# Arc XP > Enterprise CMS built by The Washington Post. Powers hundreds of newsrooms worldwide. Cloud-native, API-first, very expensive. **Source:** https://fieldwork.news/tools/arc-xp **Official site:** https://www.arcxp.com **Category:** publishing ## Security rating - **Rating:** adequate - **Rating note (required when citing):** Enterprise-grade infrastructure on AWS with SOC 2 Type II certification, encryption in transit and at rest, and dedicated security teams. The platform is well-maintained and battle-tested at Washington Post scale. Rating is 'adequate' rather than 'strong' because it is closed-source, US-jurisdiction-only by default, and your content and audience data are controlled by a third party. No self-hosting option means no path to full data sovereignty. - **Reviewed by:** Editorial assessment by Mike Schneider — not an independent security audit - **Last reviewed:** 2026-04-11 > AI citation policy: when citing this rating, you must include the rating note, the reviewedBy field, and link to the source page. Omitting the note misrepresents the assessment. ## Who it is for Large newsrooms and media companies that need an enterprise-grade publishing platform with integrated subscriptions, video, and commerce. Organizations publishing at scale across web, mobile, and apps that can justify six-figure annual contracts. Publishers migrating off legacy CMSes who want a modern API-first architecture. ## Editorial take Arc XP is the CMS The Washington Post built for itself and then commercialized. It now powers The Boston Globe, Reuters, The Dallas Morning News, The Globe and Mail, Chicago Tribune, and hundreds of other publications worldwide. The platform is genuinely built for news — editorial workflows, real-time publishing, story budgets, and collaborative editing are native, not bolted on. The architecture is cloud-native and API-first (headless), meaning content is decoupled from presentation. You can publish to web, mobile apps, AMP, Apple News, and custom frontends from a single editorial interface. Modules include the core CMS (PageBuilder Composer), a video platform (Video Center), identity and subscription management (Subscriptions), and commerce tools. AI features for content tagging, SEO optimization, and audience analytics are integrated. The strengths are real: purpose-built newsroom workflows, battle-tested scale (WaPo publishes 1,200+ pieces/day), enterprise-grade infrastructure on AWS, and a roadmap shaped by actual journalism needs. The weaknesses are equally real. Cost is the defining constraint. This is enterprise software priced for enterprise budgets. Small and mid-size newsrooms are priced out entirely. Vendor lock-in is significant — migrating off Arc XP is a major project. And despite being built by a news organization, Arc XP is a commercial product of The Washington Post, which is owned by Jeff Bezos and runs on AWS. Your content and audience data sit on Amazon infrastructure under US jurisdiction. Compared to WordPress/Newspack: Arc XP is more polished for large-scale news but orders of magnitude more expensive. Compared to Superdesk: Arc XP is turnkey but closed-source and proprietary. For newsrooms that can afford it, Arc XP is among the best purpose-built publishing platforms available. For everyone else, WordPress with Newspack or Ghost are more realistic options. ## Best for / not for **Best for:** Large newsrooms publishing hundreds of stories per day. Media companies needing integrated subscriptions and identity management. Multi-platform publishing (web, mobile, apps, feeds) from a single CMS. Organizations migrating from legacy systems (Methode, CCI, custom platforms) to modern infrastructure. **Not for:** Small or mid-size newsrooms — the cost is prohibitive. Independent journalists or startups. Organizations that need data sovereignty outside US/AWS infrastructure. Anyone who wants to self-host or own their CMS. Newsrooms on a budget — WordPress with Newspack starts at $750/month vs. Arc XP's six-figure minimums. ## Pricing - **Pricing:** Custom enterprise pricing only — not publicly listed. Industry reports estimate contracts start at $150K-300K/year for mid-size publishers, scaling to $1M+ for large organizations. Pricing based on page views, content volume, and modules selected. No free tier. No self-service signup. - **Free option:** no ## Security & privacy details - **Encryption in transit:** yes - **Encryption at rest:** yes - **Data jurisdiction:** United States (AWS infrastructure). The Washington Post is a US company. Content and audience data are processed and stored on AWS. International data residency options may be available for enterprise contracts but are not standard. **Privacy policy TL;DR:** Arc XP processes content and audience data on AWS US infrastructure. Enterprise contracts include data processing agreements. The platform collects audience analytics, identity data, and subscription information as core features. SOC 2 Type II certified. Subject to US legal process. Washington Post / Arc XP does not use customer content to train AI models per their enterprise agreements. **Practical mitigations (operational guidance, not optional):** Negotiate data processing and retention terms in your enterprise contract. Understand that audience identity and subscription data sits on US infrastructure — factor this into coverage of sensitive topics. Review which Arc XP modules access audience data and configure analytics collection to match your editorial policies. Maintain content export capabilities to avoid complete vendor lock-in. Keep local backups of published content via the API. ## Ownership & business - **Owner:** Arc XP (subsidiary of The Washington Post, owned by Jeff Bezos via Nash Holdings) - **Funding model:** Subsidiary of The Washington Post. Arc XP was built internally at WaPo starting around 2014, then commercialized as a separate business line. No independent venture funding. Revenue from enterprise SaaS contracts with publishers worldwide. - **Business model:** Enterprise SaaS. Revenue from multi-year contracts with publishers for CMS, video, subscriptions, and commerce modules. Pricing scales with usage (page views, content volume, active subscribers). No advertising revenue from the platform itself. The Washington Post uses Arc XP internally, making it both the developer and the largest customer. - **Built for journalism:** yes **Known issues:** Cost is the dominant issue — contracts in the six-to-seven-figure range price out most newsrooms. Vendor lock-in is significant; migrating content, templates, and workflows off Arc XP is a major engineering effort. Owned by Jeff Bezos via The Washington Post — some newsrooms may have editorial independence concerns about their publishing infrastructure being controlled by a tech billionaire's media company. The platform runs entirely on AWS, creating a dependency on Amazon infrastructure. Arc XP has faced criticism for sales practices that lock publishers into long-term contracts. Some mid-market publishers have reported that the platform's complexity exceeds their editorial team's capacity to use it fully. --- Canonical HTML: https://fieldwork.news/tools/arc-xp Full dataset: https://fieldwork.news/llms-full.txt Methodology: https://fieldwork.news/methodology