StreetLight Data

United States · www.streetlightdata.com · 23 vendors

StreetLight Data is a technology company that provides a mobility analytics platform, StreetLight InSight®, which leverages big data and machine learning to offer insights into transportation patterns. The platform delivers on-demand data and analytics for vehicular, bicycle, and pedestrian travel. It assists government agencies, businesses, and consultants in making data-driven decisions for transportation planning, infrastructure optimization, and policy development across North America.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 23 sub-vendors.

Insights

Last updated 2026-04-14 · revision 1

23 direct vendors, 247 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

StreetLight Data demonstrates medium migration readiness. The offering of a 'self-serve SaaS platform' and 'Traffic Data API,' along with the internal use of 'REST APIs,' suggests some existing cloud-oriented or API-driven architecture, which can facilitate migration. However, several factors present significant challenges. The internal tech stack includes 'PostGIS,' 'OpenStreetMap,' and 'ArcGIS/Esri,' which are powerful geospatial tools but can be complex to migrate to a fully cloud-native, containerized, or microservices architecture without significant re-platforming. 'SFTP' is an older protocol that may require modernization. The regulatory environment and data residency requirements are unknown, which are critical for migration planning and can significantly impact the choice of cloud providers, regions, and architecture, potentially increasing complexity and cost. Financial stability is also unknown, making it difficult to assess the company's ability to fund a potentially large-scale migration effort. 'Vendor Lock-in Risk' is unknown, and the contradictory vendor data (0 vendors vs. 15 services and geographic diversity) makes it hard to assess vendor concentration. If the 15 services are provided by a few critical vendors, this could lead to high lock-in, increasing migration complexity and cost. The moderate vendor geographic diversity (2 countries) does not fully mitigate the risk of vendor lock-in if the services themselves are highly specialized or proprietary.

Compliance

3 in-scope frameworks identified; showing 3.

GDPR (source) — Assessment Required

StreetLight Data is US-based but processes location data that could include EU/EEA residents' personal data through their transportation analytics platform. While they claim to use aggregated, de-identified data, GDPR applies to any processing of EU/EEA personal data regardless of aggregation. The company has privacy-by-design principles and works with data suppliers on opt-in basis, suggesting some privacy awareness, but no explicit GDPR compliance documentation found.

Evidence: https://www.streetlightdata.com/streetlight-data-privacy-principles/, https://www.streetlightdata.com/website-privacy-notice/

SOC 2 (source) — Assessment Required

As a SaaS platform provider handling customer data through their StreetLight InSight platform and APIs, SOC2 compliance would be expected for security, availability, and confidentiality controls. The company processes sensitive location data and serves enterprise and government clients who typically require SOC2 compliance. However, no SOC2 reports or certifications were found in public documentation.

Evidence: https://www.streetlightdata.com/self-service-location-intelligence-platform/, https://www.streetlightdata.com/traffic-data-api/

ISO 27001 (source) — Assessment Required

As a company handling sensitive location data and providing data analytics services to government and enterprise clients, ISO 27001 certification would demonstrate proper information security management. The company mentions security measures including 'multilayered network security architecture' and 'system audits and controls' but no ISO 27001 certification was found.

Evidence: https://www.streetlightdata.com/streetlight-data-privacy-principles/

Financials

Three-year financials

Financial Resilience Score: 7/10

StreetLight Data benefits from the full financial backing of its parent, Jacobs Solutions Inc. (NYSE: J), a publicly traded global engineering firm with approximately $14–16 billion in annual revenue and investment-grade credit. This effectively eliminates going-concern risk and provides StreetLight with capital access, distribution infrastructure, and strategic support that a standalone company of its size would not enjoy. The parent backstop is the single most significant factor underpinning financial resilience. The company operates a SaaS subscription model (StreetLight InSight®) serving primarily government agencies — state DOTs, MPOs, and federal bodies — which are characterized by multi-year budget cycles, stable procurement processes, and relatively low churn. SaaS businesses of this type typically achieve gross margins of 60–80%+, and the institutional government customer base provides revenue predictability that is structurally superior to project-based or transactional models. The Infrastructure Investment and Jobs Act (IIJA) represents a meaningful near-term tailwind for transportation analytics spending. Operational growth indicators are strong: the platform scaled from approximately 6,000 monthly projects at the time of acquisition in early 2022 to 10,000+ monthly analyses and over 1 million cumulative projects by 2024–2025, suggesting continued revenue growth post-acquisition. Market leadership, first-mover advantage, and the deepest mobility data repository in the U.S. market provide competitive moat and pricing power. Key risks that temper the score include data privacy regulatory exposure (CCPA, potential federal U.S. privacy law), dependency on third-party data providers, growing competition from well-funded rivals (Replica/Google-backed, HERE, TomTom), geographic concentration in North America, and the complete absence of public financial transparency which prevents independent verification of financial health at the subsidiary level.

Key strengths: Wholly-owned subsidiary of Jacobs Solutions Inc. (NYSE: J), ~$14–16B revenue parent with investment-grade credit — eliminates going-concern and capital access risk, SaaS subscription model (StreetLight InSight®) with high recurring revenue predictability and typical 60–80%+ gross margins, Predominantly government/public-sector customer base (state DOTs, MPOs, federal agencies) with stable multi-year procurement cycles and low churn, Market leadership and first-mover advantage as pioneer of mobility SaaS analytics (2015); covers 100% of U.S. Traffic Analysis Zones and 5M+ miles of roadway, Strong operational growth trajectory: ~6,000 monthly projects at acquisition (early 2022) to 10,000+ monthly analyses and 1M+ cumulative projects by 2024–2025, IIJA/Infrastructure Investment and Jobs Act provides structural tailwind for transportation analytics spending, Strategic cross-selling synergies within Jacobs' global engineering client base accelerate growth without proportional sales cost increases, Diversified blue-chip customer base spanning government, large engineering consultants (AECOM, Parsons, HDR, Kimley-Horn), and private sector (Ford, Uber, Siemens, Bloomberg)

Risk factors: Data privacy and regulatory risk: business model depends on processing location data from millions of mobile devices; evolving CCPA, potential federal U.S. privacy law, and GDPR exposure could restrict data sourcing or require costly compliance changes, Third-party data sourcing dependency: reliance on mobile network operators, app SDK providers, connected vehicle OEMs, and partners (e.g., TomTom); loss of a key data partner or price increases could affect product quality or margins, Competitive pressure from well-funded rivals including Replica (Google-backed), Streetlytics, HERE Technologies, and TomTom (also a partner), Government budget risk: significant revenue tied to public-sector transportation budgets subject to federal funding cycles and potential future cuts, Geographic concentration: platform primarily focused on U.S. and Canada; international expansion is nascent, limiting diversification, Post-acquisition integration risk: potential cultural friction, talent retention challenges, and product roadmap prioritization conflicts within a large engineering conglomerate, Complete financial opacity as a private subsidiary: no public audited financials available, preventing independent verification of financial performance

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report