Teardown

Supply chain · Deep dive

Resilinc

The incumbent supplier-risk SaaS, mapping multi-tier bills of material and surfacing supply chain disruptions to large manufacturers; backed by Vista Equity Partners.

emerging

The question that decides it: Does Resilinc's crowd-sourced multi-tier supplier graph remain defensible as hyperscaler-funded AI competitors (Everstream, Interos) build equivalent maps from public data in half the time, and as ERP incumbents (SAP, Oracle) start bundling supplier risk into existing procurement contracts?

My take

Revenue
$42-80M est. ARR (private)
Headcount
~500
Screen
Published
2026-11-02
Web
resilinc.ai
Elsewhere
LinkedIn · Crunchbase

Founders and leadership

Snapshot

Resilinc is the incumbent supplier risk-management SaaS: a platform that maps a buyer's multi-tier bill of materials, continuously monitors ~100,000 published event sources for disruptions, and alerts procurement teams within minutes of a fire, labor action, cyclone, bankruptcy, or geopolitical shock at a sub-tier supplier. Founded in 2010 by two former Flex Ltd. supply-chain operators, it took on growth capital from Vista Equity Partners in June 2021. The company has roughly 500 employees per SelectHub (2026), covers a reported 1,000+ enterprise customers including Boeing, GM, Johnson & Johnson, Bosch and Flex, and is the Gartner Peer Insights category leader for Supplier Risk Management by review count. The underlying question is whether a 15-year supplier graph remains defensible as AI-native entrants and ERP incumbents build competing maps on cheaper substrates.

Founding story

Bindiya and Sumit Vakil met at Flex (then Flextronics) in the mid-2000s. Bindiya ran commodity management and was deep in supplier risk; Sumit was in enterprise software architecture. The founding insight — recounted in a dozen podcast interviews since — came during the 2008 financial crisis, when a sub-tier Japanese electronics supplier went into creditor protection and Flex found out via a procurement officer's phone call, three weeks after it already mattered. The Vakils realized the problem was not "how do we respond to a disruption" but "the information lag between an event occurring at a sub-sub-supplier and the OEM finding out is three to twelve weeks, and the data to close that lag is public but no one is aggregating it." They left Flex in 2010 to build Resilinc. The name is a portmanteau of "resilient supply chain." Bindiya has since become one of the most-cited public voices in supply chain risk, writing columns for DC Velocity and sitting on CFR and CGD advisory panels.

How it works

Resilinc runs three layers. The first is the supplier graph: a crowd-sourced database of ~250,000 suppliers with their locations, specialties, ownership, dependencies, and (critically) which parts they ship to which customers. The graph is populated through two paths. Enterprise customers upload their own bills of material; suppliers themselves answer Resilinc "surveys" (per RapidRatings interview) to validate their inputs — a surprising amount of the data arrives this way because suppliers want their customers' resilience teams to see them. The graph then goes 2-5 tiers deep, which the company claims is deeper than any competitor.

The second layer is EventWatchAI, a 24/7 scan of over 100,000 open-source information streams — news wires, local newspapers in a dozen languages, government alerts, port-authority bulletins, bankruptcy registries, cyclone trackers, labor action feeds — looking for events that affect any supplier in the graph. When an event hits, Resilinc fires alerts to every customer whose BOM touches that supplier within minutes, before most enterprise procurement teams would otherwise see it. In the February 2024 Red Sea Houthi attacks on container shipping, Resilinc customers reportedly received disruption alerts and alternate-port routing suggestions 48-72 hours ahead of trade-press coverage (per the company; verified in a Boeing supply-chain presentation at CSCMP 2024).

The third layer is the risk-scoring and action-playbook stack: each supplier gets rolling financial-health, cyber, ESG, geopolitical and dependency scores. When an event fires, the system auto-generates a playbook — call this backup supplier, pre-position inventory, reroute via these ports.

Product and business overview

Resilinc sells four modules. Multi-Tier Mapping: the base graph service — 'show me every sub-sub-supplier involved in making the capacitor that goes into Model X.' EventWatchAI: the real-time disruption monitor. Supplier Intelligence: profile pages with financial health (RapidRatings integration), ESG scores, cyber posture, and ownership chains. Resilinc Agent (2025): an LLM-based assistant that lets procurement officers ask natural-language questions ("if the Taichung earthquake expands west, what's at risk?") and get synthesized answers against the graph. Three verticals have deeper plug-in configurations: aerospace (BOM-aware, FAA-traceable), medical devices (FDA UDI integration), and automotive (IATF-aligned).

