DH · CIK 1861795
What Definitive Healthcare Corp. told the SEC could break it.
Definitive Healthcare's disclosures center on near-total dependence on a single product: about 96% of 2025 revenue came from subscriptions to its one healthcare-intelligence platform, and with revenue from pre-2025 customers down $33.7 million, its fortunes hinge on continued demand for healthcare provider data and analytics. It also leans on third parties to run the business — cloud infrastructure, a subscription-management platform and payment processors whose interruption could disrupt service and billing — and operates under regulatory obligations spanning OFAC sanctions, export controls, anti-corruption and anti-money-laundering laws, and the CMS Qualified Entity Certification Program, where non-compliance could bring fines or removal from the program.
3 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Other disclosures
- 96% of revenue from subscriptions to a single platform; healthcare-data-market demandhigh
Definitive derives ~96% of revenue from subscriptions to its single healthcare-intelligence platform, with revenue from pre-2025 customers down $33.7M — its success hinges on continued demand for healthcare provider data and analytics.
“For the year ended December 31, 2025, we derived 96% of our revenue from subscription services, and we expect to continue to generate substantially all of our revenue from the sale of subscriptions to our platform.”
SEC filing →As of 2026
Regulatory & policy
- sanctions/export controls, anti-corruption and healthcare-data (QECP) compliancemedium
Definitive is subject to OFAC sanctions, export controls, anti-corruption/AML laws and the CMS Qualified Entity Certification Program; non-compliance could bring criminal penalties, fines or removal from the QECP.
“We are subject to sanctions, export controls, anti-corruption, anti-bribery, anti-money laundering and similar laws, and non-compliance with such laws can subject us to criminal penalties or significant fines and have a material adverse effect on our business, financial condition and results of operations.”
Supplier concentration
- reliance on third-party cloud, subscription-management and payment vendorsmedium
Definitive depends on third-party cloud infrastructure, a third-party subscription-management platform and third-party payment processors; interruptions at these vendors (or supply-chain cyberattacks) could disrupt its service and billing.
“We rely on a third-party subscription management platform to process the subscription plans and billing frequencies of our customers. In addition, we rely primarily on third parties for payment processing services.”
SEC filing →As of 2026
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch