Type Network

United States · www.typenetwork.com · 9 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 9 sub-vendors.

Insights

Last updated 2026-07-30 · revision 5

9 direct vendors, 169 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Type Network exhibits good migration readiness, leaning towards the higher end of medium. The company's internal tech stack is modern, leveraging Next.js, cloud-based services like Stripe and Sentry, and a CDN (Edgecast) for content delivery. The use of Wagtail CMS (Python-based) and standard font technologies (OpenType, WOFF/WOFF2) indicates a flexible and portable architecture, which is highly conducive to migration to new cloud environments or platforms. This modern foundation minimizes the challenges associated with legacy systems or monolithic architectures. However, migration efforts would be significantly impacted by the need to address multiple 'Assessment Required' regulatory compliance frameworks (GDPR, SOC 2, ISO 27001, CCPA/CPRA, PCI DSS) and explicit data residency requirements (EU-US DPF, SCCs, UK-US Data Bridge). While these are not technical blockers, they add considerable scope, complexity, and cost to any migration project, as compliance must be built into the new infrastructure and processes. Vendor lock-in is moderate; while services like Stripe and Edgecast are industry standards, migrating away from them would require integration effort. The geographic diversity of some implied vendors (US, Slovakia, Netherlands) is a positive, but the core SaaS dependencies are primarily US-based. The unknown financial stability (due to missing growth history) also presents an unquantified risk regarding the ability to fund a comprehensive migration that includes significant compliance work.

Compliance

6 in-scope frameworks identified; showing 3.

COPPA — Assessment Required

COPPA applies to US-based online services directed to children under 13 or that have actual knowledge of collecting personal information from children under 13. Type Network is a professional font licensing platform primarily targeting designers, developers, and businesses. It is unlikely to be directed at children. Risk is Low, but an assessment of the platform's terms of service and age verification mechanisms is warranted to confirm compliance.

Evidence: https://www.typenetwork.com/terms, https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa

SOC 2 (source) — Assessment Required

Type Network provides cloud-based font licensing and web font delivery services (SaaS/PaaS model), which places it squarely within the scope of organizations for which SOC 2 is relevant. Enterprise and business customers increasingly require SOC 2 Type II reports as a condition of vendor onboarding. The risk is Medium because: (1) without a SOC 2 report, Type Network may face barriers to enterprise sales and customer trust, (2) the company handles customer account data, billing information, and potentially sensitive design assets, (3) web font CDN delivery involves processing of end-user IP addresses and browsing data. The absence of a publicly disclosed SOC 2 report is a moderate business and compliance risk, particularly as enterprise customers in regulated industries (finance, healthcare, government) require vendor SOC 2 compliance.

Evidence: https://www.typenetwork.com, https://www.aicpa-cima.com/resources/landing/system-and-organization-controls-soc-suite-of-services

CPRA — Assessment Required

Type Network is a US-based company that likely serves California residents through its font licensing platform. CCPA/CPRA applies to for-profit businesses that: (1) have annual gross revenues exceeding $25M, OR (2) buy, sell, or share personal information of 100,000+ consumers/households annually, OR (3) derive 50%+ of annual revenues from selling/sharing personal information. As a digital platform with a global customer base, Type Network may meet the consumer data threshold. The risk is Medium because: (1) non-compliance with CCPA/CPRA can result in civil penalties of $2,500–$7,500 per intentional violation, (2) the California Attorney General actively enforces CCPA, (3) the company's web font CDN delivery may involve processing of California residents' IP addresses and browsing data at scale.

Evidence: https://www.typenetwork.com/privacy, https://oag.ca.gov/privacy/ccpa, https://cppa.ca.gov/

Financials

Three-year financials

Financial Resilience Score: 5/10

Type Network LLC is a small, privately held U.S. company with no publicly disclosed financial statements, making a precise resilience assessment impossible. Qualitatively, the company benefits from an asset-light marketplace/royalty business model that minimizes R&D and inventory risk, a premium enterprise client roster (Adidas, Disney, Microsoft, Ford, TikTok, NYT, Washington Post, Paramount) that typically produces sticky recurring licensing revenue, and a diversified supply side of approximately 100 foundries across 15 countries. Strong founder credibility (Roger Black, David Berlow, Petr van Blokland) provides industry access and reputation. On the risk side, the company is structurally small and competes against much larger platforms such as Adobe Fonts, Monotype, and free Google Fonts. Recent CEO turnover (Matthew Rechs resigned August 2024 after less than a year) suggests potential strategic or operational unsettlement. The royalty pass-through model compresses gross margins versus IP-owning foundries, and the rise of open-source variable fonts (e.g., TikTok Sans) may erode recurring licensing revenue. The niche size of the global type-licensing market (low single-digit billions USD) caps maximum scale. The midpoint score reflects a stable but small niche operator with limited transparency.

Key strengths: Asset-light marketplace/royalty business model, Premium enterprise client roster including Adidas, Disney, Microsoft, Ford, TikTok, Diversified supply of ~100 foundries across ~15 countries, Strong founder and industry credibility (Roger Black, David Berlow, Petr van Blokland), Expansion into non-Latin scripts (Indian, Southeast Asian, CJK) broadens addressable market

Risk factors: No public financial disclosure limits transparency and due diligence, Recent CEO turnover (Matthew Rechs resigned August 2024 after short tenure), Competitive pressure from Adobe Fonts, Monotype, and free Google Fonts, Open-source variable fonts trend may compress licensing revenue, Royalty pass-through model structurally lowers gross margins, Niche industry with limited maximum scale (low single-digit billions USD)

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report