Skilljar
United States · www.skilljar.com · 22 vendors
Resilience scores
- Digital Sovereignty: 86
- Digital Resilience: 7
- Financial Resilience: 7
Technology vendors
- Adobe Inc. — Technology — United States
- Demandware — Technology — United States
- Stripe, Inc. — Financial Services — United States
- and 19 more
Services catalogue
2 services in catalogue across 2 categories; runs on 22 sub-vendors.
- CRM of training data
- Skilljar
Insights
Last updated 2026-08-02 · revision 2
22 direct vendors, 276 subvendors
Direct vendors by controlling owner country (sample)
- United States: 19
- Australia: 2
- Denmark: 1
Subvendors by controlling owner country (sample)
- Unknown: 1
- Ireland: 1
- Spain: 1
Migration Readiness: 7/10
Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.
Skilljar exhibits a strong foundation for migration readiness, largely due to its adoption of Amazon Web Services (AWS) as its core infrastructure, which provides flexibility and access to cloud-native services. The use of PostgreSQL as a database, coupled with a 'Data Connector' that provides customer-specific PostgreSQL databases on AWS, suggests data is well-structured and accessible, facilitating data migration. The presence of RESTful APIs and numerous standard integrations (Salesforce, Gainsight, Stripe, Zoom, Webex, etc.) indicates an architecture designed for interoperability, which can simplify the re-integration of services post-migration. Compliance with SOC 2 Type II and GDPR also suggests well-defined data governance and security practices that would aid in meeting compliance requirements in a new environment. However, several factors introduce uncertainty and potential challenges. The mention of 'Linux (Virtual Machines)' in the internal tech stack suggests that the architecture might not be fully containerized or microservices-based, which could increase the effort required for a complete cloud-native migration compared to a purely serverless environment. A critical missing piece is information on 'Data Residency Requirements,' which could significantly impact migration strategy and complexity if specific geographic data storage is mandated. The 'Total Vendors: 0' data point, despite 26 services from 3 countries, creates ambiguity regarding the actual number of distinct vendor relationships. This makes it difficult to accurately assess vendor lock-in risk, which could be high if many services are provided by a limited number of vendors. Financial stability data is also missing, which is crucial for assessing the company's ability to fund a potentially significant migration effort.
Compliance
7 in-scope frameworks identified; showing 3.
ISO 27001 (source) — Assessment Required
No ISO 27001 certification is claimed or evidenced for Skilljar itself. However, Skilljar's hosting infrastructure (AWS) holds ISO 27001 certification, providing an inherited control environment. The risk is Low because: (a) Skilljar has SOC 2 Type II (which covers overlapping security controls); (b) AWS ISO 27001 covers the underlying infrastructure; (c) ISO 27001 is not a regulatory requirement for US-based SaaS companies — it is a voluntary framework; (d) the absence of ISO 27001 does not create legal or regulatory risk, only a potential competitive disadvantage with enterprise customers who require it. Many SaaS companies of Skilljar's profile rely on SOC 2 Type II rather than ISO 27001.
Evidence: https://www.skilljar.com/security, https://cloudsecurityalliance.org/star/registry/skilljar, https://aws.amazon.com/security/
CPRA — Compliant
Skilljar's Privacy Notice (last updated June 10, 2025) explicitly addresses CCPA/CPRA requirements in detail, including: disclosure of personal information categories collected and shared, opt-out rights for sale/sharing of personal information, data subject rights (access, deletion, correction, portability), non-discrimination provisions, Global Privacy Control (GPC) signal recognition, and California Shine the Light law compliance. The company has a dedicated privacy contact (privacy@gainsight.com) and processes requests within 30 days. Risk is Low given the comprehensive and current CCPA/CPRA disclosures.
Evidence: https://www.skilljar.com/privacy, https://oag.ca.gov/privacy/ccpa
Salesforce AppExchange Security Review — Compliant
Skilljar has successfully completed the Salesforce.com Security Review and is listed on the Salesforce AppExchange. This is a mandatory security assessment for any application listed on the AppExchange, covering data security, authentication, and coding practices. Compliance is confirmed and publicly verifiable via the AppExchange listing.
Evidence: https://www.skilljar.com/security, https://appexchange.salesforce.com/appxListingDetail?listingId=a0N30000000q7aIEAQ
Financials
Three-year financials
- 2024:
- 2023:
- 2022:
Financial Resilience Score: 7/10
Skilljar demonstrates moderate-to-strong financial resilience despite the absence of public financial disclosures. As a private company acquired by Gainsight (a Vista Equity Partners portfolio company), Skilljar benefits from significant strategic backing, providing balance-sheet support, cross-sell distribution opportunities, and integration into a broader customer success software suite. The company's sticky SaaS revenue model, characterized by high switching costs from course content migration, SSO, and Salesforce/Gainsight integrations, typically translates to strong gross retention rates. Skilljar's marquee enterprise customer base—including Cisco, Delta, DocuSign, Shopify, Tableau, Asana, Smartsheet, and Qualtrics—suggests solid annual contract values and strong reference-selling capabilities. The company has been consistently recognized as a category leader in G2 and TrustRadius for external LMS/customer training. Prior to acquisition, Skilljar raised approximately $33M in a growth investment led by Insight Partners in Feb 2021 and appeared on the Inc. 5000 list in both 2021 and 2022, indicating strong historical growth. However, resilience is tempered by several risks: complete financial opacity as a private subsidiary, niche category concentration in external/customer LMS, competition from Docebo, Thought Industries, Northpass, and Absorb, integration risk under Gainsight ownership including potential brand dilution, and customer base concentration in B2B software companies that have faced budget pressures in 2023-2024.
Key strengths: Strategic backing from Gainsight and Vista Equity Partners, Sticky SaaS revenue model with high switching costs, Marquee enterprise customer base (Cisco, Delta, DocuSign, Shopify, Tableau), Category leadership in external LMS/customer training, $33M Insight Partners growth investment (2021), Inc. 5000 recognition in 2021 and 2022
Risk factors: Complete financial opacity as private acquired subsidiary, Niche category concentration in external/customer LMS, Competition from Docebo, Thought Industries, Northpass, Absorb, Integration risk and brand dilution under Gainsight ownership, SaaS budget discretionary spending vulnerable in downturns, Customer concentration in B2B software sector facing budget pressure
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.