Python Due Diligence
Run due diligence on Python: check compliance and get alerts when suppliers change.
United States · www.python.org · 9 vendors
The Python Software Foundation (PSF) is an American nonprofit organization dedicated to promoting, protecting, and advancing the Python programming language. It supports the growth of a diverse and international community of Python programmers by managing intellectual property, providing infrastructure, and organizing events like PyCon US.
Resilience scores
- Digital Sovereignty: 67
- Digital Resilience: 8
- Financial Resilience: 7
Technology vendors
- Amazon Web Services (aws) — Technology — United States
- Atlassian Corporation Plc — Technology — Australia
- Mailgun — Technology — United States
- and 6 more
Services catalogue
1 service in catalogue across 1 category; runs on 9 sub-vendors.
- Python
Insights
Last updated 2026-07-30 · revision 2
9 direct vendors, 149 subvendors
Direct vendors by controlling owner country (sample)
- United States: 6
- Japan: 1
- Australia: 1
Subvendors by controlling owner country (sample)
- Germany: 3
- India: 1
- France: 4
Compliance
6 in-scope frameworks identified; showing 3.
CCPA — Evidence found
Evidence: https://policies.python.org/PSF-Privacy-Notice/, https://policies.python.org/python.org/Privacy-Notice/
ISO 27001 (source) — No public evidence
Evidence: https://www.python.org/dev/security/, https://policies.python.org/reference/SSDF-Request-Response/, https://policies.python.org/PSF-Privacy-Notice/
GDPR (source) — Evidence found
Evidence: https://policies.python.org/PSF-Privacy-Notice/, https://policies.python.org/python.org/Privacy-Notice/, https://www.python.org/about/legal/
Financials
Three-year financials
- 2023: revenue $5.75M, equity $4.75M
- 2022: revenue $4.85M, equity $4.25M
- 2021: revenue $4.4M, equity $3.75M
Financial Resilience Score: 7/10
The Python Software Foundation (PSF) demonstrates solid financial resilience for a small non-profit organization. With approximately $5-6M in annual revenue and $4-5M in net assets, the PSF maintains a conservative financial position underpinned by a diversified corporate sponsor base including major technology firms like Google, Microsoft, Meta, AWS, Bloomberg, and JetBrains. The organization has successfully rebuilt reserves following pandemic-era disruptions and continues to see positive net asset growth year-over-year. The PSF benefits from Python's dominant position as the world's most-used programming language, which creates strong structural incentives for continued corporate sponsorship. Its low fixed-cost structure (fewer than 15 FTE employees) combined with substantial in-kind support (Fastly CDN, AWS infrastructure) provides operational efficiency. Landmark grants such as the ~$2M AWS/Alpha-Omega grant for PyPI security in 2023 demonstrate the organization's ability to attract significant restricted funding. However, the PSF faces meaningful concentration risks. PyCon US represents 40-50% of revenue in non-pandemic years, creating single-event exposure as demonstrated in 2020 when COVID forced the conference online. The organization also lacks access to capital markets as a non-profit and depends on discretionary corporate sponsorship budgets that can shift with economic conditions or changes in open-source funding priorities. The rising operational and security costs of PyPI infrastructure also present ongoing financial pressure.
Key strengths: Diversified corporate sponsor base including Google, Microsoft, Meta, AWS, Bloomberg, JetBrains, Python's #1-2 position in TIOBE and Stack Overflow developer surveys drives sustained sponsorship, Low fixed-cost structure with fewer than 15 FTE employees, Positive net asset trajectory with reserves rebuilt post-pandemic, Substantial in-kind infrastructure support from Fastly, AWS worth millions annually, Growing revenue base (7-15% YoY growth), Landmark ~$2M AWS grant for PyPI security in 2023
Risk factors: Heavy concentration on PyCon US (40-50% of revenue) - single event disruption risk, Sponsorship-dependent model vulnerable to corporate IT budget shifts, Rising PyPI operational and security costs (bandwidth, malware defense, 2FA), No access to capital markets funding as a non-profit, Key-person/volunteer risk with small core developer team, No geographic revenue diversification (70-80% US-sourced)
Revenue by geography
- United States: 75%
- International (Europe, Asia, Other): 25%
Revenue by product/service
- PyCon US (conference + event sponsorships): 45%
- General corporate sponsorships: 30%
- Restricted grants (PyPI security, etc.): 15%
- Individual donations, memberships, merchandise: 10%
Workforce by country
- United States: 10
- Europe: 3
- Other: 2
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.