# Acquia — DXP Scorecard

> Enterprise Drupal DXP with Site Factory multi-tenancy, Acquia DAM, and FedRAMP-grade compliance.

**Category:** Enterprise DXP · **Tier:** 2 · **Suite Capability:** 67/100 (ranked #7 of 46)

Source: https://www.dxpscorecard.com/platform/acquia
Last reviewed: 2026-10-10

## Summary

Acquia is the enterprise way to run Drupal: managed hosting on AWS, Site Factory for large site portfolios, a first-party DAM, and a compliance record (FedRAMP Moderate, HIPAA, PCI DSS Level 1, SOC 2 Type 2) that few platforms match. In September 2026 it dropped the DXP label to rebrand as an agentic content platform around Acquia Source and Acquia AI, while personalization, experimentation and search now come from partner engines sold as add-ons. It is a strong choice for regulated organizations and multi-site programs that already have Drupal skills, but pricing is sales-gated, every capability beyond the CMS is a separate subscription, and Drupal expertise remains mandatory.

## Composite Scores

- Suite Capability: 67/100
- Cost Efficiency: 42/100
- Build Simplicity: 48/100
- Operational Ease: 50/100
- Platform Velocity: 64/100
- Compliance & Trust: 76/100
- AI Enablement: 59/100

## Use-Case Fit

- Marketing: 63/100
- Commerce: 49/100
- Intranet: 46/100
- Multi-Brand: 62/100

## Category Scores

- 1. Core Content Management: 72/100
- 2. Additional Platform Capabilities (DXP Features): 67/100
- 3. Technical Architecture: 68/100
- 4. Platform Velocity & Health: 64/100
- 5. Total Cost of Ownership: 42/100
- 6. Build Simplicity: 48/100
- 7. Operational Ease: 50/100
- 8. Use-Case Fit: 55/100
- 9. Regulatory Readiness & Trust: 76/100
- 10. AI Enablement: 59/100

## Strengths

- **Compliance posture that regulated buyers can sign off on** (79.8/100) — Acquia Cloud is FedRAMP Authorized at Moderate impact with 26 agency authorizations, holds its own ISO 27001 certificate, is validated as a PCI DSS Level 1 service provider, and signs HIPAA Business Associate Agreements. A pre-signed, self-serve data processing agreement with EU and UK transfer clauses is available to every customer, not just enterprise accounts. For government, healthcare and public-sector buyers this removes months of procurement friction.
- **Deep content modeling and near-unlimited extensibility** (84.2/100) — Drupal's Field API, Paragraphs and entity references let teams model complex, nested, many-to-many content and export the whole schema as configuration code. Core taxonomy supports unlimited hierarchical vocabularies with per-vocabulary permissions. The hook, plugin and event system means there is almost nothing a developer cannot customize, which matters for organizations with unusual editorial or integration requirements.
- **Fully managed hosting with documented recovery guarantees** (76.8/100) — Acquia Cloud Platform renders and hosts the whole Drupal site with Dev, Stage and Prod environments, managed TLS, a deploy pipeline and a 99.95% uptime SLA on the Enterprise tier, with Node.js hosting for decoupled frontends. Disaster recovery is spelled out: one-hour recovery point objective, hourly through monthly snapshots, and optional multi-region failover. Cloud Next runs on Kubernetes with a Drupal-tuned autoscaler, so traffic spikes are the vendor's problem rather than yours.
- **Proven multi-site and multi-brand operations at scale** (71.7/100) — Site Factory runs hundreds of Drupal sites on a shared codebase with separate databases per site, central governance and brand-level configuration; Arizona State University runs 426 sites on it and a global pharma rolled out 437 sites in 50 languages. Content Hub syndicates corporate content to brand sites with controlled local overrides, and Site Studio manages a central design system with per-brand tokens. Few platforms we score can point to portfolios this large running in production.
- **A real enterprise DAM with video, rights and AI tooling built in** (73.3/100) — Acquia DAM (the former Widen) brings custom metadata schemas, license-expiry enforcement, multi-stage approvals, brand portals, HLS video streaming with captions, AI tagging and alt text, and a maintained Drupal connector. 2026 added a read-only MCP server so AI assistants can search assets under each user's permissions, webhooks for task automation and Amazon Translate for metadata. Marketing teams get a governed asset supply chain without bolting on a third-party DAM.
- **Large ecosystem, strong SEO stack and a maturing visual builder** (78.8/100) — Acquia Exchange lists over 200 integrations and Drupal.org adds tens of thousands of contributed modules, backed by a partner network of more than 800 agencies including Capgemini and Havas CX. The Drupal CMS SEO recipe bundles Metatag, Pathauto, Redirect and XML sitemaps, and the Conductor Writing Assistant now scores content inside the edit form. Drupal Canvas, the default drag-and-drop page builder since Drupal CMS 2.0, gives marketers live-preview composition without developer help.

## Weaknesses

- **Sales-gated pricing and a suite sold one subscription at a time** (35/100) — The enterprise Cloud Platform tiers (Standard, Plus, Premium, Elite) publish feature grids with no dollar amounts, and Source CMS, DAM, CDP, Content Hub and Site Factory all require a demo to learn the price. Only the Professional line shows list prices, from $148 to $364 per month. There is no free tier, the hosted trial expires after 14 days, and views and visits overages bill at $100 per block, with bot traffic known to inflate them. Budget for enterprise deployments commonly starts above $100K a year before add-ons.
- **Drupal specialization is mandatory and expensive** (39.6/100) — Developers must master entities, bundles, render arrays, the plugin system, configuration management and Twig, then layer on Acquia-specific products. Acquia maintains four separate certification tracks, and enterprise sites generate hundreds of YAML configuration files that need Config Split per environment. The Canvas headless SDK adds Next.js, Astro and Nuxt adapters, but they are still pre-1.0 and backend work remains PHP. Expect specialist salaries above general web developers and teams of three to eight people for an enterprise build.
- **A steady stream of vendor deadlines and a heavy incident log** (50.2/100) — Drupal 10 support ends December 9, 2026, Site Studio 7.x retires the same day with a deadline Acquia says will not be extended, Node.js 20 was force-upgraded in April 2026, and a September Pipelines change required every customer to replace allowlisted IP addresses or lose builds. Acquia patches the platform layer but never application code, so Composer updates across 30 to 80 contributed modules stay your job. The public status page logged roughly 40 incidents between late February and early October 2026, seven of them critical, including repeated Pipelines and deployment failures.
- **Personalization and AI agents are early, OEM or in maintenance** (51.7/100) — Acquia Personalization reached end of life on January 31, 2026, and its replacement, Acquia Conversion Optimization, is a Wingify (VWO) engine delivered through a client-side snippet rather than in the CMS. Acquia CDP shipped one release in 2026 and has left the product navigation. Acquia AI is an Early Access release with no SLA: the single Site Builder agent works only in a sandbox, custom agents are not available, and the product guide lists customer-facing audit trails and organization-level opt-out as out of scope. Buyers choosing Acquia for agentic marketing are buying a roadmap.
- **Intranet and marketplace commerce need to be built from scratch** (32.3/100) — There is no employee directory, org chart, onboarding journey, acknowledgment tracking, mobile app or push notification capability in the product. Microsoft Teams, Slack and Google Workspace integration stops at community webhook modules, and learning management connectors do not exist. On the commerce side there are no seller profiles, seller submission workflows or review aggregation for marketplaces. All of these are achievable only through custom Drupal development.
- **No real-time co-editing and a thin SDK story** (46/100) — Drupal offers pessimistic locking through Content Lock and rejects stale saves, but simultaneous editing, presence indicators and in-content comments require a separately licensed CKEditor 5 Premium integration. There are no official Python, Ruby, Go or .NET SDKs; teams work against JSON:API with raw HTTP, and TypeScript types for the content model come from community tooling rather than a first-party generator. Teams used to Sanity or Contentful will feel the gap on both fronts.

