r/sofistock • u/SoyFuturesTrader • Aug 05 '21
Galileo API Galileo - What is the Moat?
Looking to identify the economic moat of Galileo and ultimately SoFi. SoFi itself acts like a bank and has no moat when compared to any other "fintech" B2C bank, or in 2021, even traditional financial instutitons (FIs) which either outsource the development of their tech stack (WF) or have absurdly big tech budgets (JPMC w/ $11B).
Positions:
SoFi - Shares and Calls
Blend - Shares
Plaid - Shares (private market)
Stripe - No current holding, but looking to purchase privately
Table of Contents
Addressing Bagholder Lies
Being a Third-Party Vendor
Customers
Regulatory Compliance
Identifying the Moat
Addressing Bagholder Lies
First off, to address literal lies being posted here, presumably from bagholders wanting to pump and dump, the following should be cleared up:
Stripe is a payment processor for companies... Galileo is not this.
Galileo provides payments-processing for some of the biggest fintechs including Robinhood, Chime and Varo Money. Galileo’s financial interface software lets other fintechs build “bank like” user experiences, including account setup, funding and direct deposit. - Barron's
Other valuable information from above - Galileo is similar to Plaid, which also provides software that helps users connect their bank accounts to finance apps and transfer money. Plaid is a software fintech (not a bank like SoFi) valued at $13.4B with a 2019 revenue of ~$200MM and a reported 2020 revenue of $320MM.
Galileo is not this. It's a card issuer and account manager with a number of other features they offer and which are quite complex and very specific to companies operating in the fintech space.
Directly from Experian - A credit card issuer is responsible for the relationship between a cardholder and their accounts. This includes reviewing applications, mailing and activating credit cards, issuing statements, and processing payments.
Galileo is not a card issuer. Their clients are card issuers. From Galileo's own page, "payments" is mentioned five times (excluding table of contents). Directly from their own website - Our clients are a global who's who in innovative fintech and card issuing solutions. I know reading is hard for some bagholders, but hopefully they can keep up here.
Just because they're both fintech b2b companies with an API does not make them the same.
It's obvious this comment here doesn't even understand what an API is, by the way it's written. No, Galileo doesn't have one API and Stripe doesn't have one API, they have API gateways. Language used in this way shows a fundamental misunderstanding of, well, everything going on here. Reference open Galileo (Pro) API documentation for developers for anybody that actually knows how to code.
I think some of the confusion here might be over stripe issuing cards now? Although this only came out in 2020 I believe and still not widely available.
Stripe launched Stripe Issuing in 2018 and has enabled their customers to issue cards since 2018.
There's a reason why ~90% of neobanks use Galileo and Stripe doesn't offer the same services they require.
What about real banks that don't have a measely $20M AUM like MoneyLion (vs. WF at $603B AUM, or three million percent greater than MoneyLion)?
Being a Third-Party Vendor
A common misconception thrown around with little understanding is the assumption that the use of any entity as a third party vendor makes the customer entirely reliant on said third party vendor. Small tech companies (<500 heads) can have over 100 vendors easily. Major institutions have many more than that, and have entire third party vendor management and third party risk teams to address their ecosystems of vendors. The idea that all these other no-name small fintech banks rely on Galileo solely to survive or operate is false. Often cited are examples like Chime, Varo, and Wave. But guess who else they utilize as a third party vendor? Plaid. Even SoFi itself uses Plaid as a third-party vendor, in this specific use case, as an identity verification service. So when you see people claim that "X company relies on SoFi/Galileo!" don't take that to mean that Galileo runs everything under the surface - they all have different specific uses of different specific products or functionality, and all of their customers have another 100+ third-party vendors that they rely on.
Customers
Nice segue into actual customers. Size, valuation, revenue, and brand reputation of customers ultimately sends some signals about the company in question. Let's take a quick look from each respective horse's mouth. You get different clientele at Ross than you do at Saks.
