Newfold Digital, Inc.

United States · newfold.com · 15 vendors

Newfold Digital, Inc. is a leading web technology company that provides website hosting, domain registration, website building, and online marketing services to millions of small-to-medium businesses globally. Established in 2021 through the combination of Endurance Web Presence and Web.com Group, the company helps customers build a digital presence that delivers results through its extensive product offerings and personalized support.

Resilience scores

Technology vendors

Services catalogue

8 services in catalogue across 3 categories; runs on 15 sub-vendors.

Insights

Last updated 2026-08-15 · revision 7

15 direct vendors, 181 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Newfold Digital exhibits a high level of technical migration readiness, but this is significantly tempered by complex regulatory and data residency challenges. The company's internal tech stack is highly modern and cloud-native, leveraging AWS, Kubernetes, Docker, and Terraform, which are key enablers for efficient migration and portability. The use of modern programming languages (Python, Java, Node.js, React) and message queuing systems (RabbitMQ / Kafka) further supports a microservices-friendly architecture, facilitating modular migration. Financially, the company's consistent revenue growth indicates strong capacity to fund significant migration initiatives. However, the regulatory environment presents substantial hurdles. The lack of clear compliance for GDPR, NIS2, SOC2, and ISO 27001 means any migration would need to meticulously address these requirements, adding significant complexity, cost, and time. Furthermore, as a global web hosting provider, Newfold Digital faces intricate data residency requirements across multiple jurisdictions (EU, US, etc.). Ensuring compliance with these diverse data localization and cross-border transfer rules during a migration will be a major undertaking. The "Vendor Relationships" data is ambiguous with "Total Vendors: 0", but the reliance on AWS for core infrastructure implies a degree of vendor lock-in, making a full migration away from AWS a substantial effort, even with portable technologies. While the technical foundation is strong, these regulatory and data residency complexities position the company at the lower end of high migration readiness.

Compliance

11 in-scope frameworks identified; showing 3.

PCI DSS (source) — Assessment Required

Newfold Digital processes payment card information for millions of customers purchasing domains, hosting, and digital services globally. PCI DSS compliance is mandatory for any entity that stores, processes, or transmits cardholder data. The risk is High because: (1) the company explicitly lists 'payment information' as data it collects in its Privacy Center; (2) a breach of payment card data could result in significant fines from card brands, loss of ability to process card payments, and reputational damage; (3) the company's scale (millions of transactions) likely places it in PCI DSS Level 1 (highest compliance tier, requiring annual QSA audit and quarterly network scans). No public PCI DSS compliance attestation found.

Evidence: https://newfold.com/privacy-center, https://newfold.com

NIS2 (source) — Assessment Required

NIS2 applies to 'digital providers' and 'digital infrastructure' entities operating in the EU, which includes DNS service providers, domain name registries/registrars, cloud computing service providers, data center service providers, content delivery networks, and managed service providers. Newfold Digital, through its EU-based subsidiaries (Yoast in Netherlands, YITH in Italy) and its direct provision of web hosting, domain registration, DNS services, and cloud-based website builder tools to EU customers, likely falls within NIS2's scope as an 'Important Entity' under the digital providers category. The risk is Medium rather than High because: (1) Newfold is US-headquartered and NIS2 obligations primarily attach to entities 'established' in the EU — Yoast (NL) and YITH (IT) are the clearest in-scope entities; (2) enforcement is still maturing across EU member states (NIS2 transposition deadline was October 2024); (3) the exact classification requires member-state-level assessment. Non-compliance risk includes fines up to €10M or 2% of global annual turnover for Important Entities.

Evidence: https://newfold.com/brands, https://newfold.com, https://yoast.com, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555

PIPEDA — Assessment Required

Newfold Digital explicitly serves Canadian customers (dedicated CAD currency option on website). PIPEDA (Personal Information Protection and Electronic Documents Act) applies to private-sector organizations collecting, using, or disclosing personal information in the course of commercial activities in Canada. The risk is Medium because: (1) Canada is an active market for Newfold; (2) PIPEDA enforcement by the Office of the Privacy Commissioner (OPC) is active; (3) Bill C-27 (Consumer Privacy Protection Act) is pending and would significantly increase penalties; (4) however, PIPEDA penalties are currently lower than GDPR, reducing immediate financial risk.

Evidence: https://newfold.com, https://newfold.com/privacy-center, https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/

Financials

Three-year financials

Financial Resilience Score: 5/10

Newfold Digital demonstrates moderate financial resilience underpinned by a large, diversified brand portfolio (Bluehost, HostGator, Network Solutions, Web.com, Yoast, Crazy Domains, etc.), recurring subscription revenue with high renewal rates typical of the domain/hosting industry, and significant global scale serving millions of SMB customers. These characteristics provide predictable cash flow and purchasing power with registries and cloud infrastructure vendors, supporting stable operations. However, resilience is materially constrained by a highly leveraged capital structure inherited from the 2021 LBO/merger of EIG and Web.com, with several billion dollars of secured and unsecured debt outstanding. Moody's has historically maintained a speculative-grade rating (B/B2 or lower) on Newfold's debt, and rising interest rates have increased debt service burdens. GAAP net income is believed to be negative or thin, with adjusted EBIT positive but pressured by heavy interest expense and integration costs. Competitive intensity from GoDaddy, Squarespace, Wix, Shopify, IONOS, and hyperscalers, combined with customer churn in shared hosting and legacy domain products, adds ongoing pressure. Sponsor backing from Clearlake Capital and Siris Capital provides capacity for refinancings and M&A, but the private ownership structure limits transparency for counterparties.

Key strengths: Large diversified brand portfolio across hosting, domains, and SMB services, Recurring subscription revenue with high renewal rates, Global scale serving millions of SMB customers, PE sponsor backing from Clearlake Capital and Siris Capital, Cross-sell/upsell potential across domains, hosting, security, and marketing services

Risk factors: High financial leverage with speculative-grade credit rating (B/B2 or lower), Rising interest rates increasing debt service costs, Intense competition from GoDaddy, Squarespace, Wix, Shopify, IONOS, and hyperscalers, Customer churn in shared hosting and legacy domain products, FX exposure through international operations, Integration risk from combining EIG and Web.com platforms, Limited financial transparency due to private ownership

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report