## Ideal For

- US federal, state and public-sector agencies and healthcare providers (fit 88/100) — FedRAMP Moderate authorization with 26 agency authorizations, HIPAA environments with a signed BAA, PCI DSS Level 1 validation and a self-serve DPA make Acquia one of the few CMS platforms that clears procurement without exceptions. Drupal's granular permissions and accessibility commitments suit public websites.
- Universities and enterprises running dozens to hundreds of sites on one codebase (fit 84/100) — Site Factory, Content Hub and Site Studio were built for exactly this: shared code, isolated databases per site, central updates, syndicated content with local overrides and a governed design system. Deployments of 400+ sites are documented in production.
- Organizations with an existing Drupal investment and in-house or agency Drupal skills (fit 82/100) — Acquia removes the infrastructure, backup, patching and scaling work from a Drupal team while keeping full code control, and Acquia Source adds a managed SaaS path. The 800+ partner network and four certification tracks mean the skills are available, if at a premium.
- Global multi-brand marketing organizations that need governed assets and translation (fit 74/100) — Acquia DAM handles rights, approvals, video and brand portals; Drupal's field-level translation across 90+ languages pairs with TMGMT connectors to Smartling, Lionbridge and Phrase; Site Studio enforces per-brand tokens. The pieces are separately licensed but they are first-party and integrated.
- Content teams that want structured content with a visual builder and strong SEO out of the box (fit 70/100) — Drupal Canvas gives marketers drag-and-drop composition with live preview, the SEO recipe ships Metatag, Pathauto, Redirect and sitemaps, and the Conductor Writing Assistant scores content before publication. Developers keep a deeply modelable content layer underneath.

## Look Elsewhere If

- Startups and small marketing teams with limited budget or no Drupal developer (fit 18/100) — There is no free tier, the trial expires after 14 days, enterprise pricing is hidden behind a demo, and a production site needs Drupal expertise for content modeling, theming and deployment. Webflow, HubSpot Content Hub or Drupal CMS on commodity hosting reach a live site far faster and cheaper.
- JavaScript-first product teams that want a pure headless SaaS with typed SDKs and co-editing (fit 28/100) — Content is delivered through JSON:API with HTML rich text, there are no official multi-language SDKs, TypeScript types depend on community generators, and real-time collaboration needs a separate CKEditor license. Contentful, Sanity or Payload CMS fit this team's workflow natively.
- Companies building an employee intranet or digital workplace (fit 30/100) — No employee directory, org chart, onboarding journeys, acknowledgment tracking, mobile app or native Teams and Slack integration exist. Every one of these becomes a custom Drupal module, so Liferay, HCL Digital Experience or a dedicated intranet product will cost less to reach parity.
- Retailers that want native merchandising, checkout content and marketplace features (fit 35/100) — Drupal Commerce is a community project rather than an Acquia product, commerce integrations with Shopify, BigCommerce and commercetools are partner-built and need middleware, and there is no shoppable content editor, promo calendar or seller content workflow. Bloomreach or a commerce-native stack is a better starting point.

## Alternatives

Looking for alternatives to Acquia? The DXP Scorecard analyst team rates 9 replacement platforms in "Best Acquia Alternatives in 2026" (https://www.dxpscorecard.com/editorials/acquia-alternatives), with a recommendation on who should move and who should stay. Ratings updated 2026-10-20.

## Implementation Partners

Agencies, development shops and systems integrators listed on The DXP Scorecard as implementation partners for Acquia: PreviousNext. The partner network is sponsored: Premier and Featured placements are paid, Listed placements are free. Partner listings are never read by scoring and do not affect Acquia's scores or rank. Listing: https://www.dxpscorecard.com/platform/acquia#partners

- **PreviousNext** (Implementation Partner, free listing) · https://www.previousnext.com.au

---
Scored by The DXP Scorecard — an independent site; scorecards and platform inclusion are unsponsored, while the implementation partner network is sponsored and never read by scoring. Reproduce with attribution (CC BY 4.0). https://www.dxpscorecard.com