Railway Due Diligence

Run due diligence on Railway: check compliance and get alerts when suppliers change.

United States · railway.app · 16 vendors

Railway is a cloud deployment platform that simplifies the process for developers to build, deploy, and manage applications and services. It provides an all-in-one intelligent cloud infrastructure, offering features like automatic scaling, monitoring, and database provisioning. The platform aims to reduce the complexity of traditional infrastructure management, allowing developers to focus on writing code.

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 1 category; runs on 16 sub-vendors.

Insights

Last updated 2026-07-29 · revision 6

16 direct vendors, 159 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

7 in-scope frameworks identified; showing 3.

CPRA — Evidence found

Evidence: https://railway.com/legal/privacy, https://railway.com/legal/dpa

SOC 2 (source) — Evidence found

Evidence: https://trust.railway.com, https://trust.railway.com/?itemUid=fa950d02-cbb3-4010-b917-7137a7c2a982&source=click, https://trust.railway.com/?itemUid=b2671060-5c66-4d9c-b70f-af4ab3dbd45a&source=click, https://trust.railway.com/?itemUid=f4951085-df2e-4fac-9d43-60b796478b2e&source=click

ISO 27001 (source) — No public evidence

Evidence: https://trust.railway.com, https://railway.com/legal/dpa

Financials

Three-year financials

Financial Resilience Score: 7/10

Railway is a private, venture-backed US company with no publicly disclosed audited financials (no revenue, EBIT, or equity figures available). However, resilience is supported by a fresh $100M Series B raise in January 2026, bringing cumulative equity capital to approximately $125M. The company has strong blue-chip investor backing including Redpoint Ventures, Unusual Ventures, TQ Ventures/FPV, Lachy Groom, and prominent angels from GitHub, Vercel, Datadog, Segment, and Cockroach Labs. Product-led growth is evident with users scaling from ~250k in mid-2024 to over 2 million by January 2026 (roughly 8x in 18 months), and notable enterprise customers including TripAdvisor, Automattic, Mercado Libre, Cognizant, and Bilt provide reference-quality revenue signal. The usage-based pricing model aligns incentives and generates recurring metered revenue with typically strong net revenue retention characteristic of PaaS infrastructure businesses. Key risks include high opacity (no verification of profitability, burn, or runway), intense competition from Vercel, Render, Fly.io, Heroku, Netlify, and hyperscalers, and rising capital intensity from building own bare-metal datacenters (Railway Metal Gen 2), which shifts the business from capital-light software toward hardware-adjacent economics. Residual GCP dependency (highlighted by a May 2026 account suspension incident) and potential customer concentration also represent operational risks. On balance, the strong recent capitalization, elite investor syndicate, and hyper-growth user metrics support a moderately high resilience score despite the absence of financial disclosure.

Key strengths: Fresh $100M Series B raised January 2026, ~$125M cumulative equity capital, Blue-chip investors: Redpoint, Unusual, TQ Ventures/FPV, Lachy Groom, Elite angel roster: GitHub, Vercel, Datadog, Segment, Cockroach Labs founders, Hyper-growth: 250k → 2M+ developers in ~18 months, Usage-based pricing with recurring metered revenue, Enterprise customer traction: TripAdvisor, Automattic, Mercado Libre, Cognizant, Bilt, Vertical integration via own bare-metal datacenters (Railway Metal)

Risk factors: No public disclosure of revenue, EBIT, equity, burn, or runway, Intense competition from Vercel, Render, Fly.io, Heroku, Netlify, and hyperscalers (AWS, GCP, Azure), Rising capex intensity from building own datacenters, Residual GCP dependency (May 2026 account suspension incident), Undisclosed customer concentration risk, Macro/interest-rate sensitivity for future fundraising or exit, Valuation undisclosed; multiple compression risk in late-stage cloud/PaaS peers

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report