Zeta Global

United States · zetaglobal.com · 49 vendors

Zeta Global is an AI-powered marketing technology company that offers a cloud-based platform to help enterprises acquire, grow, and retain customers. Its Zeta Marketing Platform (ZMP) unifies customer data, leverages artificial intelligence and proprietary data, and enables omnichannel activation across various marketing channels.

Resilience scores

Technology vendors

Services catalogue

3 services in catalogue across 3 categories; runs on 49 sub-vendors.

Insights

Last updated 2026-09-13 · revision 1

49 direct vendors, 359 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Zeta Global exhibits high migration readiness, primarily driven by its highly modern and cloud-native technology stack. The extensive use of AWS, Kubernetes for container orchestration, and Docker for containerization indicates a microservices-oriented architecture that is inherently portable and scalable. The adoption of tools like Terraform for infrastructure-as-code and Jenkins for continuous integration/delivery further streamlines deployment and migration processes. The company's focus on advanced technologies like AI/ML, real-time data processing, and a "Cloud-Based SaaS Platform" confirms a forward-thinking approach that aligns well with modern cloud migration strategies. Information regarding specific regulatory environments and data residency requirements is not provided ("Not specified"), which could introduce complexities if strict compliance mandates arise during a migration. Similarly, the financial stability data is missing, which is crucial for funding large-scale migration efforts. The vendor relationship data is contradictory; while "Total Vendors: 0" would imply minimal vendor lock-in, the mention of "Vendor HQ Countries: United States, Israel" suggests some external dependencies. The "Vendor Lock-in Risk" is explicitly unknown, representing a potential challenge that would need to be thoroughly assessed to ensure a smooth migration. However, the robust internal tech capabilities suggest a strong ability to manage or mitigate any existing vendor lock-in.

Compliance

11 in-scope frameworks identified; showing 3.

US State Privacy Laws — Assessment Required

As of 2024-2025, 20+ US states have enacted comprehensive privacy laws. Zeta Global's data broker business model — processing personal data of hundreds of millions of US consumers — means it is subject to virtually all enacted state privacy laws. Key laws include: Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Texas TDPSA, Florida FDBR, Oregon OCPA, Montana MCDPA, and Washington My Health Data Act (MHMDA). The MHMDA is particularly relevant as it covers consumer health data used for marketing purposes, which Zeta may process for pharmaceutical/health clients. High risk because: (1) multi-state compliance complexity is significant, (2) enforcement is increasing across states, (3) health data provisions in Washington and Nevada create additional obligations, (4) the company's scale means it processes data of residents in all 50 states.

Evidence: https://zetaglobal.com/privacy-policy/, https://zetaglobal.com/privacy-choices/, https://zetaglobal.com/resource-center/data-responsibility/

SEC Disclosure Requirements — Partially Compliant

Zeta Global Holdings, Inc. (NYSE: ZETA) is a publicly traded company subject to SEC disclosure requirements, including the SEC's 2023 Cybersecurity Disclosure Rules (effective December 2023). These rules require: (1) disclosure of material cybersecurity incidents within 4 business days on Form 8-K, (2) annual disclosure of cybersecurity risk management, strategy, and governance in Form 10-K. As a publicly traded data company, Zeta must also disclose material privacy risks and regulatory compliance risks. Medium risk because: (1) the company is publicly traded and subject to SEC oversight, (2) cybersecurity incidents involving consumer data could be material, (3) the company's data broker business model creates privacy-related material risk disclosure obligations.

Evidence: https://investors.zetaglobal.com/, https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=ZETA&type=10-K&dateb=&owner=include&count=40

ePrivacy Directive — Partially Compliant

Zeta Global's core business involves tracking technologies (cookies, pixels, device fingerprinting) for behavioral advertising and identity resolution. The EU ePrivacy Directive (and its national implementations) requires prior informed consent for non-essential cookies and tracking technologies. The company's EU-facing websites (zetaglobal.fr, zetaglobal.es, zetaglobal.co.uk) and its adtech services (programmatic display, identity resolution) are directly subject to ePrivacy requirements. High risk because: (1) tracking/cookies are central to Zeta's business model, (2) EU DPAs have been actively enforcing cookie consent requirements, (3) the IAB Europe TCF (Transparency and Consent Framework) — which Zeta likely uses — has itself been found non-compliant by the Belgian DPA, (4) cookie consent enforcement has resulted in significant fines across EU member states.

Evidence: https://zetaglobal.com/privacy-policy/, https://zetaglobal.fr/, https://zetaglobal.es/, https://zetaglobal.co.uk/

Financials

Three-year financials

Financial Resilience Score: 6/10

Zeta Global demonstrates strong top-line momentum, having crossed $1B in revenue in FY2024 with 38% YoY growth, one of the fastest growth rates in the marketing-cloud sector. The company has grown revenue more than 3x since its mid-2021 IPO while progressively narrowing GAAP operating losses and expanding Adjusted EBITDA margins from ~14% in FY22 to ~20% in FY24. A Q1-2024 equity offering raised ~$258M in net proceeds, strengthening the balance sheet, and operating cash flow has turned solidly positive. However, financial resilience is tempered by persistent GAAP losses driven by very high stock-based compensation (25-35% of revenue), which dilutes shareholders. The November 2024 Culper Research short report alleging aggressive accounting and questionable customer practices remains a material reputational and legal overhang despite company rebuttals. Additional risks include exposure to agency/reseller channels, privacy/regulatory pressures on identity data, founder concentration via dual-class shares, and cyclical marketing-spend sensitivity. Overall, growth and improving unit economics support a moderately positive resilience profile, but ongoing GAAP losses and the short-seller controversy prevent a higher score.

Key strengths: Revenue crossed $1B in FY2024 with 38% YoY growth, Adjusted EBITDA margin expanded from ~14% (FY22) to ~20% (FY24), Q1-2024 equity offering raised ~$258M net proceeds, Operating cash flow turned solidly positive, Scaled customer base growing: ~475 customers >$100K ARR, ~155+ >$1M ARR, Proprietary Zeta Data Cloud as competitive differentiator, No single customer >10% of revenue

Risk factors: Persistent GAAP operating losses, High stock-based compensation (25-35% of revenue) causing dilution, November 2024 Culper Research short report alleging aggressive accounting, Customer concentration and agency-channel exposure, Privacy and regulatory risks (GDPR, CCPA, cookie/ID rules), Founder/leadership concentration with dual-class share structure, Cyclical exposure to marketing spend, Predominantly US-revenue concentration (~85-90%)

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report