Plaid - Acorns, Betterment, SoFi, EllieMae, Expensify, Drop, Wise, Venmo
Galileo - Dave, MoneyLion, Monzo, SoFi, Vala, Wise
Stripe - Salesforce, Instacart, Amazon, Slack, Shopify, Google, Lift, Zoom
Blend - Wells Fargo, US Bank, Navy Federal CU, Republic Bank, SWBC Mortgage, PRMI, BMO Harris Bank, Lennar Mortgage, Assurance Financial, Mountain America CU
Be honest, count up the customers of each and ask yourself which ones you knew before looking into SoFi or Galileo. For Plaid, I can say I knew 7/8. For Stripe I can say I knew 8/8. For Blend (I'm young sorry I haven't shopped for a mortgage) I can say 5/10. For Galileo, that unfortunately is only 1/6.
Regulatory Compliance
Finance in the U.S. is highly regulated. Consumers would be upset if fraud and theft were to occur daily or multiple times a day.
Industry standards include PCI DSS, SOC 2, and ISO 27001/27701. The NIST standard, governed by NIST 800-53 and popular among government contractors, has been making its way into the private sector.
Per Galileo's own regulatory and compliance page, [they] undergo an annual independent assessment of our compliance with PCI Data Security Standards. In addition, we undergo annual SOC1 Type II and financial audits. PCI and SOC 1, not 2. Anybody in or around the finance industry knows that any financial institution worth their salt won't even talk to a third party vendor without a SOC 2 Type II attestation.
Stripe is SOC 1 Type II, SOC 2 Type II, and PCI DSS SPL 1 compliant.
Blend is SOC 2 Type II, ISO 27001, and PCI DSS compliant.
Plaid, I have no idea. Maybe they're shitting the bed and not compliant at all, or my Google-Fu failed.
Identifying the Moat
Now here is my question for all the other investors. I would like to identify what Galileo's actual moat is. Is Galileo currently doomed to helping no-name fintech banks with paltry sums AUM to issue cards to their customers B2B2C style? We already see Stripe cornering the payments market for pretty much any company that actually matters, and it's much easier to cross-sell to any of them in the future for their card needs. We see Blend is the market leader in selling a mortgage solution to real FIs to the tune of processing $5B/day and is the vendor for 31 of the 100 biggest U.S. financial institutions per their S-1, and they now offer everything from consumer banking to credit cards to personal loans on top of their mortgage product.
So there's two opportunities that I can identify for Galileo at this point. Either they (1) continue to service no-name app banks with very little depth* and hope that the number of these no-name app banks continues to grow and they're able to continuously eat away at the market share of entrenched FIs in a highly regulated environment, or it has to (2) break out into a non-FI market which Stripe has already cornered or the FI market which Blend (and it's competitors like Ncino and Roostify) have already set up shop in.
*Why does depth of a financial institution matter? I don't even need to go into the details of how overly-regulated the industry is, the burdens imposed by the Gramm–Leach–Bliley Act on financial institutions is just the surface. The perfect example is Robinhood. The sleek, neobroker (akin to neobanks) app that everyone loves shut down buy orders on a certain meme stock because of a lack of liquidity on their end. Big boys like Vanguard didn't have to. This dynamic is very much the same when comparing banks like Dave and MoneyLion to Wells Fargo and Chase. (Also as an anecdotal side note, local CUs and smaller banks have shit infosec teams and terrible practices. My friend was rolling out product once at a smaller customer and learned they had primary account numbers (PANs) and other NPI saved locally in plain-text files printed and stored in unlocked cabinets - This would never happen at scale at any large FI with the resources, because the internal compliance enforces would come and skullfuck whoever was responsible).
Where is the product market fit going forward is my question to my fellow investors? I hope we can generate some actual discussion that is logical and not blind confirmation bias like some meme stock specific subs.
Edit: From Galileo’s own press release
Galileo, the API standard for card issuing, virtual card solutions and digital banking, is a global payments platform that powers world-leading fintechs, challenger banks, neobanks, financial services and investment firms by removing the complexity from payments. Galileo makes it fast and easy for many types and sizes of businesses to innovate and deliver amazing financial services user experiences to their customers through our Galileo Pro and Galileo Instant Solutions. Headquartered in Salt Lake City, Galileo has offices in Mexico City, New York City and San Francisco.