Khan Academy

United States · www.khanacademy.org · 22 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 22 sub-vendors.

Insights

Last updated 2026-06-14 · revision 2

22 direct vendors, 268 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Khan Academy exhibits very high migration readiness, primarily driven by its highly modern, cloud-native, and containerized technology stack. The extensive use of Google Cloud Platform (GCP), Google Kubernetes Engine (GKE), and Docker means applications are built with portability in mind, significantly reducing the effort required for migration to other cloud environments or hybrid setups. The adoption of microservices architecture (implied by GKE/Docker), GraphQL APIs, and modern programming languages (Python, Go) further enhances flexibility and decouples components, making them easier to move. While there is an inherent level of vendor dependency on the Google Cloud ecosystem, the use of containerization (Docker, Kubernetes) mitigates significant lock-in. The use of the OpenAI API for Khanmigo, while a critical dependency, is an API-driven integration, which can be more manageable to re-platform or replace compared to deeply embedded proprietary solutions. However, the assessment is constrained by the absence of data regarding specific regulatory environments, data residency requirements, and financial capacity to fund a large-scale migration. These unknowns could introduce complexities and costs not accounted for in this technical assessment. The 'Total Services: 48' suggests a number of integrations that would need careful consideration during a migration project.

Compliance

5 in-scope frameworks identified; showing 3.

GDPR (source) — Assessment Required

Khan Academy processes personal data of EU/EEA residents through their global educational platform. GDPR applies to any organization processing EU/EEA personal data regardless of location. High risk due to potential fines up to 4% of annual turnover or €20M, and Khan Academy's global user base likely includes significant EU/EEA users. Educational platforms handle sensitive data including children's data, increasing compliance complexity.

FERPA — Assessment Required

FERPA (Family Educational Rights and Privacy Act) may apply when Khan Academy partners with US educational institutions and handles educational records. Medium risk because violations can result in loss of federal funding for partner institutions and potential liability. Risk depends on the nature of institutional partnerships and data sharing arrangements.

COPPA — Assessment Required

COPPA (Children's Online Privacy Protection Act) is highly relevant as Khan Academy provides educational services to children under 13. High risk due to strict requirements for parental consent, data minimization, and potential FTC enforcement actions. Educational platforms serving children face significant compliance obligations under COPPA.

Financials

Three-year financials

Financial Resilience Score: 7/10

Khan Academy demonstrates solid financial resilience for a nonprofit organization, operating at roughly $70-80M annually with healthy reserves equivalent to approximately one year of operating expenses. The organization has maintained positive operating surpluses in most recent years and benefits from a diversified philanthropic donor base including major foundations (Gates, Google.org, Walton, Novo) and corporate donors (AT&T, Bank of America, Fastly). Its strong brand recognition, global reach to over 150 million learners across 190+ countries, and low marginal cost of digital content delivery support continued fundraising momentum. However, the organization faces meaningful risks. As a pure nonprofit with no earned revenue base, it is entirely dependent on philanthropy—unlike commercial competitors such as Coursera or Duolingo. Donor concentration is a key vulnerability, as a substantial share of revenue comes from a small number of large foundations and tech-sector donors who are sensitive to equity-market cycles. Rising costs from AI infrastructure (Khanmigo's LLM inference costs) and competition from free generative AI tools like ChatGPT add pressure to the financial model. Overall, the combination of stable funding, brand strength, and reserves justifies a moderately strong resilience score, tempered by structural revenue concentration risks.

Key strengths: Diversified philanthropic donor base including major foundations and corporations, Healthy net asset cushion of approximately 1 year of operating expenses, Positive operating surpluses in most recent years, Strong brand with 150M+ learners across 190+ countries, Low marginal cost of digital content delivery, Strategic positioning in AI education via Khanmigo and OpenAI partnership

Risk factors: Donor concentration risk with reliance on a few large foundations, No earned-revenue base to cushion philanthropy cycles, Rising AI infrastructure costs from Khanmigo LLM inference, Macroeconomic sensitivity of tech-sector philanthropy, Competition from free AI tools like ChatGPT, Gemini, and Claude, Khanmigo made free in U.S. schools, increasing burn rate

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report