Business model and pricing

Resilinc is enterprise SaaS, priced per module, per user, per supplier count. GetApp lists starting pricing around $25,000/year for a small implementation; large enterprise deals routinely clear $500,000-$1.5M annually per SelectHub and procurement benchmarks. Contracts are typically 3-year. The company retains a very high renewal rate (publicly cited as 95%+), which is the signature of the data-moat business: once your BOM is mapped and ingested, moving is expensive and the switching data is not easily extractable. Secondary revenue comes from supplier-paid "Verified Supplier" subscriptions, where suppliers pay a small fee (~$2,000-$8,000) to maintain enriched profiles seen by many buyers — a lightweight, high-margin layer.

Traction over time

Metric 2016 2020 2023 2024 2026
Suppliers in graph ~25,000 ~70,000 ~180,000 ~220,000 ~250,000+
Enterprise customers ~75 ~250 700+ ~900 1,000+
Employees ~75 ~200 ~400 ~450 ~500
Est. revenue (ARR) n/a ~$18M ~$40M ~$55M ~$75-80M

Sources: GetLatka (2024 est.); KonaEquity (2026 est.); SelectHub; CBInsights.

Market analysis

The addressable market for supplier risk + supply chain mapping is estimated at $4.5-6B globally per Gartner (2026), growing at ~15% CAGR, driven by two structural forces. First, regulatory: the German Supply Chain Due Diligence Act (LkSG, in force 2023), the EU Corporate Sustainability Due Diligence Directive (CSDDD, final 2026), the US Uyghur Forced Labor Prevention Act (UFLPA, in force 2022), and SEC climate-disclosure rules all legally require large companies to know their multi-tier suppliers in ways they did not have to five years ago. Second, operational: Covid, Ukraine, Red Sea and Taiwan-China escalation have made supplier mapping a board-level question. Companies that treated supply chain as an opex line are now treating it as a strategic risk.

Competitive intel

Everstream Analytics (Columbus, OH): the toughest head-to-head competitor; raised $200M+ including from Columbia Capital, StepStone and Morgan Stanley. Everstream started on logistics intelligence and bought upwards into supplier mapping; its differentiator is weather and freight data, where it is probably stronger than Resilinc. Teardown has a separate page on them. Interos (Washington DC): former defense-adjacent; raised a Series D at a $1B valuation in 2021; strongest in government and critical-infrastructure accounts; has struggled to extend fully into commercial. Craft.co: SF-based, AI-first, raised $44M; built a supplier graph using public data at speed and uses LLMs for enrichment — direct threat on cost per supplier mapped. Sphera: Blackstone-owned incumbent in environment, health and safety; added supply chain risk through M&A and bundles it under existing EHS contracts. Sourcemap: NYC-based, specializes in compliance-mapping (UFLPA, EUDR); narrower product, often used alongside Resilinc rather than against. The 800-pound incumbent threat is SAP Ariba Supplier Risk — SAP bundles supplier-risk indicators into Ariba Spend Analysis, which 70%+ of large manufacturers already run; the native integration is weaker than Resilinc but cheap, and SAP is iterating on its agentic Joule for supplier Q&A.

History and evolution

  • 2010: Bindiya and Sumit Vakil found Resilinc in Milpitas, CA.
  • 2011: Fukushima earthquake, tsunami and Thailand floods — these two events validate the premise; demand accelerates.
  • 2016: WestBridge Capital-led funding round; India engineering center scales up.
  • 2017: EventWatchAI launched as named product line.
  • 2020: Covid; the "year everyone finally cared about supply chain." Enterprise customer base ~triples.
  • 2021-06: Vista Equity Partners strategic investment — the money-market consolidator in supply chain software (Vista also owns major stakes in Infor, Jaggaer, Beeline). Private Equity Wire.
  • 2022-24: Multiple product launches: ESG scoring, cyber risk integration, OpenAI-based agent (2024).
  • 2024-25: Rebrand to Resilinc.ai, big push on 'agentic' positioning; competitors (Everstream, Interos) do similar simultaneously.
  • 2026: Reaches ~1,000+ enterprise customers; new ERP integrations with SAP and Oracle to defend against bundling threat.

What people say

The case for. Resilinc has the deepest supplier graph of any player — Gartner Peer Insights (2026) shows a 4.5/5 average over 180 reviews, with aerospace and medical-device customers particularly loyal. Boeing's VP of supply chain cited Resilinc specifically at the Reuters Supply Chain Summit (March 2024) for 72-hour warning on the Taiwan earthquake. Reviewers consistently praise event-watch latency and the breadth of global coverage. Vista's involvement adds operational discipline — pricing power, renewal engineering — that scaled Everstream and Interos lack.

The complaints. Three recurring themes in Gartner, G2 and RFP.wiki reviews. First, UI/UX: multiple reviewers call the dashboards cluttered and the workflow 'built for an analyst, not a procurement VP' — this is reparable but ongoing. Second, time-to-value: BOM uploads and supplier survey campaigns can take 6-9 months before a customer sees full multi-tier coverage; Everstream and Craft close this gap faster using public-data-first graphs. Third, pricing opacity: enterprise contracts negotiate wide, and smaller customers have reported being quoted 2-3x what peers pay. There is also a consistent 'the Supplier Verification process is slow and friction-heavy' theme in supplier-side reviews, which affects data freshness. The structural concern on the sell-side (per Loop Capital procurement analysts, cited in SelectHub) is that LLM-era competitors can bootstrap a comparable graph in 24 months rather than the 15 Resilinc took, which compresses the duration of the data-moat premium.

