Pre-seed teams under 25 stakeholders . a spreadsheet is enough
Privacy
GDPR program exists, but Qapita-owned ESOP Direct suffered a LockBit 5.0 ransomware attack (Dec 2025) and 135 infostealer credentials are tied to Qapita's domain.⁶
No known public vulnerabilities found in the sources reviewed.14
Support quality
Claims #1 customer support ratings; 4.6 G2
Praise exists but only company-published testimonial
Public sentiment
Users rate Qapita 4.6/5 on G2, and at least one Pulley user reports moving their cap table to Qapita after Pulley's announced shutdown.³
Independent user reviews are scarce; available praise is a company-published testimonial citing simplicity and support.13
Biggest gotcha
ESOP Direct, acquired by Qapita, was hit by LockBit 5.0 ransomware in Dec 2025⁶
Free tier hard-capped at 25 stakeholders and $1M raised . you'll outgrow it fast13