02 — Competitor Matrix (Step 3 consolidated)

Step: 3 · Persona: Competitive Intelligence Analyst · Date: 2026-07-26 Sources consolidated: raw/teardown-klook-gyg.md · raw/teardown-viator-kkday-headout.md · raw/teardown-connectivity-indonesia.md · benchmark-set structure from 00-scope.md §4. Subject: SatuSatu (satusatu.com), 253 SKUs, Bali TAA platform, operated by PT Tiptip Network Indonesia. Directions: D0 curated Pass + human concierge (live) · D1 horizontal catalog (in progress, GlobalTix feed + manual onboarding) · D2 B2B partner dashboard (planned) · D3 reseller API (planned). Binding constraints (Step 0 / 00-scope.md §8.1): no dedicated engineering capacity — the D2/D3 platform build consumes the team · thin margin — Pool A aggregator-sourced ~10% gross / ~7% after payments+FX, Pool B direct-contracted Balinese ~27% · no disclosed funding since Nov 2022.

Evidence tiers (preserved from source): A = filings, IR, earnings transcripts, official docs/engineering blogs, live product · B = credible trade press · C = blogs, LinkedIn, vendor marketing, listicles. Status markers (preserved, rigorously separated): [SHIPPED] = live product / public API docs / dated product-or-engineering blog · [ANNOUNCED] = press release or roadmap statement, not verified live · [BETA] = disclosed limited release · [SPECULATION] = labelled inference.

Consolidation rule applied: where a teardown found no public artefact, the cell reads "no public artefact" — not 0 — because absence of evidence is not evidence of absence. Where a teardown did not address a stage at all, the cell reads "not covered in Step 3." No claim appears here that is not in the three source teardowns (two exceptions are explicitly labelled as carried from Step 0/Step 2 and flagged as not re-evidenced in Step 3).

Benchmark-set groups per 00-scope.md §4: Group 1 destination-state model [D1 D2 D3] (Klook, GetYourGuide, Viator/Tripadvisor, KKday, Headout, + promoted Klook Pass) · Group 2 curated/pass/concierge [D0] (not a Step 3 teardown target) · Group 3 connectivity & B2B infrastructure [D2 D3] (GlobalTix + the consolidation map) · Group 4 Indonesia & SEA [D0 D1 D2] (Golden Rama, Panorama, Traveloka, Tiket.com, TBO, Agoda Activities) · Group 5 disintermediation watch [threat only] (out of Step 3 scope).

0. Evidence-base asymmetry — read before any score is compared

The scores below are not commensurable across companies, because the evidence bases are not.

Klook's AI story reads bigger than GYG's in press and smaller than GYG's in verifiable artefacts. Do not treat the two evidence bases as equivalent. Where Klook has no Tier A artefact, the source teardown scored what is evidenced, not what is claimed — and that convention is preserved here.

1. AI maturity matrix

Scale: 0 absent · 1 rules · 2 classical ML · 3 GenAI-assisted · 4 agentic (system takes multi-step action against a goal without a human in the loop). "no public artefact" = the teardown searched and found nothing public; this is not a 0. "not covered in Step 3" = the stage was not assessed for that company in this step. "unverified" = the teardown explicitly instructed the stage be recorded as unverified rather than zero.

Stage columns follow the 20-stage value-chain spine (00-scope.md §3). Column legend: 1 Supply sourcing · 2 Onboarding & catalog production · 3 Feed ingestion · 4 Catalog scale ops · 5 Availability · 6 Pricing · 7 B2B rate mgmt · 8 Partner onboarding (distribution) · 9 Partner dashboard · 10 API / connectivity · 11 Demand gen · 12 Discovery & conversion · 13 Itinerary planning · 14 In-destination · 15 Payments / fraud · 16 Post-trip · 17 Customer service · 18 Supplier ops · 19 Trust & safety · 20 Internal ops.

