Kochava Due Diligence
Run due diligence on Kochava: check compliance and get alerts when suppliers change.
United States · www.kochava.com · 9 vendors
Kochava Inc. is an omnichannel measurement and attribution platform that provides secure, real-time data solutions for advertisers and publishers. The company helps marketers understand, measure, and optimize their marketing performance across various channels and devices. Its services include mobile app attribution, analytics, and fraud prevention, empowering clients with actionable insights for campaign management and ROI optimization.
Resilience scores
- Digital Sovereignty: 67
- Digital Resilience: 7
- Financial Resilience: 6
Technology vendors
- NEC Corporation — Technology — Japan
- Pagely — Technology — United States
- Viral Loops — United Kingdom
- and 6 more
Services catalogue
3 services in catalogue across 3 categories; runs on 9 sub-vendors.
- Kochava
- Mobile Attribution
- Personal Data Processing
Insights
Last updated 2026-08-13 · revision 1
9 direct vendors, 83 subvendors
Direct vendors by controlling owner country (sample)
- United States: 6
- United Kingdom: 2
- Japan: 1
Subvendors by controlling owner country (sample)
- France: 2
- China: 3
- Germany: 1
Compliance
7 in-scope frameworks identified; showing 3.
ISO 27001 (source) — Evidence found
Evidence: https://www.kochava.com/support-privacy/
GDPR (source) — Evidence found
Evidence: https://www.kochava.com/support-privacy/, https://www.privacyshield.gov/participant?id=a2zt0000000GnEHAA0&status=Active, https://www.kochava.com/opt-out-do-not-sell-request-process/, https://www.kochava.com/consent-management-platform/, https://www.kochava.com/website-visitor-privacy-policy/
COPPA — No public evidence
Evidence: https://www.kochava.com/support-privacy/, https://www.kochava.com/industry-vertical/kochava-for-gaming/, https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa
Financials
Three-year financials
- 2024:
- 2023:
- 2022:
Financial Resilience Score: 6/10
Kochava is a private, founder-led company that has operated since 2011 without any known dilutive venture capital funding or exit event. This 14+ year track record of independence suggests either sustained profitability or highly disciplined capital management, both of which are positive resilience indicators. The company's product suite spans multiple offerings (MMP attribution, marketing mix modeling, ad-fraud prevention, deep linking, data marketplace, and AI-based StationOne), producing recurring enterprise SaaS revenue with high switching costs due to thousands of pre-built ad network integrations. Its Sandpoint, Idaho headquarters provides a structural cost advantage versus San Francisco-based competitors. However, resilience is materially constrained by several risks. The ongoing FTC lawsuit filed August 2022 over sensitive geolocation data sales represents a significant legal and reputational threat, particularly to the Kochava Collective data marketplace business line. The company also faces existential pressure from privacy regulations (Apple's ATT, SKAdNetwork/AdAttributionKit, Google Privacy Sandbox) that have disrupted the entire MMP category and require continuous R&D reinvestment. Competition from well-capitalized rivals like AppsFlyer, Adjust (owned by AppLovin), Branch, Singular, and the walled gardens of Meta/Google adds pricing pressure. Financial opacity is another concern—no audited financials, no SEC filings, and no verified revenue disclosure means external stakeholders cannot verify solvency or margins. Third-party revenue estimates range widely ($60M-$120M) and are unreliable. Given the mix of longevity/independence strengths against material legal, regulatory, and competitive risks, a moderate resilience score is warranted.
Key strengths: 14+ years of operation as founder-led private company without dilutive funding, Enterprise SaaS recurring revenue with Fortune 500 customers, High switching costs via thousands of ad network integrations, Diversified product suite across attribution, MMM, fraud, deep linking, and AI, Low-cost Sandpoint, Idaho operating base vs. SF-based competitors, Global presence with offices in US, Ireland, Spain, UK, Singapore, and China
Risk factors: Ongoing FTC lawsuit (filed August 2022) over geolocation data sales, Privacy regulation disruption (iOS ATT, SKAdNetwork, Google Privacy Sandbox), Competition from AppsFlyer, Adjust/AppLovin, Branch, Singular, and Meta/Google, Complete financial opacity—no audited statements or SEC filings, Revenue tied to cyclical global digital ad spending, Reputational risk from data marketplace business under regulatory scrutiny
Workforce by country
- China: 0
- Spain: 0
- Ireland: 0
- Singapore: 0
- United States: 0
- United Kingdom: 0
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.