Handy

handy.com · 15 vendors

Resilience scores

Technology vendors

Insights

Last updated 2026-08-03 · revision 2

15 direct vendors, 217 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Handy exhibits a medium level of migration readiness, largely due to its existing cloud adoption but tempered by significant data gaps and potential architectural considerations. A key strength is the company's current use of AWS, indicating prior experience and investment in cloud infrastructure, which provides a solid foundation for further migration or optimization efforts. The inclusion of modern components like React, PostgreSQL, and Redis in its tech stack also bodes well for compatibility with cloud-native environments. However, several factors present challenges to migration readiness. There is no explicit mention of containerization or microservices architecture, and while Ruby on Rails is a modern framework, it can be implemented in a monolithic fashion, potentially requiring refactoring for a fully cloud-native, microservices-based migration. A major impediment to planning is the complete lack of data on the regulatory environment and specific data residency requirements, which are critical for compliance and architectural decisions during migration. Similarly, the absence of financial stability data (revenue concentration, growth history) makes it difficult to assess the company's capacity to fund a potentially costly migration. The 'Vendor Lock-in Risk' is unknown, and while 17 services are provided by vendors, the exact number of unique vendors is not specified, making it challenging to accurately gauge vendor concentration and potential lock-in complexities that could impact migration flexibility. The geographic diversity of vendor HQs (US, Denmark, Ireland) is a positive, but the overall vendor landscape's impact on migration remains unclear due to missing details.

Compliance

10 in-scope frameworks identified; showing 3.

PCI DSS (source) — Assessment Required

Handy processes payment card transactions for home services bookings across the US, UK, and Canada. While the privacy policy states that payment information is transmitted directly to a third-party payment processor (not received by Handy directly), Handy still has PCI DSS obligations as a merchant that accepts card payments. The level of PCI DSS compliance required depends on transaction volume and how card data flows through Handy's systems. Risk is Medium because Handy uses a third-party payment processor (reducing direct card data exposure) but still has merchant-level PCI DSS obligations including SAQ completion, network security, and vendor management.

Evidence: https://www.handy.com/privacy, https://www.pcisecuritystandards.org/, https://stripe.com/docs/security

GDPR (source) — Assessment Required

Handy operates in the United Kingdom (London is explicitly listed as a service location) and processes personal data of UK/EEA residents. While the UK has its own UK GDPR post-Brexit, the EU GDPR may still apply if Handy processes data of EU/EEA residents (e.g., EU nationals using services in the UK or accessing the platform from EU countries). The privacy policy is US-centric (Angi, Inc. based in Indianapolis, IN) and references only US state privacy rights (California, Colorado, Connecticut, Virginia, Nevada). There is no explicit GDPR compliance statement, no mention of a Data Protection Officer (DPO), no EU/EEA-specific data subject rights section, and no reference to lawful bases for processing under GDPR. The 'International Visitors' section merely states data may be transferred to the US without referencing GDPR-compliant transfer mechanisms (e.g., Standard Contractual Clauses). This represents a meaningful compliance gap given UK operations. Risk is Medium rather than High because Handy's primary market is the US/Canada, and UK operations appear to be a secondary market; however, the absence of GDPR/UK GDPR compliance documentation is a notable gap.

Evidence: https://www.handy.com/privacy, https://www.handy.com/about, https://en.wikipedia.org/wiki/Handy_(company), https://www.handy.com/services/home-cleaning/london, https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/

ISO 27001 (source) — Assessment Required

ISO 27001 is an internationally recognized information security management standard. Given Handy's operations in the UK (where ISO 27001 is widely adopted as a baseline security standard), its processing of sensitive personal data (SSNs, home addresses, payment data, geolocation), and its position as a platform connecting strangers with access to customers' homes, robust information security management is critical. No ISO 27001 certification has been found. Risk is Medium because while ISO 27001 is not legally mandated, the sensitivity of data processed and UK operations create meaningful reputational and operational risk from inadequate information security management.

Evidence: https://www.handy.com/privacy, https://www.iso.org/isoiec-27001-information-security.html

Financials

Three-year financials

Financial Resilience Score: 4/10

Handy is a wholly-owned, non-reporting subsidiary of Angi Inc. (NASDAQ: ANGI) since October 2018. Its standalone financials are not publicly disclosed, but available information indicates the business has been persistently unprofitable both pre- and post-acquisition. Angi took a ~$318M goodwill/intangible impairment charge in FY2023 largely attributable to the Handy acquisition, signaling the business is worth materially less than the 2018 purchase price. The Services segment (which now contains Handy) revenue declined ~25% YoY in FY2023 to ~$186M and continued to shrink in FY2024 as Angi deprioritized the fixed-price/Handy consumer business. On the positive side, Handy benefits from being backed by a listed parent with access to capital markets, a relatively strong balance sheet (equity ~$700M range), and low net debt. Angi Inc. turned to positive operating income (~$46M) and net income (~$36M) in FY2024 after significant cost restructuring. Handy retains brand recognition in on-demand home services across the US, UK, and Canada, and operates an asset-light two-sided marketplace model with independent contractor pros. However, the business is actively shrinking, faces ongoing worker-classification lawsuits, and is being brand-consolidated into Angi Services, raising risk that the Handy brand could ultimately be retired. Combined with cyclical exposure to discretionary home-services spend and intense competition from TaskRabbit, Thumbtack and local franchises, the standalone resilience profile is weak, though parent-company support prevents a lower score.

Key strengths: Backed by listed parent Angi Inc. with ~$700M equity and low net debt, Asset-light two-sided marketplace model with independent contractor pros, Brand recognition across US, UK, and Canada, Retail partnerships (Walmart, Wayfair, Costco) provide low-cost customer acquisition, Angi Inc. returned to profitability in FY2024 (~$46M operating income)

Risk factors: Sustained operating losses both pre- and post-acquisition, ~$318M goodwill impairment at Angi in FY2023 partly attributable to Handy, Services segment revenue declining ~25% YoY (FY2023) and continuing to shrink, Worker classification / gig economy regulatory lawsuits in US and UK, Brand consolidation risk - Handy being subsumed under Angi Services, Cyclical exposure to discretionary home services spend, Intense competition from TaskRabbit (IKEA), Thumbtack, and local franchises, Standalone financials not publicly disclosed - limits transparency

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report