ScoreApp

United Kingdom · scoreapp.com · 20 vendors

ScoreApp, operated by Hyper Targeted Marketing Limited, provides a software platform for creating interactive quizzes and scorecards. It helps businesses generate and qualify leads, engage audiences, and gather valuable insights for marketing and sales efforts. The platform offers customizable templates, landing pages, and integrations with CRM and email marketing systems.

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 20 sub-vendors.

Insights

Last updated 2026-08-11 · revision 2

20 direct vendors, 280 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

ScoreApp exhibits a medium level of migration readiness. On the positive side, the company's key technologies are modern, featuring AI-powered builders, CRM integration, Zapier automation, and webhook-based automation, which suggest a modular and API-driven architecture conducive to migration. Existing GDPR compliance and ISO 27001 certification indicate a mature approach to data governance and security, which simplifies compliance aspects of a migration. However, several factors reduce its readiness. The presence of WordPress in its internal tech stack could pose a challenge for a purely cloud-native or microservices-based migration, potentially requiring significant re-platforming for that component. There is no available data on ScoreApp's financial stability, which is crucial for assessing its ability to fund a potentially complex migration. Furthermore, data residency requirements are not specified, which could introduce significant constraints and complexity depending on the target environment. The vendor landscape is also a major unknown; while 26 services are utilized, the actual number of vendors is unclear (stated as "Total Vendors: 0"). This ambiguity makes it impossible to accurately assess vendor lock-in risk, which could be high if many services are provided by a few critical vendors. The unknown vendor lock-in and lack of financial/data residency details are significant detractors to a higher migration readiness score.

Compliance

5 in-scope frameworks identified; showing 3.

UK Data Protection Act 2018 — Partially Compliant

The DPA 2018 is the primary UK data protection legislation, supplementing and tailoring UK GDPR for the UK context. ScoreApp explicitly references the DPA 2018 throughout its Privacy Policy and Terms of Service, demonstrating awareness and intent to comply. The company is registered in England and Wales, making DPA 2018 directly applicable. The same compliance gaps identified under GDPR apply here: no publicly named DPO, no published RoPA, and no formal third-party DPA 2018 audit. The ICO is the supervisory authority and has demonstrated willingness to enforce, including issuing significant fines. Risk is Medium for the same reasons as GDPR — meaningful compliance infrastructure exists but formal audit evidence is absent.

Evidence: https://www.scoreapp.com/privacy-policy/, https://www.scoreapp.com/terms-conditions/, https://ico.org.uk/make-a-complaint

GDPR (source) — Partially Compliant

ScoreApp (Hyper Targeted Marketing Limited) is a UK-registered SaaS company that explicitly references UK GDPR and the Data Protection Act 2018 in its Privacy Policy and Terms of Service. It processes personal data of EU/EEA residents (151,000+ users worldwide, global platform) and uses EU-based sub-processors (Heroku EU, Emailmovers Ltd EU), meaning both UK GDPR and EU GDPR apply. The company demonstrates meaningful compliance infrastructure: lawful basis documentation, data subject rights procedures, data retention schedules, breach notification commitments, Standard Contractual Clauses (SCCs) for international transfers, and a formal Data Processing Agreement in its Terms of Service. However, no formal GDPR audit, DPO appointment, or Article 30 Records of Processing Activities (RoPA) are publicly disclosed. The transfer of data to US-based sub-processors (OpenAI, Postmark/ActiveCampaign) via SCCs introduces residual risk. Risk is Medium rather than High because the company has clearly invested in GDPR compliance infrastructure, but gaps in public evidence of DPO appointment and formal audits prevent a 'Compliant' rating. ICO enforcement in the UK is active, with fines up to £17.5M or 4% of global annual turnover under UK GDPR.

Evidence: https://www.scoreapp.com/privacy-policy/, https://www.scoreapp.com/terms-conditions/, https://ico.org.uk/make-a-complaint, https://scoreapp.com

ISO 27001 (source) — Compliant

ScoreApp publicly displays an ISO 27001 certification badge on its homepage and Terms & Conditions page, certified by A-LIGN — a globally recognized and accredited certification body (ANAB-accredited). ISO 27001 certification requires a formal third-party audit of the Information Security Management System (ISMS), including risk assessment, security controls, incident management, and continual improvement. This is the strongest form of third-party security assurance ScoreApp has publicly demonstrated. Risk is Low because the certification is current (displayed on the live website as of 2026), issued by a credible accredited body, and directly evidences a structured approach to information security. The main residual risk is that the specific scope, certification date, and expiry date of the certificate are not publicly disclosed, preventing full verification without contacting A-LIGN or ScoreApp directly.

Evidence: https://scoreapp.com, https://www.scoreapp.com/terms-conditions/

Financials

Financial Resilience Score: 6/10

ScoreApp appears to be a growing, likely bootstrapped UK SaaS company with strong product-market fit in the SMB/coach/consultant segment. The recurring subscription revenue model provides predictable cash flow, and the large diversified customer base of 151,000+ users reduces single-customer concentration risk. The company has achieved ISO 27001 certification, signaling investment in security controls important for B2B buyers, and benefits from founder Daniel Priestley's personal brand as a low-cost lead source. However, financial transparency is limited as ScoreApp Ltd files as a small UK company, meaning revenue and EBIT are not publicly disclosed. The company operates in a crowded competitive category with players like Typeform, Involve.me, Outgrow, Interact, and native features from HubSpot/Salesforce. AI feature commoditization poses a risk in a fast-moving area where differentiation can erode. Customer concentration in coaches, consultants and small agencies makes the business sensitive to economic cycles, and heavy reliance on founder Daniel Priestley's personal brand for top-of-funnel creates key-person risk. Overall, qualitative signals suggest reasonable resilience but the lack of verifiable financials limits confidence.

Key strengths: Recurring SaaS subscription revenue model with predictable cash flow, Large diversified customer base of 151,000+ users worldwide, International reach through self-serve digital-only distribution, Strong integration ecosystem (HubSpot, Salesforce, Zapier, Klaviyo, etc.) raising switching costs, ISO 27001 certification signaling security investment, Founder pedigree with Daniel Priestley's established audience, Bootstrapped/founder-led structure implying conservative debt profile

Risk factors: Limited financial transparency due to small company filing status, Crowded competitive category with Typeform, Involve.me, Outgrow, Interact, and native platform features, AI feature commoditization risk in fast-moving space, Customer segment concentration in coaches, consultants and small agencies sensitive to economic cycles, Founder/brand dependence creating key-person risk, FX exposure from USD pricing on GBP-reporting entity, Dependency on third-party APIs and integrations

Revenue by product/service

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report