1a. Totals, and why only two are quotable

1b. Indonesian / SEA incumbents — single overall AI score (per-stage not produced in Step 3)

1c. Head-to-head read across the whole set

• Nobody in this set is a 4 in production. Neither Klook nor GYG has a GA agentic booking surface as of 2026-07-26. Klook is closest — closed beta, disclosed 2026-06-09. Tripadvisor's agentic exposure is entirely outbound (being a callable app inside ChatGPT); its partners get none of it.
• Everyone is ~1 on pricing and ~0–1 on payments/fraud. Two of the largest players in the category have shipped no publicly evidenced AI in the two functions that most directly move gross margin. That is a real gap in the category, not just in these two companies. Viator, rezio and GlobalTix confirm the pattern.
• The one stage where an incumbent has decisively shipped and quantified GenAI is supplier-side catalog production — GYG, 8 of 16 wizard steps auto-completed, 100% rollout, 2025-04-23. The single most transferable finding in Step 3.
• Every B2B/connectivity surface in the study is pre-LLM. GYG Partner API: no AI endpoint, no semantic-search parameter, no NL query field, no MCP/agent manifest — the AI is in the storefront, not in the pipe. Viator: nowhere. rezio: zero occurrences in a 752 KB spec. GlobalTix: entirely CRUD. Headout: docs 24 months stale. The B2B layer of this category is uncontested on AI.

2. Named shipped AI features, per company

Markers kept rigorously separate. Nothing has been promoted from [ANNOUNCED] or [BETA] to [SHIPPED].

2.1 GetYourGuide

2.2 Klook

2.3 Viator / Tripadvisor

2.4 KKday / rezio

No named AI feature exists. Zero occurrences of AI in the 752 KB OpenAPI spec, the pricing page, or the site. KKday's consumer app was not inspected in this pass — record as unverified, not as zero. [SHIPPED], [ANNOUNCED] and [BETA] rows: none.

2.5 Headout

No named AI feature in 26 months. The only artefact is a 2025-01-15 release containing: "AI-powered customer support", "smarter inventory and pricing systems", "AI is now deeply embedded across our platform." No product name, no deflection rate, no date, no metric. The Dabble acqui-hire (mid-2024, announced May 2024; Toronto, YC-backed; computer vision + spatial computing + AR/VR — explicitly not LLMs) has produced no announced shipped product in the 26 months since. Public API docs last pushed 2024-07-29. Marker status for everything: vendor prose, unnamed, self-reported — neither [SHIPPED] nor falsified.

2.6 GlobalTix

2.7 Indonesian / SEA incumbents

No named shipped AI feature was found for Golden Rama (0), Panorama Group (0), Traveloka B2B (1), Tiket.com (1), TBO Holidays (1) or Agoda Activities (1). Traveloka's consumer-side assistants exist but were not verified this step. tiket FLEXI is a product feature, not AI.

3. B2B distribution stack comparison

3a. Group 1 benchmark set + the incumbent connectivity vendor

3b. Second-aggregator and Indonesian distribution candidates — the same columns, to the depth Step 3 reached

4. Connectivity layer map — ownership and consolidation as of 2026-07-26

4a. Dated transactions and formations

4b. GetYourGuide's public grading of the connectivity layer — the only public friction signal that exists

Supply help centre, last updated 2026-02-10 (Tier A, GYG-authored):

🔴 Bókun (Tripadvisor-owned) is Premium; FareHarbor (Booking-owned) is only Advanced. A dated, GYG-authored public ranking that places one competitor's system above the other's. GYG is comfortable telling suppliers that Booking's channel manager is second-tier on its platform.

4c. GYG's connectivity dependency — reassessed as control, not tenancy

The premise needed correcting. GYG owns no channel manager and routes supply through systems owned by Tripadvisor (Bókun) and Booking Holdings (FareHarbor). That is true. But GYG is not a tenant. It owns the ingestion contract.

Evidence of control:

1. GYG authors the spec and runs certification. integrator.getyourguide.com is a live Integrator Portal. getyourguide.supply/connectivity/connectivity-partners runs a Connectivity Partner Program with filters for Ticketing System / Channel Manager / Reservation System, pitching systems on joining: "Showcase your booking solution, attract new suppliers, and benefit from exclusive partner resources and incentives."
2. GYG publicly grades its competitors' products — §4b.
3. GYG keeps the catalog as system of record. "You must create your product in the Supplier Portal before connecting it to your reservation system." The channel manager syncs availability, price categories and bookings against a record GYG already owns. If a connector is lost, the catalog survives.
4. GYG built its way around the content dependency. The 2025-04-23 AI product-creation wizard means a supplier can build a complete, high-quality GYG listing directly in GYG's portal in ~14 minutes from a paste of their own website. A deliberate reduction in the value of channel-manager-mediated content onboarding — and it shipped to 100%.
5. Portfolio dilution as strategy. Nine+ named Premium/Advanced systems plus a long tail. No single connector is load-bearing.

