X Corp.

United States · twitter.com · 43 vendors

X Corp. is an American technology company that operates the social networking service X, formerly known as Twitter. Established by Elon Musk in 2023 as the successor to Twitter, Inc., the company aims to transform the platform into an "everything app" by integrating social media with payments, messaging, banking, and other services.

Resilience scores

Technology vendors

Services catalogue

27 services in catalogue across 5 categories; runs on 43 sub-vendors.

Insights

Last updated 2026-03-03 · revision 5

43 direct vendors, 316 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

X Corp. exhibits high migration readiness, primarily driven by its highly modern and cloud-native oriented tech stack. The extensive use of containerization (Kubernetes, Docker) and a microservices architecture (Finagle, Scala-based microservices) significantly reduces the complexity and effort required for migrating workloads. The existing adoption and utilization of major public cloud platforms (GCP, AWS) demonstrate a foundational capability and experience with cloud environments, making further migration or cloud optimization more straightforward. The contradictory vendor data, particularly "Total Vendors: 0," if interpreted as minimal external dependencies, would suggest a low vendor lock-in risk, which is a significant advantage for migration flexibility. The assessment is constrained by the absence of data regarding the regulatory environment and specific data residency requirements, which could introduce unforeseen complexities or costs during a migration. Financial stability data is also missing, making it difficult to assess the company's capacity to fund a large-scale migration effort. The ambiguity in vendor data (contradiction between "Total Vendors: 0" and other vendor-related details) prevents a precise evaluation of vendor lock-in risks or the complexity of migrating away from specific vendor services. However, the geographic diversity of reported vendor HQs (6 countries) suggests that any existing vendor relationships might not be overly concentrated in a single region, which is a minor positive for migration complexity.

Compliance

6 in-scope frameworks identified; showing 3.

CPRA — Assessment Required

X Corp processes personal information of California residents and likely exceeds revenue thresholds ($25M+ annual revenue). High risk due to: (1) Statutory damages up to $7,500 per violation, (2) Consumer right to sue for data breaches, (3) Extensive disclosure and deletion rights, (4) Opt-out requirements for data sales, (5) Regular enforcement actions by California AG

Digital Services Act — Assessment Required

X Corp likely qualifies as Very Large Online Platform (VLOP) under DSA due to 45M+ monthly EU users threshold. High risk due to: (1) Extensive compliance obligations including risk assessments, (2) Content moderation requirements, (3) Transparency reporting, (4) External audits, (5) Potential fines up to 6% of global annual turnover, (6) Possible service suspension in EU

GDPR (source) — Assessment Required

X Corp processes personal data of EU/EEA residents through its social media platform, making GDPR applicable. High risk due to: (1) Potential fines up to 4% of global annual turnover or €20M, whichever is higher, (2) History of regulatory scrutiny in EU, (3) Large-scale personal data processing including sensitive categories, (4) Cross-border data transfers, (5) High-profile nature increases enforcement likelihood

Financials

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report