OpenReplay Due Diligence
Run due diligence on OpenReplay: check compliance and get alerts when suppliers change.
United States · www.openreplay.com · 5 vendors
OpenReplay is an open-source session replay and product analytics platform that enables developers to record, replay, and analyze user interactions on web applications. This helps in troubleshooting issues faster, understanding user behavior, and improving overall application performance. The platform also includes developer tools, performance monitoring, and co-browsing capabilities.
Resilience scores
- Digital Sovereignty: 60
- Digital Resilience: 7
- Financial Resilience: 5
Technology vendors
- Amazon Web Services (aws) — Technology — United States
- Crisp — Technology — France
- ID Company — Technology — Denmark
- and 3 more
Services catalogue
3 services in catalogue across 3 categories; runs on 5 sub-vendors.
- OpenReplay
- Personal Data Processing
- Session Replay
Insights
Last updated 2026-07-29 · revision 3
5 direct vendors, 88 subvendors
Direct vendors by controlling owner country (sample)
- United States: 3
- France: 1
- Sweden: 1
Subvendors by controlling owner country (sample)
- Norway: 1
- Belgium: 1
- Netherlands: 1
Compliance
8 in-scope frameworks identified; showing 3.
HIPAA (source) — Evidence found
Evidence: https://www.openreplay.com/legal/terms, https://www.openreplay.com/legal/privacy
CCPA — Evidence found
Evidence: https://www.openreplay.com/legal/privacy, https://www.openreplay.com/legal/terms, https://www.openreplay.com/solutions/size/enterprise
SOC 2 (source) — Evidence found
Evidence: https://www.openreplay.com, https://www.openreplay.com/solutions/size/enterprise, https://www.openreplay.com/legal/terms
Financials
Three-year financials
- null:
Financial Resilience Score: 5/10
OpenReplay is a privately held, VC-backed open-core SaaS company with no publicly filed financial statements. As a US-domiciled private company not registered with the SEC, it is not required to publish audited financials, making a fully quantitative resilience assessment impossible. The company does show credible signs of commercial traction, including an enterprise customer roster featuring Amazon, NVIDIA, Uber, Mercedes-Benz, LG, Deel, Zscaler, ASUS, and Tekion, plus SOC 2 Type 2 attestation that removes friction in enterprise sales cycles. Strategically, the open-source distribution model provides a low-cost customer acquisition channel, and the self-hosting capability creates a structural moat in regulated industries versus SaaS-only competitors like FullStory, LogRocket, and Hotjar. Product breadth has expanded from core session replay into product analytics, co-browsing, a mobile SDK, an AI assistant (kAI), and a screen-capture tool (Spot), creating cross-sell opportunities. However, the company operates in a highly competitive category against well-funded incumbents and free alternatives like Microsoft Clarity. Open-core cannibalization risk, dependence on VC funding cycles for runway, and AI-related variable costs from third-party LLM APIs pressure margins. Private-company opacity itself is a mild negative in vendor risk reviews. Overall resilience is moderate, with clear go-to-market strengths offset by unverifiable unit economics.
Key strengths: Open-source distribution channel drives low-CAC developer adoption, Enterprise logos landed including Amazon, NVIDIA, Uber, Mercedes-Benz, Deel, Zscaler, SOC 2 Type 2 compliance enables enterprise sales, Self-hosting differentiator in regulated industries, Product breadth expansion into analytics, co-browsing, AI (kAI), and Spot
Risk factors: Highly competitive category with well-funded incumbents (FullStory, LogRocket, Hotjar, PostHog, Mixpanel, Amplitude, Datadog RUM), Free alternative Microsoft Clarity pressures pricing, Open-core cannibalization risk from generous free self-hosted tier, Private-company opacity limits external financial assessment, Funding-market dependence for cash runway, AI cost pressure from third-party LLM APIs on gross margin
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.