Evidence of friction, cost, or strategic conflict: none found publicly. No dispute, no deprecation notice, no acquisition of a channel manager, no public complaint. Unverified whether GYG pays anything per booking — in this category connectivity vendors typically charge the supplier, so GYG's cost is plausibly engineering + partner support rather than per-transaction rent. Unverified; do not assert.

The precedent, stated correctly: GYG's position is not "partner for the plumbing." It is: own the spec and the catalog record; let other people's software implement your spec; grade them publicly; never build the channel manager. Materially cheaper than either building connectivity or surrendering the catalog to a connector. It also required a decade and a Supplier Portal to establish — the ownership of the record is what makes the rest safe.

⚠️ This directly contradicts 00-scope.md §4 Group 3, which framed the same facts as "a nameable strategic vulnerability." Conflict surfaced at §8 C6.

4d. OCTO — the leverage nobody in the brief named

Bókun, Prioticket, Ventrata and a widening set of others all implement the Open Connectivity for Tours, Activities and Attractions specification. Prioticket's own docs state it "consume[s] standard OCTO Supplier APIs as defined in the official specification"; Ventrata's entire doc site is titled "Ventrata OCTO API"; Bókun ships "Bókun's implementation of the OCTO API Standard."

[SPECULATION, but well-founded] For a team with no engineers, the highest-leverage move is to build one OCTO-conformant consumer rather than a second bespoke aggregator adapter. One integration then reaches Prioticket's pool, Ventrata's attractions, Bókun's marketplace, and any future OCTO supplier — and it makes each individual vendor swappable, which is the direct antidote to the GlobalTix concentration risk. This should be a named decision in the D3 architecture, not an implementation detail. It also means Ventrata stops being "the wrong shape" and becomes "a marginal-cost addition once the OCTO client exists."

4e. Kind-of-thing taxonomy — the framing correction that prevents the wrong purchase

Treating the nine candidates as one list is the main way the second-aggregator decision goes wrong.

4f. Two carried-forward pricing anchors — flagged, not re-evidenced in Step 3

• Middleware prices at ~5.7% EV / processed volume. Derived from the Step 3 figures for Travel Curious Group → Redeam, 2025-07-17: >$40M consideration against >$700M projected processed volume in year one (A). The ratio itself is arithmetic on those two numbers, not a disclosed multiple.
• Tripadvisor moved Bókun toward "a fraction of a percent per booking"; Palisis + Prioticket sell neutrality; OCTO is commoditising connectivity. ⚠️ The Bókun per-booking pricing claim is carried from Step 0/Step 2 and was NOT re-evidenced in any of the three Step 3 teardowns. The neutrality-selling and OCTO-commoditisation halves are evidenced in Step 3 (Prioticket "100%-public Distributor API + OCTO-native, owned by nobody who competes for the Bali traveller"; §4d). Treat the Bókun rate as unconfirmed at Step 3 and re-verify before it appears in a recommendation.

5. Indonesia / SEA competitive reality

5a. The D2/D3 partner pool — the first hard number

Source, Tier A, primary: DPP ASITA's own member directory at asita.id/anggota/, queried via its public WordPress REST API on 2026-07-26.

• GET /wp-json/wp/v2/wpbdp_listing?per_page=1 → header X-WP-Total: 5222
• GET /wp-json/wp/v2/wpbdp_category?per_page=100 → per-province counts

✅ Integrity check: the 36 category counts sum to exactly 5,222, matching the collection total. No double-counting, no gaps. This is a clean number.

Reconciling the ASITA Bali chairman's claims — they must not be used to size D2. The chairman's figures ("6.9m used travel agents" ≈ 99.3% of arrivals; separately "65%") are claims about travellers, not about ASITA membership, and they almost certainly count foreign travel agents and OTAs. Tested against 353 licensed Bali agencies:

🔴 Operative conclusion: do not use either ASITA percentage to size D2. D2's addressable Indonesian agent universe is the 5,222 licensed ASITA members; its addressable Bali universe is 353. Add non-ASITA operators, hotel concierges and villa managers for a wider Pool-B-adjacent tier, but 353 is the defensible anchor for the licensed-agency segment.

