability data (revenue concentration, growth history) is also missing, making it difficult to assess the company's capacity to fund a large-scale migration. While the multi-cloud approach mitigates some vendor lock-in, the overall "Vendor Lock-in Risk" is unknown, and the inconsistency of "Total Vendors: 0" with other vendor-related data makes a precise assessment of vendor dependencies challenging. Despite these gaps, the strong foundation in cloud-native and containerized technologies positions GoTo Group favorably for future migrations.

Compliance

10 in-scope frameworks identified; showing 3.

CPRA — Assessment Required

GoTo Group is headquartered in the United States and serves California-based consumers and businesses. As a large technology company with significant US revenue, GoTo almost certainly meets CCPA/CPRA thresholds (annual gross revenue >$25M, or processes personal information of 100,000+ consumers/households). Risk is High because: (1) CPRA enforcement by the California Privacy Protection Agency (CPPA) is active; (2) GoTo processes large volumes of California consumer data through its communications and IT platforms; (3) CPRA introduced enhanced obligations including data minimization, purpose limitation, and sensitive personal information rights; (4) fines up to $7,500 per intentional violation.

Evidence: https://www.goto.com/company/privacy-policy, https://www.goto.com/company/legal

ISO 27001 (source) — Assessment Required

GoTo Group is a large enterprise SaaS provider with global operations and enterprise customers in regulated industries. ISO 27001 certification is commonly expected by EU and international enterprise customers. Risk is Medium because: (1) it is unclear from publicly available sources whether GoTo currently holds an active ISO 27001 certification (the company's predecessor LogMeIn held ISO 27001); (2) absence of ISO 27001 could be a commercial risk for EU/international enterprise sales; (3) ISO 27001 non-certification is not a legal violation but represents a reputational and competitive risk; (4) the company's trust documentation references security frameworks but ISO 27001 certification status requires verification.

Evidence: https://www.goto.com/trust, https://www.goto.com/trust/security

SOC 2 (source) — Compliant

GoTo Group is a major cloud SaaS provider serving enterprise customers globally, including regulated industries (healthcare, government, financial services). SOC 2 compliance is a standard market requirement for enterprise SaaS vendors. Risk is Low because: (1) GoTo publicly references SOC 2 Type II certification in its trust documentation; (2) SOC 2 is a voluntary framework but non-compliance would be a significant commercial barrier for enterprise sales; (3) the company's scale and enterprise customer base (Deloitte, Lenovo, Tenet Health) strongly indicates maintained SOC 2 certification; (4) SOC 2 reports are typically renewed annually. The primary residual risk is ensuring continuous compliance as products evolve.

Evidence: https://www.goto.com/trust, https://www.goto.com/trust/security

Financials

Three-year financials

Financial Resilience Score: 4/10

GoTo Group operates a recurring subscription SaaS model with typically high gross margins (70-80%), a diversified customer base of over 800,000 customers across 190+ countries, and well-known brands including GoToMeeting, GoToWebinar, and Rescue. The company benefits from sponsor backing by Francisco Partners and Elliott Management, providing access to capital and restructuring expertise. Adjusted EBITDA has been estimated at approximately $400-500 million historically per rating agency commentary. However, the company faces significant financial resilience challenges. Rating agencies have repeatedly flagged high leverage with over $2 billion of secured debt and mid-to-high single-digit debt/EBITDA ratios. In 2024, GoTo executed a distressed debt exchange/uptier transaction that S&P treated as a selective default event, signaling material stress in the capital structure. Revenue has been declining modestly since the take-private, and the company faces intense competitive pressure from Microsoft Teams, Zoom, RingCentral, and others in its core UCaaS and meetings markets. Additional risks include the 2024 separation of LastPass (removing a recognized cybersecurity brand), the reputational damage from LastPass's 2022 security breaches, multiple rounds of layoffs in 2022-2023, and limited transparency due to private ownership. Combined, these factors point to a stressed but sponsor-supported credit profile.

Key strengths: Recurring SaaS subscription revenue with high gross margins (70-80%), Diversified customer base of 800,000+ customers across 190+ countries, Two distinct product pillars: GoTo Connect (UCaaS) and LogMeIn (IT management), Well-known brands (GoToMeeting, GoToWebinar, Rescue), Sponsor backing from Francisco Partners and Elliott Management, Adjusted EBITDA estimated at ~$400M annually

Risk factors: High financial leverage with over $2 billion of secured debt, 2024 distressed debt exchange treated as selective default by S&P, Declining revenue trend post take-private, Intense competition from Microsoft Teams, Zoom, RingCentral, 8x8, Dialpad, LastPass separation in 2024 removed cybersecurity brand from portfolio, LastPass 2022 security breaches damaged brand equity, Multiple rounds of layoffs in 2022 and 2023, Limited transparency due to private ownership, FX exposure from international customer base, Thin free cash flow coverage flagged by rating agencies

Revenue by geography

Revenue by product/service

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report