What we measure. Every figure comes from a query against our live record of US managed service providers — company records, locations, published services, certifications, Google ratings and review counts, website structure and domain history. No respondents, no self-reported survey panel.
"Listed publicly" is the unit. Certification and compliance stats count what a firm publishes where a buyer can find it, not what it holds. A firm with SOC 2 and no mention of it counts as uncertified here. That is a real limitation and also a real finding: buyers see the same thing we do.
Partial coverage means floors, not rates. Where detection is pattern-based — booking links, chat widgets, vendor mentions — a feature delivered purely by JavaScript can be missed. Those figures are published as "at least", and vendor counts are never presented as market share.
Cadence. Measured 2026-08-11 and re-run quarterly. The deltas become the next edition's headlines.