Xandr (formerly AppNexus)

United States · www.xandr.com · 43 vendors

Xandr, Inc. is an advertising and analytics technology company that operates a global marketplace for premium digital advertising. It provides a data-enabled platform, including Xandr Invest and Xandr Monetize, to optimize return on investment for both advertisers and publishers. The company offers solutions for programmatic advertising, data-driven targeting, and advanced analytics across various channels like CTV, display, and mobile.

Resilience scores

Technology vendors

Services catalogue

11 services in catalogue across 5 categories; runs on 43 sub-vendors.

Insights

Last updated 2026-07-30 · revision 9

43 direct vendors, 368 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Xandr's migration readiness is assessed as medium, scoring 50. On one hand, the company possesses a highly modern and cloud-native internal tech stack, utilizing Microsoft Azure, Kubernetes, Docker, Python, and advanced data processing frameworks like Apache Kafka and Spark. This technical foundation, coupled with strong regulatory compliance (GDPR, SOC2, ISO 27001) and flexible data residency options, would facilitate migrations *within* the Microsoft Azure ecosystem or to other cloud environments if the services were loosely coupled. Microsoft's financial backing also ensures the ability to fund significant migration efforts. However, the most significant challenge to migration readiness is the extreme vendor lock-in to Microsoft. The data explicitly states 'Total Vendors: 0,' indicating that Xandr, as Microsoft Advertising, is entirely reliant on Microsoft's internal services and infrastructure. While this integration offers operational efficiencies, it means that a migration *away* from Microsoft would be a highly complex, costly, and time-consuming re-platforming effort, rather than a straightforward lift-and-shift. The extensive use of Microsoft-specific services (e.g., Azure, Copilot, Microsoft Advertising Platform) further deepens this dependency. Therefore, while the underlying technical components are modern and potentially portable, the deep integration into the Microsoft ecosystem significantly reduces the readiness for a migration to an entirely different vendor or cloud provider.

Compliance

5 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Compliant

Microsoft maintains ISO 27001 certification for its information security management systems across its cloud services. As a major technology company, Microsoft has implemented comprehensive information security controls. Risk is low due to Microsoft's established security practices and regular certification audits.

Evidence: https://privacy.microsoft.com/en-us/privacystatement

NIS2 (source) — Assessment Required

Microsoft Advertising (including Xandr) operates as a digital service provider but may not clearly fall under NIS2's Essential or Important Entity categories. The directive primarily targets critical infrastructure and essential services. While Microsoft provides digital infrastructure services, the advertising platform specifically may not meet the sector-specific criteria. Risk is low due to Microsoft's strong cybersecurity practices and the advertising platform's non-critical nature to essential services.

Evidence: https://privacy.microsoft.com/en-us/privacystatement

SOC 2 (source) — Compliant

Microsoft maintains comprehensive SOC2 compliance across its cloud services and platforms. As a major cloud service provider, Microsoft has established SOC2 Type II controls for security, availability, processing integrity, confidentiality, and privacy. Risk is low due to Microsoft's mature compliance program and regular third-party audits.

Evidence: https://privacy.microsoft.com/en-us/privacystatement

Financials

Financial Resilience Score: 9/10

While Xandr's standalone financials are not public, its financial resilience is exceptionally strong due to its integration into Microsoft, one of the world's largest and most financially robust technology companies. Microsoft (NASDAQ: MSFT) possesses a massive market capitalization, substantial cash reserves, and diverse revenue streams from cloud computing (Azure), software (Office 365), gaming (Xbox), and hardware. This provides Xandr with unparalleled financial backing and stability. Xandr's programmatic advertising technology is a strategic asset for Microsoft, enhancing its ability to compete in the digital advertising market against giants like Google and Meta. Microsoft is investing in this area, indicating a long-term commitment. Xandr benefits from Microsoft's extensive resources, including R&D capabilities, global sales networks, data infrastructure, and talent pool, which significantly de-risks its operations and future growth. Xandr's technology (DSP, SSP, Ad Server) remains a critical component in the programmatic advertising ecosystem. Being part of Microsoft allows it to leverage Microsoft's vast user base (e.g., Bing, MSN, Xbox, LinkedIn) and data insights, strengthening its market position. Therefore, despite not having standalone financials, Xandr's financial resilience is considered very high due to its strategic importance and integration within a financially robust parent company like Microsoft.

Key strengths: Parent Company Strength, Strategic Importance, Resource Access, Market Position

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report