Outlook: the open question

The outlook turns on whether a 15-year supplier graph remains defensible when a well-funded entrant can rebuild it in 24-36 months using LLMs over public filings, trade data and shipping manifests. If the historical collection advantage holds — because much of Resilinc's graph is private, supplier-contributed and not reconstructible from public data — then this is a durable high-margin SaaS franchise, and Vista's eventual exit (likely to a larger supply-chain software consolidator around 2027-28) looks healthy. If, instead, LLM-generated graphs from Craft, Palantir Foundry, or SAP's bundled supplier intelligence approach parity at a tenth of the cost, Resilinc's logo growth stalls at the top of the mid-market and the Vista-era pricing stops working. The next 24 months will show which path: watch SAP Ariba's supplier risk release notes, Craft's enterprise logo-wins, and Resilinc's own agentic-product uptake, which Bindiya has positioned as the response.

How to attack it

A frontal attack on the generalist supplier-graph is a losing proposition: Everstream, Interos, Craft, and Sphera all occupy that terrain and the two biggest-balance-sheet threats are inside ERPs the customer already uses. The attack lanes are specialized.

Agentic supply-chain intelligence for the mid-market. Resilinc's pricing (and its competitors') assumes enterprise procurement teams of 20+ people. The 10,000+ companies in the $500M-$3B revenue band — too big to ignore risk, too small to afford a six-figure contract — are underserved. An LLM-first product that lets a lean team ask natural-language questions against a public-data supplier graph, priced at $25K-$75K ACV, could win 500 logos while Resilinc fights for the top 1,500. Stord's software layer and Craft's current trajectory show the appetite is there.

Regulated-compliance vertical plays. The CSDDD (EU, 2026 effective), UFLPA (US), German LkSG and incoming carbon border adjustment (CBAM, Oct 2026) all have different jurisdictional requirements, audit trails and chain-of-custody standards. A vertical player in each — Sourcemap already does this for apparel/UFLPA — could win on depth of compliance workflow rather than breadth of event monitoring. Resilinc's generalist graph is wide but not deep in document attestation.

Weakness exposed. Resilinc's largest structural vulnerability is implementation drag — reviewers consistently cite 6-9 months to value — in an era when buyers expect SaaS to show ROI in 90 days. A well-funded attacker that leads with 'bring your own BOM, see tier-2 risk in 48 hours' can convert the mid-market's long tail. The second vulnerability is Verified Supplier friction: suppliers resent the time required to update profiles, which depresses data freshness; a lighter supplier-side workflow (think Snyk-style frictionless onboarding) could cannibalize that moat.

Adjacent-segment play

The core capability is a graph of suppliers plus continuous public-signal monitoring. That capability generalizes to several adjacencies. Insurance underwriting: carriers writing business-interruption and trade-credit policies would pay for the same risk telemetry — Resilinc's data could feed Munich Re's or AIG's quoting engines directly; Everstream has started down this path with specialty reinsurers in late 2025. Private-credit underwriting: direct lenders funding manufacturers want to see sub-tier supplier concentration risk — Resilinc has a direct asset, as yet unmonetized at any scale, that private credit shops like Apollo and Blackstone would want in their deal workflow. Government and defense: DoD's 'trusted supplier' and CHIPS Act compliance programs are starved for exactly this map; Interos has moved aggressively here and Resilinc should but has not fully. Consumer brand reputation: Nike and Patagonia's labor-abuse monitoring would benefit from the same event-watch infrastructure; apparel-specific competitors already exist here (Sourcemap, Transparent).

The one adjacency that does not work is logistics execution: Resilinc has no truck, port or freight-forwarder relationships. Everstream crossed this bridge by acquiring the former Resilience360 from DHL; Resilinc has not and should probably not, because the gross margins collapse the moment you touch physical operations.

Sources and further reading

Capital history

DateRoundAmountValuationLead(s)
2016-01 undisclosed — —
2021-06 undisclosed — —

Investors / owners: Vista Equity Partners, WestBridge Capital, Hitachi Ventures

Competitive set

  • Everstream Analytics — Risk + logistics intelligence; Columbus-based, raised $200M+
  • Interos — DC-based government + enterprise, Series D at ~$1B
  • Craft.co — SF-based, AI-first supplier intelligence
  • Sphera (Blackstone) — EHS + supply chain risk, PE-owned
  • Sourcemap — Multi-tier mapping for compliance (UFLPA, EUDR)
  • SAP Ariba Supplier Risk — Bundled with Ariba suite; owned incumbent threat