Spryker

Germany · spryker.com · 26 vendors

Resilience scores

Technology vendors

Services catalogue

3 services in catalogue across 1 category; runs on 26 sub-vendors.

Insights

Last updated 2026-08-17 · revision 2

26 direct vendors, 314 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Spryker exhibits very high migration readiness, primarily driven by its cutting-edge technology stack and architectural principles. The platform is built on a composable, headless, and API-first architecture, leveraging microservices, Docker, and Kubernetes. This design inherently promotes modularity, portability, and ease of re-platforming or migrating components. The 'Spryker App Composition Platform (ACP)' further enhances this by providing an ecosystem for integrating and swapping best-in-class third-party solutions, significantly reducing application-level vendor lock-in. The use of AWS also indicates experience with cloud infrastructure, facilitating cloud migrations. The assessment is limited by the lack of information regarding specific regulatory environments, data residency requirements, and Spryker's financial stability, all of which could influence the complexity and funding of a large-scale migration. While the architecture strongly suggests low vendor lock-in, the explicit 'Vendor Lock-in Risk: Unknown' and the ambiguous 'Total Vendors: 0' (despite 27 services from diverse countries) mean this aspect cannot be fully confirmed from the provided data. However, the architectural strengths heavily outweigh these unknowns for migration readiness.

Compliance

8 in-scope frameworks identified; showing 3.

ISAE 3000 (source) — Assessment Required

ISAE 3000 is relevant for Spryker if it provides assurance reports to clients about its internal controls, data processing practices, or security posture (e.g., as an alternative or complement to SOC 2 in European markets). European enterprise clients may request ISAE 3000-based assurance reports (particularly ISAE 3402 for service organizations) as part of their own audit and compliance processes. Risk is Medium because ISAE 3000 is not a regulatory requirement but a market expectation in certain European enterprise contexts.

Evidence: https://spryker.com/, https://www.iaasb.org/publications/international-standard-assurance-engagements-isae-3000-revised-assurance-engagements-other-audits-or

EU AI Act (source) — Assessment Required

Spryker explicitly markets 'AI Commerce' capabilities and AI-powered features on its platform (including AI-powered training portal 'Spryker Safari'). The EU AI Act, which entered into force in August 2024 with phased implementation, applies to providers and deployers of AI systems in the EU. Spryker, as an EU-based provider of AI-powered commerce tools, will need to assess its AI systems against the EU AI Act's risk classification framework. Risk is Medium as most commerce AI applications are likely 'limited risk' or 'minimal risk', but transparency obligations and documentation requirements still apply.

Evidence: https://spryker.com/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689

PCI DSS (source) — Assessment Required

Spryker is a commerce platform that integrates with payment providers (e.g., Stripe is mentioned as a technology partner). If Spryker's platform stores, processes, or transmits cardholder data, PCI DSS compliance is required. However, if Spryker uses tokenization and delegates all payment processing to certified payment service providers (PSPs), its PCI DSS scope may be significantly reduced. Risk is Medium pending clarification of Spryker's payment data handling architecture.

Evidence: https://spryker.com/, https://www.pcisecuritystandards.org/

Financials

Three-year financials

Financial Resilience Score: 6/10

Spryker Systems GmbH is a well-capitalized private, venture-backed SaaS company headquartered in Berlin. It has raised over ~US$215m across Series B and C rounds from top-tier investors including TCV, One Peak Partners, and Schroders Capital, culminating in a reported unicorn valuation (~US$1.1-1.4bn) at its September 2022 Series C extension. This capital base, combined with strong analyst recognition (Gartner Visionary 2025, IDC MarketScape Leader, Forrester Strong Performer 2024), supports enterprise sales credibility and provides a runway cushion typical of late-stage growth SaaS. However, financial resilience is tempered by significant uncertainty: Spryker has not publicly disclosed audited revenue, EBIT, equity, or ARR figures. As a private GmbH, statutory accounts should be available via Bundesanzeiger but were not accessible in this research session. The company operates in a highly competitive digital commerce market against commercetools, Shopify, SAP, Salesforce, Adobe, and BigCommerce. Reported layoffs in early 2023 amid the broader SaaS market correction suggest cost pressures, and no subsequent funding round has been announced since September 2022, making cash runway unverifiable. Enterprise/B2B focus (Automotive, Industrial Manufacturing, Life Sciences, Wholesale) implies large ACVs and longer contract terms, supporting revenue stability, but also longer sales cycles and cash conversion risk. Overall the company appears reasonably resilient given its capitalization and market positioning, but the lack of profitability disclosure and the 2023 restructuring warrant a moderate score.

Key strengths: Over ~US$215m raised cumulatively across Series B-C from TCV, One Peak, Schroders Capital, Unicorn valuation (~US$1.1-1.4bn) at Sept 2022 Series C extension, Strong analyst recognition: Gartner Visionary 2025, IDC MarketScape Leader, Forrester Strong Performer 2024, Enterprise B2B focus implying large ACVs and longer contract terms, Blue-chip customer references (e.g., Jungheinrich), Composable/headless positioning aligned with strongest growth segment of digital commerce

Risk factors: No publicly disclosed revenue, EBIT, or profitability figures, Reported layoffs in early 2023 amid SaaS market correction, No new funding round announced since September 2022 - cash runway unverifiable, Highly competitive market vs. commercetools, Shopify, SAP, Salesforce, Adobe, BigCommerce, Typically loss-making during VC-backed growth phase, Long enterprise sales cycles and cash conversion risk, Macro headwinds impacting high-growth SaaS valuations since 2022

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report