Motion-shape arithmetic:

• The Bali-only segment is 353 accounts. At an optimistic 20% penetration that is ~70 partners. A field-sales motion cannot be justified against 70 accounts unless per-account annual gross profit is large.
• Pool B is the only pool with room. At 27% gross vs Pool A's ~7% net, a Pool B rupiah is worth roughly 3.9× a Pool A rupiah to D2. A partner sending Pool A volume is close to free-riding on SatuSatu's cost base.
• 🔴 The break-even question the team must answer with its own data: for one fully-loaded Indonesian B2B salesperson, what annual Pool B GMV must each of ~70 Bali partners transact for the motion to clear cost? Concretely: required GMV per partner = (fully-loaded annual cost of sale + support) ÷ (0.27 × 70). If the answer exceeds what a 353-agency market plausibly transacts in Bali excursions, D2 must be self-serve — product-led, no human onboarding — or it must expand beyond Bali to the 5,222 national base, which means inventory beyond Bali, which means Pool A, which is the negative-value trap. That tension is the actual strategic decision inside D2.
• [UNVERIFIED] Average booking value and per-agency transaction volume were not obtainable. No BPS, ASITA or association source publishes agent-level booking volumes or ATVs. The largest remaining gap in the ACV model — and it is internal data SatuSatu already has.
• [SPECULATION] The 984-member Jakarta concentration versus 353 in Bali suggests the natural D2 buyer may not be the Bali inbound agency at all, but the Jakarta outbound/domestic agency selling Bali packages to Indonesian travellers — a bigger pool, remote-servable, consistent with a low-touch self-serve motion. Worth one hour of testing before the Bali-first assumption is locked in.
• Context that carries over: Arival/Phocuswright — >70% of experience operators are small or micro; offline direct sales still dominant. The Indonesian agent tier is now measured and consistent with that picture: 5,222 licensed agencies, 19% of them in Jakarta, only 6.8% in Bali.

5b. The incumbents already serving that pool — and the specific gap

🔴 Read the middle column of §3b again: every single Indonesian incumbent's B2B distribution is built around hotels, flights and packaged tours. Not one of them distributes ticketed attractions to agents.

• Golden Rama runs the architecture D2 proposes — two-sided, agent + supplier, live — but its public agent surface is a "Hotel reservation Center." It has the rails and is not putting attractions on them. [VERIFIED as of today; the portal is login-gated beyond the landing page, so post-login categories are UNVERIFIED — the single most valuable remaining check, and it needs an agent account.]
• Panorama distributes "tour packages and flight tickets" (Wupi, verbatim) and tours (Panorama Agent app). Packaged FIT/GIT product, sold with a quote-and-confirm workflow. Not real-time ticketed attraction inventory.
• TBO genuinely does carry 200,000+ sightseeing products to 25,000 agents — but it is India/Middle-East-centred, hotel-first in architecture, and its Indonesian activity depth is unverified. It is the one real competitor to D2's pitch, and it competes on breadth, not on Bali.
• Traveloka TPN is the most serious threat and the least discussed. It ships "Travel Activities" as a named B2B product line to "OTAs and travel wholesalers," and has a "Travel Agent Booking Engine (Coming Soon)" [ANNOUNCED]. Combined with the June 2026 Trip.com attractions-inventory pooling, Traveloka is assembling exactly D2 — with 60,000+ activities, Indonesian market ownership, and a balance sheet.
• Agoda is not a factor in distribution. Its activities inventory is not distributable.

Consequences, stated directly:

1. D2's pitch cannot be "a portal." Golden Rama has one. Traveloka is building one. Panorama has an app and a wholesale platform. A portal is table stakes and confers nothing — the same conclusion Step 2 reached about WhatsApp.
2. D2's pitch also cannot be Pool A inventory. Any Bali agent can source Pool A from GlobalTix directly, in-market, from a local GM, at a better nett rate — and SatuSatu is floored by minimumSellingPrice from undercutting. Reselling Pool A to agents is negative-value.
3. The only defensible D2 pitch is real-time, instantly-confirmable, direct-contracted Balinese long-tail inventory that is not in GlobalTix, not in TBO, not in Traveloka, and not obtainable by the agent any other way. That is Pool B — 27% gross — and it is also the only inventory SatuSatu holds exclusively. Exclusivity, margin and D2 viability all point at the same asset. Three independent lines of reasoning converge on Pool B.
4. 🔴 And Pool B's blocker — no real-time availability at the operator — is the whole product. Not the portal. The portal is the delivery mechanism for solving an availability problem no incumbent has solved for Balinese micro-operators. If SatuSatu does not solve availability at the operator, D2 has nothing to sell that Golden Rama, TBO or Traveloka cannot match.
5. ⚠️ And GlobalTix will sell that operator a solution for USD 100 and 3%. Read the SaaS table twice: for USD 100 one-time and a 3% booking fee, a Balinese operator with no reservation system gets real-time availability, a booking page, and channel-manager distribution. That is the commercial answer to Pool B's stated blocker — offered by SatuSatu's own supplier, at a price SatuSatu cannot beat, to the exact operators SatuSatu wants to contract exclusively. The clock on Pool B exclusivity is set by how fast SatuSatu's own supplier digitises the same operators.

