Primer

United States · www.sayprimer.com · 11 vendors

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 11 sub-vendors.

Insights

Last updated 2026-08-02 · revision 6

11 direct vendors, 220 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Primer demonstrates medium migration readiness. A key strength is its modern, cloud-oriented tech stack, evidenced by the use of Isolated VPCs, advanced security measures, and key technologies like Machine Learning/Data Inference and real-time audience segmentation, which typically facilitate migration to cloud-native environments. However, several significant challenges reduce its readiness. The complex and high-risk regulatory landscape, particularly with GDPR, CCPA/CPRA, FTC Act Section 5, and UK GDPR, means any migration would require meticulous planning and execution to ensure compliance, potentially involving substantial legal and technical overhead to address existing gaps. Data residency and cross-border transfer requirements for EEA and UK data, with unconfirmed legal mechanisms (SCCs, DPF, IDTAs), add considerable complexity to selecting new infrastructure or regions. The absence of revenue data makes it impossible to assess Primer's financial capacity to fund a potentially expensive and resource-intensive migration. Additionally, with 17 reported services and an unknown number of underlying vendors, there's a potential for significant integration complexity and unquantified vendor lock-in, which would necessitate careful management during any migration. The 'Assessment Required' status for SOC2 and ISO 27001 also means that achieving or maintaining these critical certifications would be a substantial part of the migration project scope.

Compliance

7 in-scope frameworks identified; showing 3.

CAN-SPAM Act — Assessment Required

The CAN-SPAM Act applies to commercial email messages sent in the United States. Primer's platform enables B2B marketers to build and target audiences, and Primer itself sends marketing communications to its users. The Privacy Policy references sending 'email notifications, newsletters and other marketing communications.' Risk is MEDIUM because: (1) Primer sends commercial emails to its user base; (2) the platform facilitates email-based marketing for customers; (3) CAN-SPAM violations can result in penalties of up to $51,744 per email; (4) compliance appears likely given the opt-out mechanism described in the Privacy Policy, but no formal CAN-SPAM compliance audit was found.

Evidence: https://www.sayprimer.com/privacy-policy, https://www.ftc.gov/business-guidance/resources/can-spam-act-compliance-guide-business

SOC 2 (source) — Assessment Required

SOC2 (System and Organization Controls 2) is a widely expected compliance framework for cloud-based SaaS companies that store, process, or transmit customer data. Primer is a cloud-based SaaS platform that processes customer CRM data, website visitor data, and B2B contact data on behalf of its customers, making it a cloud service provider subject to SOC2 expectations. Risk is MEDIUM because: (1) Primer operates a Trust Center (trust.sayprimer.com) powered by Vanta, which is a compliance automation platform commonly used to pursue SOC2 certification — suggesting active compliance work; (2) however, no public SOC2 Type I or Type II report was found; (3) enterprise customers increasingly require SOC2 reports as a vendor security prerequisite; (4) absence of a confirmed SOC2 report creates vendor risk for Primer's customers and potential competitive disadvantage.

Evidence: https://trust.sayprimer.com/, https://www.sayprimer.com/privacy-policy

FTC Act — Assessment Required

The FTC Act Section 5 prohibits unfair or deceptive acts or practices in commerce. The FTC has increasingly scrutinized data brokers and adtech companies for privacy violations, deceptive data practices, and unauthorized data sharing. Primer's business model — collecting, enriching, and selling/sharing B2B contact data including personal identifiers, professional data, behavioral tracking data, and geolocation data — places it squarely in the data broker category subject to FTC oversight. Risk is HIGH because: (1) the FTC has taken enforcement actions against data brokers and adtech companies for privacy violations; (2) Primer explicitly acknowledges sharing personal data in ways that may constitute 'sales' under CCPA; (3) California's Delete Act (SB 362, effective January 2024) requires data brokers to register with the CPPA and honor deletion requests — Primer's data enrichment activities likely qualify it as a data broker; (4) proposed FTC commercial surveillance rules could impose additional obligations.

Evidence: https://www.sayprimer.com/primer-ccpa-policy, https://cppa.ca.gov/regulations/data_broker.html, https://www.ftc.gov/news-events/topics/privacy-security/data-security

Financials

Three-year financials

Financial Resilience Score: 6/10

Primer Labs, Inc. is a private, venture-backed Series A startup with no publicly disclosed revenue, EBIT, or equity figures. The company raised a $12M Series A in December 2022 led by Craft Ventures with participation from Slack Fund, Salesforce Ventures, GTMFund, and 40+ angel investors including CMOs/CROs from Segment, Notion, Okta, Figma, MasterClass, and Airtable. This tier-1 investor backing provides a moderate degree of financial resilience typical of early-growth SaaS companies. Qualitative signals are positive: a reputable customer roster (Rippling, Verkada, Carta, Confluent, PandaDoc, ChartHop, etc.), strong G2 ratings (4.6/5) with multiple badges, active product development through 2025, and positioning in a large stated TAM (~$70B B2B martech). However, as a Series A stage company, it is very likely still burning venture capital and operating at a loss. No follow-on priced funding round has been publicly announced since Dec 2022, which introduces uncertainty about current runway. Risks include heavy dependence on third-party ad platforms (LinkedIn, Meta, Google, Reddit) whose API/policy changes could materially impact the product, exposure to evolving privacy regulation (GDPR, CCPA), competition from well-funded incumbents (6sense, Demandbase, LiveRamp, Metadata.io, Influ2, Vector), and unknown customer concentration. Overall a moderate resilience profile appropriate to an early-stage venture-backed SaaS.

Key strengths: $12M Series A raised in December 2022 led by Craft Ventures, Backing from tier-1 investors: Slack Fund, Salesforce Ventures, GTMFund, 40+ angel investors including CMOs/CROs from Segment, Notion, Okta, Figma, Strong customer roster: Rippling, Verkada, Carta, Confluent, PandaDoc, 4.6/5 G2 rating with multiple product badges, Active product development and shipping through 2025, Large stated TAM (~$70B B2B martech spend), Founding team from Dropbox, Modsy, Clearbit, Verkada

Risk factors: Likely cash-burning early-stage company with no disclosed profitability, No subsequent priced funding round publicly announced since Dec 2022 — runway unknown, Heavy dependence on third-party ad platforms (LinkedIn, Meta, Google, Reddit) APIs, Exposure to evolving privacy regulation (GDPR, CCPA, state laws), Competition from well-funded incumbents (6sense, Demandbase, LiveRamp, Metadata.io, Influ2), Unknown customer concentration risk, No public financial statements or audited disclosures available

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report