Vercel Inc. Due Diligence

Run due diligence on Vercel Inc.: check incident history and compliance and get alerts when suppliers or ownership change.

United States · owned by Independent (United States) · vercel.com · 47 vendors

Vercel provides the developer tools and cloud infrastructure to build, scale, and secure a faster, more personalized web. The company offers a Frontend Cloud platform that enables developers to deploy web applications with AI capabilities, serverless computing, and global content delivery.

Resilience scores

Disruption prediction

Vercel Inc.: 1 critical incidents expected in the next three months, based on its recorded incident history.

Forecast estimates are rounded up to whole numbers.

No active incident reported (its status page, as of 2026-11-09 17:25 UTC)

19 of Vercel Inc.'s 47 vendors have incident tracking.

Technology vendors

Services catalogue

18 services in catalogue across 6 categories; runs on 47 sub-vendors.

Insights

Last updated 2026-11-04 · revision 57

47 direct vendors, 265 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

11 in-scope frameworks identified; showing 3.

EU AI Act (source) — No public evidence

Vercel provides an AI SDK and other AI-related products and services. Depending on the classification of these tools under the Act's risk-based approach, Vercel could have obligations as a provider of AI systems.

US Export Control Regulations — Evidence found

As a US company providing technology and services globally, Vercel must comply with US export control and sanctions regulations, which restrict transactions with certain countries, entities, and individuals.

Evidence: https://security.vercel.com/, https://vercel.com/legal/integrations-marketplace-agreement, https://vercel.com/templates/other/block-ofac-sanctioned-countries-firewall-rule

HIPAA (source) — Evidence found

Vercel offers its platform to healthcare-related customers in the US who handle Protected Health Information (PHI), making it a 'Business Associate' under HIPAA and requiring it to meet the law's security and privacy rules.

Evidence: https://www.paubox.com/blog/is-vercel-hipaa-compliant, https://vercel.com/changelog/hipaa-baas-are-now-available-to-pro-teams, https://vercel.com/security, https://sota.io/blog/vercel-eu-alternative-gdpr-cloud-act-2026

Financials

Three-year financials

Financial Resilience Score: 7/10

Vercel is a well-funded, high-growth private technology company with strong developer mindshare through its stewardship of the open-source Next.js framework and an expanding AI product suite (v0, AI Gateway, AI SDK). The company has raised approximately US$800M+ in total capital, including a ~US$250M Series F in May 2025 at a ~US$9.3B valuation, providing substantial liquidity runway. ARR has grown rapidly from ~US$100M in 2023 to a reported ~US$200M+ in 2025, backed by blue-chip enterprise customers such as Notion, Stripe, Adobe, and Nike. However, financial transparency is limited. Vercel does not file with the SEC and does not disclose operating income, net income, or shareholders' equity. The company is widely assumed to be operating at a loss given heavy R&D and infrastructure investment. Cost of goods sold is highly dependent on AWS, exposing margins to hyperscaler pricing dynamics, and competition from Cloudflare, Netlify, AWS Amplify, and hyperscaler AI platforms is intense. Overall resilience is supported by strong cash reserves and tier-1 investors, but tempered by unproven profitability and lack of audited disclosures.

Key strengths: ~US$800M+ total capital raised, including ~US$250M Series F in May 2025, ~US$9.3B valuation (May 2025), ~3x jump in 12 months, Rapid ARR growth (~2x per year 2021-2024), Strong open-source moat via Next.js framework, Blue-chip customer base (Notion, Stripe, Adobe, Nike, Washington Post), Blue-chip investor syndicate (Accel, GIC, Khosla, Tiger Global, GV, Salesforce Ventures), Strategic positioning in AI infrastructure (v0, AI Gateway, AI SDK, Eve)

Risk factors: No public disclosure of operating income, net income, or equity, Heavy dependency on AWS for underlying infrastructure and margin exposure, Intense competition from Cloudflare, Netlify, AWS Amplify, and hyperscalers, Concentration risk tied to Next.js ecosystem trajectory, Unproven profitability; likely operating at a loss, Historical reputational issues with surprise bandwidth billing, No audited financial statements available to counterparties

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report