5c. GlobalTix's Indonesian position — provable from its own reference data

• Indonesia is countryId: 2 — the second country in GlobalTix's system, immediately after Singapore (countryId: 1). Bali is cityId: 2 — the second city ever created in the platform. mobilePrefix: "+62", isDistributionTable: true, isListing: true, isBilling: true, lastUpdated: 2025-07-14. 🔴 Indonesia is not a late expansion market for GlobalTix; it is structurally the founding non-Singapore market.
• Indonesian city taxonomy is granular, not token: Bali (2), Jakarta (3), Bandung (4), Yogyakarta (5), Medan (6), Surabaya (111), Ubud (112) — Ubud carries its own city ID separate from Bali — plus Banyuwangi, Balikpapan, Berau, Manado. A vendor that gives Ubud a distinct city record is carrying Ubud-level supply, not just Denpasar airport transfers.
• IDR is a first-class settlement currency with a full markup / rounding / card-fee configuration.
• A live Indonesian product visible in the public docs: id: 52712, title: "Ancol Entrance Gate", country: "Indonesia", status: PUBLISHED, publishedDate: 2026-01-07.
• Named Indonesian supply across all sources: Borobudur Temple Compound (InJourney channel-manager mandate, 2025-10-07/08, A) · Taman Safari Indonesia (A) · Waterbom Bali · GWK · Ancol (A, from the API).
• ⚠️ What could not be established and must not be guessed: the count of Indonesian, and specifically Balinese, SKUs. No public per-country product count exists; product/list?countryCode= requires a token.
• Self-reported scale — and GlobalTix's own pages disagree with each other by 50,000 experiences:

⚠️ The reseller-facing page — the one a buyer like SatuSatu is being sold on — carries the lower number. Treat 150,000 as a marketing ceiling and 100,000 as the sourcing-relevant figure. The only interesting movement is 12M → 25M tickets in ~21 months. All figures Tier A-as-claim, unaudited.

Concentration risk on the incumbent feed:

Operational risk — no verifiable evidence found, and the evidence base is too thin to clear them either. G2: "There are not enough reviews for Global Tix for G2 to provide buying insight" — a ten-year-old company with 12,000 claimed agents has no reviewable install base on the main B2B review site, itself mildly informative about how the agent relationship is actually formed (direct sales, not self-serve). Capterra and SoftwareAdvice carry profiles with no incident, outage or dispute reporting. One "scam" complaint on globaltix.tenereteam.com (a coupon-affiliate aggregator) is Tier C, single anonymous datapoint, unusable — excluded. No status page, no published SLA, no uptime history, no post-incident reports found. Absence of a status page is a real finding for a vendor carrying a UNESCO-site channel-manager mandate. Departed customers: none identified. [UNVERIFIED] — do not infer stability from the absence.

The structural conflict, stated plainly: SatuSatu's D2 target market — Indonesian travel agents who want attractions inventory — is GlobalTix's existing 12,000-agent customer base, sold to in-market by a local Indonesian team. Every Bali agency SatuSatu pitches D2 to can open a GlobalTix reseller account instead and source the same Pool A catalog one layer higher, at a nett price very likely better than anything SatuSatu can pass through. The MSP floor removes the obvious counter — SatuSatu cannot win that agent on price. D3 is a direct product substitute for the thing GlobalTix already sells: its reseller pitch — "our powerful API… instantly searchable, bookable and cancelable in real-time" — is D3's pitch, shipped, at scale, since at least 2022-12-29. And ingestion is also disclosure: every product/list, checkEventAvailability and booking/reserve call tells SatuSatu's supplier exactly which SKUs it merchandises, when demand spikes, and what converts. A lesser version of the Bókun/Viator problem — but the live version.

