Trust & Will

United States · www.trustandwill.com · 25 vendors

Resilience scores

Technology vendors

Services catalogue

3 services in catalogue across 1 category; runs on 25 sub-vendors.

Insights

Last updated 2026-08-16 · revision 2

25 direct vendors, 264 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Trust & Will exhibits a medium-to-high level of migration readiness. The company's adoption of Amazon Web Services (AWS) and modern technologies like Contentful CMS and AI-powered recommendations indicates a cloud-oriented and adaptable tech stack, which significantly facilitates potential migration efforts. The existing implementation of SOC 2 Type II and HIPAA compliance frameworks, while adding complexity to migration planning, also suggests a structured approach to data governance and security that can be leveraged during a transition. Conversely, several critical information gaps hinder a complete assessment. Data residency requirements are not specified, which could introduce significant challenges and compliance hurdles if strict regulations apply. The lack of information regarding financial stability (revenue concentration, growth history) makes it difficult to assess the company's capacity to fund a potentially costly migration. Furthermore, the 'Vendor Lock-in Risk' is unknown. The provided data states 'Total Vendors: 0' but also 'Total Services: 25' and lists vendor geographic diversity, creating an ambiguity. Assuming the company utilizes external services, the lack of clarity on the actual number of vendors and their contractual terms makes it challenging to accurately assess potential vendor lock-in, which could increase migration complexity if critical dependencies are difficult to replace.

Compliance

9 in-scope frameworks identified; showing 3.

CPRA — Assessment Required

Trust & Will is headquartered in San Diego, California, making CCPA/CPRA directly applicable. The CCPA/CPRA applies to for-profit businesses that: (1) have annual gross revenues exceeding $25 million; (2) buy, sell, or share personal information of 100,000+ consumers or households annually; or (3) derive 50%+ of annual revenues from selling consumers' personal information. Trust & Will has served 'hundreds of thousands of families' (per their About page), strongly suggesting they meet the 100,000+ consumer threshold. The risk level is High because: (1) California is the most aggressive US state privacy regulator with active enforcement by the California Privacy Protection Agency (CPPA); (2) Trust & Will collects highly sensitive personal information (financial assets, family relationships, health directives, beneficiary information); (3) violations can result in fines of $2,500 per unintentional violation and $7,500 per intentional violation; (4) the company's privacy policy details are not publicly confirmed as CCPA-compliant; (5) the CPPA has demonstrated willingness to pursue enforcement actions against technology companies.

Evidence: https://www.trustandwill.com/security, https://www.trustandwill.com/about, https://www.bbb.org/us/ca/san-diego/profile/legal-information-services/trust-will-1126-1000057285/, https://cppa.ca.gov/, https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.100

FTC Act — Assessment Required

The Federal Trade Commission (FTC) has broad authority under Section 5 of the FTC Act to regulate unfair or deceptive practices, including data privacy and security failures. Trust & Will is subject to FTC jurisdiction as a US-based online service provider. The risk level is Medium because: (1) the FTC has increasingly pursued enforcement actions against companies that fail to honor privacy promises or maintain adequate security; (2) Trust & Will makes explicit security promises ('bank-level encryption,' 'never sell or share your information without consent') that create FTC liability if not fulfilled; (3) the company handles highly sensitive personal and financial information; (4) the FTC's 2023 Safeguards Rule amendments and ongoing privacy enforcement create ongoing compliance obligations; (5) however, Trust & Will's SOC 2 Type II and HIPAA certifications demonstrate a proactive security posture that reduces FTC enforcement risk.

Evidence: https://www.trustandwill.com/security, https://www.ftc.gov/business-guidance/privacy-security, https://www.ftc.gov/legal-library/browse/statutes/federal-trade-commission-act

HIPAA (source) — Compliant

Trust & Will explicitly states on its security page that it has undergone a HIPAA examination resulting in an independent CPA's report and certification. HIPAA applies because Trust & Will's estate planning documents include healthcare directives (medical preferences, advance healthcare directives, powers of attorney for healthcare), which may involve Protected Health Information (PHI) or health-related personal data. The risk level is Medium rather than Low because: (1) HIPAA compliance must be continuously maintained and re-audited; (2) the company handles sensitive health directive information for hundreds of thousands of users; (3) HIPAA violations can result in significant civil and criminal penalties ($100–$50,000 per violation, up to $1.9M per violation category annually); (4) the specific scope and recency of the HIPAA examination is not publicly disclosed. The company's proactive HIPAA certification significantly mitigates risk.

Evidence: https://www.trustandwill.com/security, https://aws.amazon.com/security/, https://www.hhs.gov/hipaa/index.html

Financials

Three-year financials

Financial Resilience Score: 6/10

Trust & Will is a well-funded private US legal-tech company with over $83M in cumulative equity capital raised from strategic investors including UBS Next, Northwestern Mutual Future Ventures, Jackson National, Moderne Ventures, and Fifth Third Bank. The March 2025 $25M Series C extension led by UBS Next demonstrates continued investor confidence and extends runway during a tighter fintech funding environment. The company has shown consistent multi-hundred-percent 3-year revenue growth (670% in 2024, 466% in 2025 per Inc. 5000), and its B2B2C flywheel with 26,000+ financial advisors and enterprise partnerships provides recurring, low-CAC distribution. However, resilience is constrained by lack of audited financials, unclear path to profitability (repeated fundraising suggests continued cash burn), single-country concentration (100% US revenue), and competitive pressure from larger players like LegalZoom. Estate planning is a low-frequency purchase category, making recurring revenue via the EstateOS membership critical to long-term unit economics. Overall, the company shows strong growth momentum and strategic backer support, but continued reliance on venture capital rather than operating profit tempers the resilience score.

Key strengths: Strong strategic backers (UBS, Northwestern Mutual, Jackson National, Fifth Third Bank) providing both capital and distribution, $83M+ cumulative equity funding raised since 2017, Consistent multi-hundred-percent 3-year revenue growth (Inc. 5000: 670% in 2024, 466% in 2025), B2B2C distribution flywheel with 26,000+ financial advisors, Category leadership with #1 rankings from Forbes Advisor, Business Insider, ConsumerRating, Recent $25M Series C extension (March 2025) provides runway, $300B+ in estate assets on platform, 1M+ families served, B Corp certification and strong brand recognition

Risk factors: Private-company opacity with no audited financials publicly available, Path to profitability unclear; repeated fundraising suggests continued cash burn, Low-frequency purchase category challenges SaaS-style unit economics, Competitive pressure from LegalZoom (public), Wealth.com, FreeWill, GoodTrust, Rocket Lawyer, Fabric, 100% US revenue concentration; no international diversification, State-by-state UPL (unauthorized practice of law) regulatory risk, Reliance on equity capital exposes company to venture funding cycles, Decelerating growth rate (670% to 466% 3-year growth)

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report