Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

ShareThis exhibits high migration readiness, primarily driven by its highly modern, cloud-native, and containerized technical architecture. The extensive use of AWS and Google Cloud services, coupled with Kubernetes and Docker for orchestration, indicates a strong foundation for portability, modularity, and reduced infrastructure lock-in. The adoption of serverless computing (AWS Lambda) and big data processing tools (Apache Spark, AWS EMR, Google BigQuery) further enhances flexibility and ease of migration to different cloud environments or services. The company's development of GDPR-compliant Consent Management Platforms suggests a proactive approach to regulatory requirements, which would streamline compliance considerations during a migration. Opportunities for migration include leveraging their existing cloud-native expertise to optimize costs, enhance scalability, or diversify cloud providers. Challenges include the lack of financial data (revenue concentration, growth history), which makes it difficult to assess the company's capacity to fund a significant migration effort. Additionally, while the tech stack generally mitigates infrastructure lock-in, the 'Vendor Lock-in Risk: Unknown' and the ambiguity regarding the number of distinct vendors for the '12 services' mean potential lock-in with specific service providers cannot be fully discounted. Data residency requirements are not specified, which could introduce complexity if strict requirements were to emerge during a migration.

Compliance

4 in-scope frameworks identified; showing 3.

SOC 2 (source) — Compliant

ShareThis displays SOC2 compliance certification on their website, indicating they have undergone third-party audits of their security controls. As a cloud-based service provider handling customer data, SOC2 compliance is appropriate and demonstrates good security practices. The low risk reflects their documented compliance status and the voluntary nature of SOC2 (not legally mandated).

Evidence: https://sharethis.com/, https://trust.predactiv.com/

GDPR (source) — Compliant

ShareThis processes personal data of EU/EEA residents through their social sharing tools and data analytics services. While they have implemented GDPR compliance measures including consent management, data subject rights, and appointed a DPO, the medium risk reflects the complexity of their global data processing operations and the significant fines (up to 4% of annual turnover) for non-compliance. Their business model involves cross-border data transfers and behavioral tracking, which increases regulatory scrutiny.

Evidence: https://sharethis.com/privacy/

ISO 27001 (source) — Assessment Required

No evidence found of ISO 27001 certification despite ShareThis handling significant amounts of personal data and operating globally. While not legally required, ISO 27001 would be beneficial for a company of their size and data processing scope. The medium risk reflects the potential security and compliance benefits they may be missing, though this is not a legal requirement.

Financials

Three-year financials

2024:
2023:
2022:

Financial Resilience Score: 5/10

ShareThis (now corporately branded Predactiv) is a private US ad-tech and behavioral data company with no public financial disclosures. As such, a precise quantitative resilience assessment is not possible from primary sources. Qualitatively, the company demonstrates notable durability: it was founded in 2007 and has survived multiple ad-tech cycles including the 2008 downturn, the rise of GDPR/CCPA, and platform-level tracking restrictions. It has a meaningful data moat (3M+ publisher domains, ~500M daily events), diversified product mix combining free publisher tools with monetized Data Solutions, and credible investor backing (~US$66M raised cumulatively from Mercury Fund, Blue Chip Venture, Revel Partners, T-Venture, DAG Ventures, and others). On the risk side, the company operates in a structurally pressured digital advertising and third-party data sector that has compressed since 2022. Regulatory exposure (GDPR, CCPA/CPRA, EU DMA) directly affects the behavioral-data business model, and platform-level changes (Google cookie deprecation roadmap, Apple ATT) structurally pressure the addressable market. The recent corporate rebrand to Predactiv suggests strategic repositioning that could mask restructuring, and the company faces competition from larger data players (LiveRamp, Acxiom) and identity providers. Without published accounts, liquidity, leverage, profitability, and runway cannot be externally verified, warranting a mid-range resilience score.

Key strengths: Long operating history since 2007, surviving multiple ad-tech cycles, Large data footprint: 3M+ publisher domains and ~500M daily events, Diversified product mix: free publisher tools feeding monetized Data Solutions, Cookieless positioning with Atlas Global ID and partnerships (Yahoo ConnectID, Eyeota, ID5), Strong investor backing (~US$66M raised) and PE/M&A-experienced CFO, Compliance credentials: SOC 2, Neutronian top-1% privacy ranking, IAB TCF v2, Fortune Best Small Workplaces recognition (2017, 2018, 2019, 2021, 2022), Data business doubled YoY in 2018 (second consecutive year of growth)

Risk factors: No financial transparency as a private company, Ad-tech industry headwinds and programmatic open-web spend pressure since 2022, Regulatory exposure to GDPR, CCPA/CPRA, US state privacy laws, EU DMA, Platform dependency: Google cookie deprecation, Apple ATT, browser tracking restrictions, Corporate rebrand to Predactiv may mask restructuring, Competitive pressure from LiveRamp, Acxiom, DMP/CDP vendors, identity providers, Unverifiable liquidity, leverage, and runway

Revenue by geography

United States: 70%
EMEA: 20%
APAC: 10%

Revenue by product/service

Data Solutions: 90%
Website Tools (free): 10%

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report

ShareThis

Resilience scores

Technology vendors

Services catalogue

Insights

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10