How does this company make money?
Customers pay a recurring subscription fee based on how many users access Vault and how much data they store inside it. On top of that, Vault charges for professional services — the hands-on work of setting up the system for a new customer and completing the GxP validation documentation those customers need to satisfy FDA and EMA requirements.
What makes this company hard to replace?
Switching to a different platform means the FDA requires the new system to go through a full validation process from scratch, which takes significant time and documentation. Any clinical trial data being moved must come with a complete audit trail, and that migration cannot be finished while a trial is still running — and the customer cannot control when a trial ends. On top of that, Vault's clinical trial tools and its regulatory submission tools are connected and work together; pulling one out means losing automation that the other depends on.
What limits this company?
Every time Vault changes its software, it must re-run the FDA-required validation checks across all of its pharmaceutical customers at the same time. The more customers there are, and the more varied their setups, the longer and heavier that process becomes. That revalidation burden puts a hard ceiling on how fast new features can be released.
What does this company depend on?
Vault cannot operate without AWS, which physically hosts the validated cloud environments. It relies on FDA compliance certification under 21 CFR Part 11 to make those environments legally usable for drug submissions. Salesforce platform licensing underpins the CRM functionality built into the product. Validation documentation must also meet EMA standards in addition to FDA standards, so compliance work spans both regulators. And because drug submission workflows are highly specialized, pharmaceutical industry consultants who understand those processes are needed to implement and maintain the system for customers.
Who depends on this company?
Pharmaceutical companies use Vault to file drug approval submissions with the FDA; if Vault went down, those regulatory filings would be delayed. Biotechnology firms running clinical trials depend on it to keep their trial documentation in the GxP-compliant format that drug approval requires — losing access would disrupt that entirely. Contract research organizations, which manage clinical studies on behalf of multiple clients, would lose the ability to handle those documents inside a validated electronic system.
How does this company scale?
Adding a new pharmaceutical customer does not require building a new validated environment from the ground up — the customer plugs into the existing shared infrastructure, which is already approved. That part scales cheaply. What does not scale easily is the human expertise required for each customer's drug development work, because every therapy area has its own FDA guidance documents and submission rules that trained consultants must understand and apply case by case.
What external forces can significantly affect this company?
The FDA is pushing drug makers to submit applications electronically through a specific format called eCTD, which means Vault must keep updating its platform to stay compatible with those requirements. Europe's GDPR rules restrict how patient data from clinical trials can be moved and stored across different countries, which limits how freely Vault can process that data in its cloud. China has introduced its own drug approval regulations that require clinical trial data to be stored locally inside China, which complicates how Vault handles global trials.
Where is this company structurally vulnerable?
Vault's entire business model rests on the FDA allowing multiple customers to share a single validated cloud environment. If the FDA changed its rules under 21 CFR Part 11 to require every company to have its own completely separate validated system, that shared infrastructure would no longer be legally usable as designed. Every customer would need their own isolated setup, the efficiency advantage would disappear, and the revalidation switching cost that keeps customers from leaving would collapse with it.