🔴 The one-hour, zero-research task SatuSatu can run today with credentials it already holds:

GET /api/product/list?countryCode=ID          → count Indonesian products
GET /api/city/getAllCities                    → resolve cityId 2 (Bali) and 112 (Ubud)
   → bucket the ID product list by city; compare Bali+Ubud count against SatuSatu's 253 SKUs
GET /api/product/options?id={n}&isDynamicPrice=true
   → for a matched sample, capture nettPrice vs minimumSellingPrice vs Klook/Viator live retail

That last line converts the Pool A margin band from [INFERENCE] to [VERIFIED]. Highest value per hour on the whole list.

[SPECULATION, flagged] The directContractPrice field sitting null in the schema suggests GlobalTix operates a two-tier rate structure in which volume partners get contract rates below marketplace nett. If so, SatuSatu at 253 SKUs is on the public tier. Worth asking the account manager directly — the field name gives you the vocabulary to ask in.

Bottom line on GlobalTix: a competent, well-documented, Indonesia-deep connectivity vendor whose commercial terms are actively hostile to a small reseller's margin, and whose corporate form makes it a competitor for the exact customer D2 is being built for. Keep it, use it as the catalog-coverage utility it is, and stop expecting it to be a route to B2B revenue.

5d. Bali retail reality — the Klook Bali Pass, reverse-engineered

Identity. Activity ID 68512, klook.com/en-US/activity/68512-bali-pass/. On-page title: "Bali City Pass [Bundle & Save!]". Deep link klook://activity/68512. Published in 25 locale variants of the same activity ID (en-US, en-SG, en-AU, en-GB, en-IN, en-MY, en-PH, en-HK, en-CA, en-NZ, id, ja, ko, th, vi, ms-MY, zh-CN, zh-TW, zh-HK, de, fr, es, it, pt-implied, ru). One SKU, global demand, single ops overhead.

Structure. [SHIPPED], verbatim from the live PDP (A): "Explore Bali's top activities and save up to 45% Klook Bali Pass. Choose 2, 3, 4 or 5 of your favorite activities from a list of over 40 top activities in Bali." Four tiers, buyer-composed.

Price. product:price:amount = 46.85, product:price:currency = USD — the lead-in (2-activity tier) price as of 2026-07-26. Per-tier price ladder is rendered client-side and was not machine-readable; unverified.

Discount claim has been ratcheted. Klook's own blog (2025-02-18, A) says "save up to 42%". The live PDP (2026-07-26, A) says "save up to 45%". The headline discount has increased ~3pts over ~17 months.

Redemption flow — verbatim from Klook's own blog (A, 2025-02-18): ① log in to Klook account (web or app) · ② purchase the pass · ③ "Go to 'Bookings' to activate your pass and redeem your visit to any listed activity that is included in the type of pass you purchased" · ④ "You'll then receive a voucher" — a per-redemption voucher, issued at redemption time, not at purchase · ⑤ proceed to the activity.

🔴 Key architectural read: purchase, activation and redemption are three separate events. Klook holds the cash from purchase, defers the supplier liability to redemption, and only mints the redeemable artefact at step ④. Breakage on unredeemed slots accrues to Klook. Activation gates the validity clock, so the traveller controls when the window opens — which removes the main objection to date-bound passes.

Validity: 30 days from redemption/activation — reported consistently across secondary sources (B/C). The PDP T&C block is JS-rendered and was not retrievable; treat the exact figure as unverified at Tier A. The shape (activation-triggered rolling window, multi-day, one visit per activity, different activities on different days) is consistent across all sources.

Composition — 33 inclusions read off the live PDP (A), grouped by economic role:

🔴 The mechanic, stated plainly. The 40+ pool is majority low-marginal-cost, weak-brand, high-availability inventory — spas, a SIM card, a photographer, yoga. The anchors do the acquisition work in the merchandising; the redemption mix is where the unit economics survive. Klook is funding a 45% headline discount out of long-tail supplier margin and redemption-mix skew, not out of its own take rate. A Tier C source references "up to 2 super saver activities" as a sub-tier within the pool — consistent with a two-class inventory design, but unverified.

Merchandising against the standalone catalog. The pass is a separate PDP that sits beside, not inside, the standalone catalog. Fed by a dedicated promo hub (klook.com/en-US/tetris/promo/klook_pass_bali/ — "Bundle and save up to 45%, up to 40 activities in one pass") and the Bali deals hub (/tetris/promo/bali-deals/). Every constituent activity remains individually bookable at full price. Klook's own blog sells the pass on five benefits, and the fourth is explicit: "The pass helps with itinerary planning … This pass will help you with your itinerary planning by giving you a headstart."

