Arc XP
Enterprise CMS built by The Washington Post. Powers hundreds of newsrooms worldwide. Cloud-native, API-first, very expensive.
What should journalists know about Arc XP?
Arc XP is the CMS The Washington Post built for itself and then commercialized. It now powers The Boston Globe, Reuters, The Dallas Morning News, The Globe and Mail, Chicago Tribune, and hundreds of other publications worldwide. The platform is genuinely built for news — editorial workflows, real-time publishing, story budgets, and collaborative editing are native, not bolted on. The architecture is cloud-native and API-first (headless), meaning content is decoupled from presentation. You can publish to web, mobile apps, AMP, Apple News, and custom frontends from a single editorial interface. Modules include the core CMS (PageBuilder Composer), a video platform (Video Center), identity and subscription management (Subscriptions), and commerce tools. AI features for content tagging, SEO optimization, and audience analytics are integrated. The strengths are real: purpose-built newsroom workflows, battle-tested scale (WaPo publishes 1,200+ pieces/day), enterprise-grade infrastructure on AWS, and a roadmap shaped by actual journalism needs. The weaknesses are equally real. Cost is the defining constraint. This is enterprise software priced for enterprise budgets. Small and mid-size newsrooms are priced out entirely. Vendor lock-in is significant — migrating off Arc XP is a major project. And despite being built by a news organization, Arc XP is a commercial product of The Washington Post, which is owned by Jeff Bezos and runs on AWS. Your content and audience data sit on Amazon infrastructure under US jurisdiction. Compared to WordPress/Newspack: Arc XP is more polished for large-scale news but orders of magnitude more expensive. Compared to Superdesk: Arc XP is turnkey but closed-source and proprietary. For newsrooms that can afford it, Arc XP is among the best purpose-built publishing platforms available. For everyone else, WordPress with Newspack or Ghost are more realistic options.
Large newsrooms publishing hundreds of stories per day. Media companies needing integrated subscriptions and identity management. Multi-platform publishing (web, mobile, apps, feeds) from a single CMS. Organizations migrating from legacy systems (Methode, CCI, custom platforms) to modern infrastructure.
Small or mid-size newsrooms — the cost is prohibitive. Independent journalists or startups. Organizations that need data sovereignty outside US/AWS infrastructure. Anyone who wants to self-host or own their CMS. Newsrooms on a budget — WordPress with Newspack starts at $750/month vs. Arc XP's six-figure minimums.
Security & Privacy
Data is scrambled while being sent to their servers
Data is scrambled when stored on their servers
Where servers are located — affects which governments can request your data
Privacy policy summary
Arc XP processes content and audience data on AWS US infrastructure. Enterprise contracts include data processing agreements. The platform collects audience analytics, identity data, and subscription information as core features. SOC 2 Type II certified. Subject to US legal process. Washington Post / Arc XP does not use customer content to train AI models per their enterprise agreements.
How to protect yourself:
Negotiate data processing and retention terms in your enterprise contract. Understand that audience identity and subscription data sits on US infrastructure — factor this into coverage of sensitive topics. Review which Arc XP modules access audience data and configure analytics collection to match your editorial policies. Maintain content export capabilities to avoid complete vendor lock-in. Keep local backups of published content via the API.
Enterprise-grade infrastructure on AWS with SOC 2 Type II certification, encryption in transit and at rest, and dedicated security teams. The platform is well-maintained and battle-tested at Washington Post scale. Rating is 'adequate' rather than 'strong' because it is closed-source, US-jurisdiction-only by default, and your content and audience data are controlled by a third party. No self-hosting option means no path to full data sovereignty.
Who Owns This
Known issues
Cost is the dominant issue — contracts in the six-to-seven-figure range price out most newsrooms. Vendor lock-in is significant; migrating content, templates, and workflows off Arc XP is a major engineering effort. Owned by Jeff Bezos via The Washington Post — some newsrooms may have editorial independence concerns about their publishing infrastructure being controlled by a tech billionaire's media company. The platform runs entirely on AWS, creating a dependency on Amazon infrastructure. Arc XP has faced criticism for sales practices that lock publishers into long-term contracts. Some mid-market publishers have reported that the platform's complexity exceeds their editorial team's capacity to use it fully.
Pricing
Custom enterprise pricing only — not publicly listed. Industry reports estimate contracts start at $150K-300K/year for mid-size publishers, scaling to $1M+ for large organizations. Pricing based on page views, content volume, and modules selected. No free tier. No self-service signup.
This is an editorial assessment based on publicly available information as of 2026-04-11, using our published methodology. Independent security review is pending. Security posture can change at any time. This is not a guarantee of safety.
Something wrong or outdated? Report it.