Tawk.to

United States · www.tawk.to · 25 vendors

Tawk.to is a free live chat software solution that enables businesses to monitor website visitors and communicate with them in real-time. It provides a customizable chat widget, visitor tracking, a ticketing system, and a knowledge base. The company generates revenue through optional paid services such as hired chat agents and AI assist.

Resilience scores

Disruption prediction

Tawk.to has an estimated 13% probability of disruption in the next 6 months.

14 of Tawk.to's 25 vendors monitored for disruptions.

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 25 sub-vendors.

Insights

Last updated 2026-07-30 · revision 2

25 direct vendors, 289 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Tawk.to exhibits high migration readiness, primarily driven by its existing adoption of Google Cloud Platform (GCP) and a modern, cloud-native friendly internal tech stack. Technologies such as Vue.js, React, Node.js, JavaScript (ES6+), TypeScript, WebSockets, and AI/Large Language Models are highly portable and compatible with cloud environments, suggesting a flexible and adaptable architecture. The 'Globally Distributed Cloud Architecture' further implies a design that is already conducive to migration or expansion within cloud platforms. The vendor relationships, despite the ambiguous 'Total Vendors: 0' entry, show geographic diversity across 7 countries, which could indicate a lower risk of vendor-specific technology lock-in if external vendors are indeed utilized. However, significant unknowns exist that prevent a perfect score. There is no specified data on data residency requirements or the regulatory environment, both of which can introduce substantial complexity and cost to any migration effort. The financial stability (revenue concentration, growth history) is also unknown, which impacts the ability to fund a major migration. The 'Unknown' vendor lock-in risk is another critical factor; while the tech stack suggests flexibility, specific dependencies could still pose challenges. Overall, the strong existing cloud presence and modern technology base provide a solid foundation for migration, but the critical data gaps introduce unquantified risks.

Compliance

6 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Assessment Required

ISO 27001 is the international standard for Information Security Management Systems (ISMS). For a SaaS company like Tawk.to that processes personal data for millions of businesses globally, ISO 27001 certification provides independent assurance of information security controls. The risk is MEDIUM because: (1) no ISO 27001 certification is publicly disclosed, (2) the company processes sensitive communication data at scale, (3) ISO 27001 is increasingly required by enterprise customers and EU-based clients (especially post-GDPR), and (4) without certification, Tawk.to cannot demonstrate systematic information security management to regulators or customers. However, the risk is not HIGH because ISO 27001 is not legally mandated (unlike GDPR), and the company's use of Google Cloud infrastructure inherits some security controls from Google's own ISO 27001 certification.

Evidence: https://www.tawk.to/, https://www.tawk.to/legal/, https://www.tawk.to/data-protection/

GDPR (source) — Partially Compliant

Tawk.to is a globally deployed SaaS live chat platform used by millions of businesses worldwide, including extensively across the EU/EEA. As a data processor for its business customers and a data controller for its own user data, it processes vast quantities of personal data belonging to EU/EEA residents (end-user chat conversations, IP addresses, visitor tracking data, geo-IP data). The scale is enormous — over 3 billion monthly interactions. GDPR fines can reach €20M or 4% of global annual turnover. While tawk.to maintains a Privacy Policy and a dedicated Data Protection page, there is no publicly verifiable evidence of a formal DPO appointment, SCCs for international data transfers, or a comprehensive GDPR audit. The company is US-headquartered but clearly targets and serves EU markets, making GDPR fully applicable under the extraterritorial scope of Article 3(2). The risk is HIGH due to the scale of personal data processing, cross-border data transfers (US-hosted on Google Cloud), and the absence of publicly confirmed compliance certifications.

Evidence: https://www.tawk.to/legal/, https://www.tawk.to/privacy-policy/, https://www.tawk.to/data-protection/, https://www.tawk.to/terms-of-service/

CPRA — Assessment Required

Tawk.to is incorporated and headquartered in Las Vegas, Nevada (US), and operates as a global SaaS platform. The California Consumer Privacy Act (CCPA), as amended by the CPRA, applies to for-profit businesses that: (1) have annual gross revenues exceeding $25M, OR (2) buy, sell, or share personal information of 100,000+ California consumers/households annually, OR (3) derive 50%+ of annual revenues from selling/sharing personal information. Given that Tawk.to processes data for millions of businesses and billions of end consumers monthly, it almost certainly meets threshold (2) — processing personal information of well over 100,000 California consumers annually through its live chat platform. The risk is HIGH because CCPA/CPRA violations carry civil penalties of $2,500 per unintentional violation and $7,500 per intentional violation, with the California Privacy Protection Agency (CPPA) actively enforcing.

Evidence: https://www.tawk.to/, https://www.tawk.to/legal/, https://www.tawk.to/privacy-policy/

Financials

Three-year financials

Financial Resilience Score: 7/10

Tawk.to is a privately held, founder-led company that has been bootstrapped by choice since its founding in October 2013. The company self-describes as profitable and has achieved global category leadership in the live-chat market with approximately 20% market share per Datanyze rankings, exceeding competitors like Zendesk, Intercom, and LiveChat. Its freemium model creates a massive top-of-funnel with over 5 million business users and 3 billion monthly consumer interactions, providing structural distribution advantages via embedded 'Powered by tawk.to' branding that acts as free viral marketing. The company has diversified monetization across multiple vectors: branding removal ($29/mo), AI Assist ($29/mo), Hired Chat Agents ($1/hour), Virtual Assistants ($7/hour), and emerging video/voice and payments features. Its cost structure benefits from a Malaysia-based engineering hub and likely Southeast Asian delivery for chat agents, providing margin advantages over Silicon Valley competitors. Absence of VC funding means no debt overhang, dilution pressure, or forced exit timeline. However, the score is constrained by significant risks: the vast majority of users pay zero, creating dependence on low-conversion monetization; the live-chat category faces disruption from generative AI incumbents with vastly larger R&D budgets; the labor-intensive $1/hour agent line has thin BPO-like margins with FX and wage inflation exposure; and there is no audited financial transparency, which could hamper enterprise sales. Key-person risk with a tight founder-led leadership team is also material.

Key strengths: Bootstrapped and self-described profitable since founding — no VC debt or dilution, #1 market share in live chat (~20% per Datanyze), ahead of Zendesk, Intercom, LiveChat, Over 5 million business users and 3 billion monthly consumer interactions, Multiple monetization vectors: branding removal, AI Assist, Hired Agents, Virtual Assistants, video/voice, payments, Free viral distribution via embedded 'Powered by tawk.to' branding lowers CAC, Cost structure advantage with Malaysia engineering hub and Southeast Asian service delivery, Product suite expansion from live chat to full customer communications platform plus BPO services

Risk factors: Extremely low ARPU — vast majority of users pay $0, AI disruption risk from OpenAI, Anthropic, Google, and better-funded SaaS competitors (Intercom Fin, Zendesk AI), Labor-intensive $1/hour hired-agent line exposed to wage inflation and FX in Southeast Asia, No audited financial transparency — friction for enterprise buyers, Key-person risk with tight founder-led leadership team, Data-privacy exposure (GDPR/CCPA, data residency) across millions of businesses globally, Concentration in a mature/commoditizing live-chat category

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report