Whatfix

United States · whatfix.com · 32 vendors

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 32 sub-vendors.

Insights

Last updated 2026-05-24 · revision 1

32 direct vendors, 333 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Whatfix exhibits a good level of migration readiness, primarily driven by its modern technological foundation and strong regulatory compliance framework. The company operates on "SOC 2 Type II compliant cloud infrastructure" and heavily utilizes advanced technologies such as Generative AI, Large Language Models, and its proprietary ScreenSense AI engine. This suggests a contemporary, likely cloud-native or cloud-friendly architecture that would facilitate migration to new cloud environments or services. Furthermore, Whatfix's adherence to stringent compliance standards, including HIPAA, GDPR, TISAX, BSI C5, and Cyber Essentials Plus, indicates a high degree of organizational maturity and established processes for managing complex data and security requirements. While these compliance needs add layers of complexity to any migration, the existing frameworks demonstrate the company's capability to navigate such challenges effectively. However, several critical data points are missing, which limit a comprehensive assessment. There is no information regarding data residency requirements, which could significantly impact migration strategies and choices of cloud regions. Financial stability data, including revenue concentration and growth history, is also absent, making it difficult to assess the company's capacity to fund a potentially large-scale migration. The vendor landscape, while indicating 12 services from vendors, notes these vendors are concentrated in only two countries (United States, Australia). This geographic concentration, coupled with the unknown "Vendor Lock-in Risk," suggests a moderate potential for vendor lock-in, which could complicate efforts to migrate away from existing services or renegotiate contracts. Despite these unknowns, the modern tech stack and robust compliance posture position Whatfix favorably for future migrations.

Compliance

4 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Compliant

Whatfix has achieved ISO 27001:2022 certification, demonstrating robust information security management systems. This significantly reduces security-related compliance risks and shows commitment to international security standards. The comprehensive security framework and regular audits further minimize risk.

Evidence: https://whatfix.com/security-framework-policy/

GDPR (source) — Compliant

Whatfix demonstrates strong GDPR compliance with comprehensive privacy policies, data subject rights implementation, and EU-US Data Privacy Framework certification. However, as a US-headquartered company processing EU personal data, ongoing compliance monitoring is critical due to evolving regulatory landscape and potential enforcement actions. The company has implemented appropriate technical and organizational measures, but cross-border data transfers always carry inherent compliance risks.

Evidence: https://whatfix.com/privacy-policy/, https://whatfix.com/security-framework-policy/, https://www.dataprivacyframework.gov/

SOC 2 (source) — Compliant

Whatfix has achieved SOC2 Type 2 attestation, demonstrating strong compliance with security, availability, and confidentiality criteria. As a cloud services provider, this is appropriate and expected. The low risk reflects their documented compliance status and the comprehensive security framework they have implemented.

Evidence: https://whatfix.com/security-framework-policy/

Financials

Three-year financials

Financial Resilience Score: 7/10

Whatfix demonstrates strong financial resilience driven by exceptional top-line growth (~80%+ YoY for two consecutive years), a well-funded balance sheet following a USD 100M Series E in July 2024 led by Warburg Pincus, and cumulative funding of over USD 240M across Series A-E. The company crossed USD 70M ARR in 2024 with management targeting USD 100M ARR and IPO readiness by FY25-FY26. Enterprise customer base includes blue-chip logos like Marriott, Experian, and the US Army, supporting gross retention and pricing power. However, sustained net losses (cumulative ~INR 600Cr+ over FY22-FY24) reflect dependence on external capital, though FY24 losses narrowed to ~INR 225Cr from ~INR 268Cr in FY23, suggesting improving unit economics. The multi-year runway from the Series E provides financial flexibility, but the company remains unprofitable and exposed to competitive pressures, particularly from SAP's acquisition of WalkMe and platform-native AI assistants (Microsoft Copilot, Salesforce Agentforce, ServiceNow Now Assist) that could commoditize the standalone DAP category.

Key strengths: Revenue growth of ~77% YoY in FY24 and ~86% in FY23, USD 100M Series E funding in July 2024 led by Warburg Pincus, Cumulative funding of USD 240M+ providing multi-year runway, ARR crossed USD 70M with target of USD 100M, Blue-chip enterprise customer base (Marriott, Experian, US Army), Category leadership recognized by Gartner, G2, and Everest Group, Losses narrowing in FY24 despite continued growth

Risk factors: Cumulative losses exceeding INR 600Cr over FY22-FY24, Continued dependence on external capital, Intensifying competition from SAP-WalkMe acquisition, AI commoditization risk from Microsoft Copilot, Salesforce Agentforce, ServiceNow Now Assist, Narrow IPO window for unprofitable SaaS companies, FX exposure with INR costs and USD/EUR revenues, Competition from Pendo, Userlane, Spekit, and platform-native tools

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report