In February 2024, HubSpot's affiliate program changed its commission structure without advance notice to affiliates. Bloggers and content creators who had built their entire content strategy around HubSpot affiliate revenue — producing comparison articles, tutorial videos, and review content optimized to convert — saw their economics change overnight. Some lost 40% to 60% of their affiliate income in a single month.

They had no recourse. They did not own the platform. They did not own the commission structure. They did not even own the audience — the traffic came from Google, another platform they did not control. Their business was built on two layers of someone else's land.

Platform risk is the strategic vulnerability that arises when a business depends on a platform, marketplace, or infrastructure it does not own, does not control, and cannot influence. It is the most common and most underestimated risk in digital business.

The most visible examples are marketplace-dependent businesses. An Amazon third-party seller whose entire revenue flows through Amazon Marketplace is one algorithm change, one policy revision, or one suspended listing away from losing everything. Amazon can change its fee structure, alter its search algorithm, introduce a competing private-label product, or suspend an account — and the seller has no contractual protection and limited appeal rights.

But platform risk extends far beyond marketplaces. A business that generates 80% of its leads from Google organic search is platform-dependent. A creator whose income comes primarily from YouTube ad revenue is platform-dependent. A SaaS company that distributes exclusively through the Apple App Store is platform-dependent.

In each case, the platform provides extraordinary value — reach, distribution, traffic, payment processing — in exchange for extraordinary control. The terms of that exchange can change at any time, with no negotiation, no grandfathering, and no compensation.

Algorithm risk is the most common. Google changes its search algorithm roughly 4,500 times per year. Most changes are minor. A few are transformative. Businesses that ranked on page one for their primary keyword on Monday can find themselves on page three by Friday — with a corresponding collapse in traffic, leads, and revenue.

Policy risk is the most sudden. When Apple required apps to request permission before tracking users (the ATT framework in iOS 14.5), Facebook's advertising effectiveness dropped measurably. Businesses that had built their customer acquisition strategy on Facebook advertising saw their cost per acquisition rise 30% to 60% in a matter of weeks. The policy change was Apple's to make. The impact fell on businesses that had no relationship with Apple at all.

Competition risk is the most existential. When the platform you depend on decides to compete with you directly, the asymmetry is total. Amazon launching its own brand to compete with successful third-party sellers. Google displaying featured snippets that answer the query without a click-through to the source website. Apple introducing Screen Time, effectively competing with third-party digital wellness apps. The platform has the data, the distribution, and the relationship with the user. The dependent business has none of those things.

Complete platform independence is neither possible nor desirable. Platforms provide genuine value — distribution, infrastructure, credibility — that would be prohibitively expensive to replicate independently. The goal is not to avoid platforms. It is to ensure that no single platform can threaten the viability of the business.

The first principle is channel diversification. If organic search provides 70% of your traffic, invest in building email, social, referral, and paid channels until no single source exceeds 30% to 40%. The total traffic may not change. The risk profile changes dramatically.

The second principle is audience ownership. The most valuable digital asset is the one you own: your email list. Email subscribers are not intermediated by a platform. They cannot be algorithmically deprioritized. They cannot be removed by a policy change. Every business — regardless of its platform strategy — should be converting platform-acquired attention into owned audience at every opportunity.

The third principle is revenue diversification. A business that earns revenue from three platforms is less vulnerable than a business that earns from one. The marketplace seller who also sells through their own website, a B2B wholesale channel, and a physical retail partnership has reduced their Amazon dependency to one of four revenue streams.

The temptation of platform dependency is that it works — often brilliantly — until it doesn't. The Amazon seller who does $5 million through Marketplace sees no reason to invest $200,000 in building an independent e-commerce channel. The ROI of the platform is obvious. The ROI of the independent channel is speculative.

Until the platform changes the terms. Then the $200,000 investment in independence looks like the best money the business ever spent — and the $5 million in platform revenue looks like the rent it was always going to be.

Build on platforms. Benefit from platforms. But never confuse platform access with platform ownership. The land belongs to someone else. And the landlord's interests are not the same as yours.