Kayako (Upland Software)

United States · www.kayako.com · 25 vendors

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 25 sub-vendors.

Insights

Last updated 2026-03-13 · revision 3

25 direct vendors, 309 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Kayako demonstrates strong migration readiness, scoring 75 out of 100. A key strength is its active transition of the "Kayako Classic" legacy on-premise platform to the "cloud-based Kayako One." The "Kayako One" platform itself is described as "cloud-first," utilizing "Cloud-based SaaS infrastructure," AI/ML models, and a "Real-time processing engine," indicating a modern, adaptable architecture. The robust "Integrations Platform" with a "no-code integrations layer supporting 700+ app connections via Zapier, plus a REST API, Webhooks," suggests a highly flexible and interoperable environment, reducing technical barriers to migration and integration with other cloud services. However, the ongoing migration of "Kayako Classic" implies that legacy components still exist and require significant effort to fully transition, posing a current challenge. The lack of information regarding specific regulatory environments, data residency requirements, and financial stability (ability to fund migration) prevents a complete assessment of potential non-technical migration hurdles. While there are 43 vendor services from geographically diverse HQs, the ambiguous "Total Vendors: 0" makes it difficult to precisely gauge vendor lock-in risk, though the Zapier integration framework generally promotes flexibility and reduces dependence on single vendors.

Compliance

4 in-scope frameworks identified; showing 3.

SOC 2 (source) — Assessment Required

As a cloud-based SaaS provider handling customer data, SOC2 compliance is industry standard and likely required by enterprise clients. The security page mentions SSAE-16 (SOC 1, SOC 2, SOC 3) compliant data facilities, suggesting some level of SOC compliance. Medium risk because lack of current SOC2 certification could impact enterprise sales and customer trust, though the company appears to have some compliance measures in place.

Evidence: https://kayako.com/security/

GDPR (source) — Compliant

Kayako processes personal data of EU/EEA residents through their global customer support platform. They have implemented GDPR compliance measures including Data Privacy Framework certification, privacy policies, and data processing agreements. However, as a SaaS provider handling customer data across multiple jurisdictions, there's inherent complexity in maintaining ongoing compliance. The medium risk reflects the need for continuous monitoring of data processing activities and potential for regulatory changes.

Evidence: https://kayako.com/about/privacy/, https://kayako.com/security/, https://www.dataprivacyframework.gov/s/

HIPAA (source) — Assessment Required

While Kayako is not primarily a healthcare company, they actively market to healthcare organizations and claim HIPAA compliance on their healthcare support page. When serving healthcare clients, they would need to comply with HIPAA as a Business Associate. The risk is medium because healthcare is one of their target industries, and any non-compliance could result in significant penalties and loss of healthcare clients.

Evidence: https://kayako.com/healthcare-customer-support/

Financials

Three-year financials

Financial Resilience Score: 5/10

Upland Software's financial resilience appears to be moderate to low based on the recent trends: Revenue Deceleration and Decline: The slight revenue decline in 2022 after a period of growth raises concerns about the company's ability to sustain top-line expansion, especially given its historical reliance on acquisitions for growth. This suggests potential challenges in organic growth or successful integration of acquired assets. Volatile and Declining Operating Income: The significant drop in operating income in 2022 indicates pressure on profitability. While positive, the volatility makes it difficult to project stable earnings, which is a key component of resilience. Declining Equity Base: A shrinking equity base over three consecutive years can signal underlying financial stress, potentially due to sustained losses, high debt burden, or other balance sheet pressures. Upland is known for its leveraged acquisition strategy, which often results in significant long-term debt. While not explicitly requested in the table, high debt levels inherently reduce financial flexibility and resilience, especially in a rising interest rate environment. Acquisition-Driven Model: While acquisitions have historically fueled growth, they also introduce integration risks and can lead to increased debt. The recent financial performance suggests that the benefits from acquisitions might be diminishing or becoming harder to realize. Overall, while Upland is a diversified software company with a broad customer base, the recent financial trends suggest a period of consolidation and potential challenges in maintaining profitability and growth, which impacts its short-to-medium term financial resilience.

Key strengths: Diversified software company, Broad customer base

Risk factors: Revenue Deceleration and Decline, Volatile and Declining Operating Income, Declining Equity Base, Acquisition-Driven Model (integration risks, increased debt, diminishing benefits), High debt levels, Challenges in maintaining profitability and growth

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report