Why this is the threat. Klook is not competing on the individual SKU. It is competing on trip composition — with a mechanic that needs no engineering (a bundle SKU + a redemption state machine), converts a shopping decision into a single purchase, defers supplier cost to redemption, and localises to 25 markets off one product record. The cheapest possible way to own the hero position in a destination.

Framing note from 00-scope.md §4: this is a direct, same-destination, same-mechanic competitor to SatuSatu's hero SKU — 40+ Bali activities against SatuSatu's "40–50+" (SatuSatu's own page self-contradicts: "40+ Top Experiences" on pricing cards vs "50+ curated attractions" in benefits). It inverts the plan's central risk: the demonstrated risk is not that SatuSatu goes horizontal and loses curation — it is that a horizontal incumbent bolts a pass on in a week.

5e. Viator's real economics — the asymptote the whole Indonesian D1/D3 case runs into

Honest finding first: the activist filings are weaker on unit economics than expected. Palliser's campaign (public 2025-08-05) is a sum-of-the-parts valuation argument, not a margin disclosure.

Starboard Value (~9%, letter 2026-02-17, settled via board expansion) likewise produced no segment-margin disclosure verifiable in Step 3. 🔴 The correction: the richest public source on whether a TAA marketplace is a good business is not the activist deck — it is Tripadvisor's own segment reporting, which the activists are pointing at, not supplementing.

The actual numbers (Tier A — Q4 2025 and Q1 2026 earnings calls):

Company-level context (stockanalysis.com, FY2025): revenue US$1,891M, gross profit US$1,746M, gross margin 92.3%, operating income US$80M, net income US$40M.

🔴 The one number that answers the question: Viator converts a 19.7% take rate into a 1.94% EBITDA margin on GBV. ~90% of the take rate is consumed before it reaches EBITDA. At 425,000 products, 70,000 suppliers and US$4.7B of GBV — the largest pure-play tours-and-activities marketplace in the world, twenty-plus years in — the business retains under two cents of every dollar booked.

And the seasonality is brutal in a way the annual figure hides: Q1 2026 Experiences ran a −11% EBITDA margin. A business whose peak-quarter margin is 7% of revenue and whose trough quarter is negative has almost no absorptive capacity for a bad season. Note also Q1 2026 revenue grew 8% headline but only 4% in constant currency — half the growth was FX.

Cross-check against Klook (F-1: gross profit = 11.2% of GTV on $3.04bn GTV):

They do not agree — Viator's is roughly 1.6× Klook's. Three reasons, and only the third is comforting:

1. Geography and product mix. Viator is North America/Europe-weighted, dominated by high-take third-party tours. Klook is Asia-weighted with heavy volume in low-take transport, attraction passes and rail — categories that carry a few points of margin, not twenty.
2. ⚠️ Accounting is not comparable. Tripadvisor's cost of revenue is thin (7.7% of revenue) and excludes all sales and marketing. Klook's gross profit line, per its F-1, sits after payment processing and elements of fulfilment. Klook's 11.2% and Viator's 18.2% are not the same line item. Directional only.
3. The comparison that is clean, and the one that matters: both companies end up in the low single digits of GBV at the profit line. Viator's 1.94% EBITDA/GBV at US$4.7B scale is the honest floor of what this business model yields. The gross-profit gap is real but it is not where the economics are decided — marketing is.

[SPECULATION, labelled — inference from Tier A figures, not a disclosed statement] The gap between a 19.7% take rate and a 1.94% EBITDA margin is almost entirely demand acquisition. Every disclosed strategic move confirms this is the binding constraint: pushing SEO below 10% of GBV, growing direct and app fastest, celebrating repeat cohorts with "lower acquisition costs beyond their first booking", and chasing AI channels because their conversion is "among the highest of any channel." All four are the same move — escape paid acquisition. Tripadvisor's AI strategy is not, at root, a product strategy. It is a CAC strategy, and the 1.94% is why.

5f. rezio — "build the plumbing and sell it" as a business: the arithmetic

The precedent, stated precisely. rezio is the only case in this study where a marketplace productised its supplier backend as a separately-priced, publicly-marketed SaaS whose channel manager distributes to the parent's direct competitors — GetYourGuide and Viator. Not as a concession. As a headline feature.

Does it work as a revenue business? Almost certainly not — and the arithmetic is not close.

• Disclosed scale: 5,000+ operators across TW/HK/JP/KR/SG/MY/TH/VN.
• All-PLUS ceiling: 5,000 × US$99.90 × 12 ≈ US$6.0M ARR.
• Implausible all-SCALE ceiling: 5,000 × US$216.60 × 12 ≈ US$13.0M ARR.
• Against KKday's ~US$70M Series D (2024-12-05).
• [SPECULATION, labelled] A realistic blend skewed to BASE/PLUS lands nearer US$4–5M ARR — a rounding error against a company that just raised US$70M, and one that a direct sales team calling on eight markets would struggle to cover, let alone profit from.
• rezio has no separate legal entity (it trades as Kkday.com International Company Limited), no separately reported revenue, and no separate P&L in anything public.

Verdict: rezio is a supply-acquisition subsidy with SaaS cost recovery, not a revenue line. The subscription exists to make the operator feel like a customer rather than a captured supplier, and to filter out operators too small to matter. What KKday buys for ~US$1,200/operator/year is far more valuable than the US$1,200: the operator's system of record — true availability, true cost price, true order state, live, first-party, continuously.

And the competitor-distribution question answers itself. rezio must push to GetYourGuide and Viator. Multi-channel distribution is the price of admission to the operator's back office. KKday pays it knowingly, because the position it buys is structurally better than exclusivity: KKday sees the operator's real inventory and real cost basis in real time, and is the default, zero-friction, already-configured channel. Every competitor reached through rezio is reached through a pipe KKday owns, on data KKday already has.

🔴 The transferable lesson is the inversion. The plumbing is not the product and it is not the revenue. The plumbing is the customer-acquisition cost, and the data position is the return. Anyone evaluating "build the plumbing and sell it" as a business is reading the precedent backwards. The only known instance of it prices at roughly cost and books no separate revenue.

Viator Partner API vs rezio Open API — head-to-head:

Viator's four-tier access matrix — a commercial instrument disguised as a permissions table (Tier A, published endpoint × tier matrix):

🔴 The catalogue you need to run a real storefront (/products/modified-since + /availability/schedules/modified-since) is denied at Basic. You cannot even build a competent catalogue without being commercially promoted first. And Merchant is denied the Payments endpoint precisely because a merchant of record processes its own money.

6. Partner / compete / avoid — every connectivity and Indonesian entity

Preserved from raw/teardown-connectivity-indonesia.md §5, unchanged.

⚠️ Not given a partner/compete/avoid call in Step 3: GetYourGuide (studied as a design precedent, not a counterparty — but note it exposes the only outbound distributor API in Group 1 with a declared sandbox, and IDR is not a settlement currency on it) and Headout (studied as a cautionary case). KKday is covered via rezio. Do not infer a call for these from the table above.

7. Implications for SatuSatu — one line per company, and which direction it lands on

These are notes with reasons, not recommendations. The Group 1 and Viator-bracket entries below are reproduced verbatim from the source teardowns; they are the analytical payload of Step 3 and have not been re-worded, softened or shortened.

7a. The four cross-cutting reads that no single company owns

1. Every B2B surface in this category is pre-LLM. GYG, Viator, rezio, GlobalTix and Headout all ship connectivity with zero AI, no MCP, no semantic search, no agent manifest. "The AI is in the storefront, not in the pipe." The B2B layer of this category is uncontested on AI — which is either the opening or the reason nobody bothered. Step 3 does not resolve which.
2. Nobody has shipped AI into pricing or payments/fraud. Everyone scores ~1 and ~0–1 respectively — the two functions that most directly move gross margin. "That is a real gap in the category, not just in these two companies."
3. The only decisively shipped-and-quantified GenAI in the whole value chain is supplier-side catalog production (GYG, 2025-04-23, 8/16 wizard steps, 100% rollout, ~14-minute listing). The single most transferable finding in Step 3 — and per §7 it is an off-the-shelf-LLM ops habit at SatuSatu's scale, not a build.
4. Three independent lines of reasoning converge on Pool B: exclusivity (it is the only inventory SatuSatu holds alone), margin (27% vs ~7%, a 3.9× ratio per D2 rupiah), and D2 viability (the only pitch no incumbent can match). And Pool B's blocker — real-time availability at the operator — is simultaneously the moat and the gate, with SatuSatu's own supplier selling the operator a solution for USD 100 + 3%.

8. Open items and unresolved conflicts

8a. Conflicts surfaced — not silently resolved

8b. Open items — unverified, and what would close each

End of consolidated Step 3 deliverable. Nothing above has been rounded, softened, or promoted across a status marker. Where Step 3 did not look, the cell says so.