21grams

Sweden · www.21grams.com · 12 vendors

21GRAMS is a full-service healthcare advertising agency specializing in strategic and creative marketing, advertising, and patient/medical education. The company aims to make healthcare more human and inspiring for its audiences. It was acquired by W2O Group (now Real Chemistry) in 2020.

Resilience scores

Technology vendors

Insights

Last updated 2026-04-17 · revision 1

12 direct vendors, 191 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

21grams exhibits high migration readiness, largely due to its existing "Cloud-based web applications (apps.21grams.com platform)" and extensive use of "API integrations" for services like internet banking, Swish payments, and digital mailboxes. A cloud-based architecture inherently provides a strong foundation for further migration efforts, such as adopting containerization or microservices, and offers flexibility in scaling and deployment. The modular nature implied by numerous API integrations also suggests a less monolithic system, easing the migration of individual components. The most significant factor contributing to high migration readiness, if accurate, is the stated "Total Vendors: 0". This would mean virtually no vendor lock-in, a major hurdle for many companies undertaking migration. The absence of external vendor dependencies would dramatically simplify contract negotiations, data transfers, and technical integrations during a migration project. However, this contradicts the presence of "Vendor HQ Countries" and "Vendor Geographic Diversity" data. If external vendors are indeed involved, the "Vendor Lock-in Risk: Unknown" becomes a potential challenge, and the geographic diversity of these vendors (5 countries) could introduce complexity in coordinating migration efforts across different vendor ecosystems. Key missing information includes financial stability data, which is crucial for assessing the company's ability to fund a potentially large migration project. Additionally, "Data Residency Requirements" are "Not specified," which could pose significant challenges if strict requirements exist and are only discovered during the migration planning phase. The regulatory environment is also not detailed, making it difficult to assess specific compliance hurdles during a migration. Despite these unknowns, the existing cloud foundation and potential lack of vendor lock-in are strong indicators of high readiness.

Compliance

4 in-scope frameworks identified; showing 3.

NIS2 (source) — Assessment Required

NIS2 may apply as 21grams operates in postal services sector in the EU, which could qualify as an Important Entity under postal/courier services. The company appears to meet size thresholds as part of PostNord Strålfors group. However, specific classification requires detailed assessment of services scope and technical infrastructure. Risk is medium due to potential applicability but uncertainty about exact classification and current compliance measures.

Evidence: https://www.21grams.com/, https://www.21grams.com/postnord-stralfors-acquisition-of-21grams-has-been-finalized/

SOC 2 (source) — Assessment Required

SOC2 may be relevant as 21grams provides digital services including file exchange, e-archive, and document tracking platforms that could serve business customers requiring SOC2 compliance. As part of PostNord Strålfors, they may need SOC2 for competitive positioning in B2B markets. Risk is medium as it's not legally required but could be commercially necessary for customer trust and contracts.

Evidence: https://www.21grams.com/

GDPR (source) — Assessment Required

GDPR applies with high certainty as 21grams is an EU-based company (Sweden) that processes personal data of customers, employees, and business contacts. Non-compliance can result in fines up to 4% of annual turnover or €20M. The company has a detailed privacy policy indicating awareness of GDPR requirements, but compliance status requires formal assessment. Risk is high due to severe penalties and the company's data processing activities in mail and communication services.

Evidence: https://www.21grams.com/privacypolicy/

Financials

Three-year financials

Financial Resilience Score: 6/10

21grams AB demonstrates meaningful operational resilience built over a 21-year track record, having navigated multiple postal market disruptions, regulatory changes, and technology transitions since its founding in 2004. The company's repeated Dagens Industri Gazelle Company recognition in both 2014 and 2015 confirms a period of sustained above-average revenue growth with positive results, and its six acquisitions between 2010 and 2019 demonstrate a proven ability to integrate and scale operations across the Nordic region. Proprietary technology platforms (iSort, Winjet, PostSort) and World Mail Award wins in 2008 and 2010 indicate genuine technical differentiation, while CTD certification since 2015 provides a regulatory moat in the Swedish e-invoice market. The 2025 acquisition by PostNord Strålfors materially improves the company's financial stability outlook, replacing a financially stressed parent (Unifiedpost/Banqup Group, which faced significant pressures on Euronext Brussels) with a well-capitalised Nordic postal and document communications group. This transition provides access to a larger balance sheet, broader distribution network, and an expanded Nordic customer base, substantially reducing standalone financial risk going forward. However, the resilience score is tempered by several structural concerns. The core postal optimisation business faces an irreversible secular decline in physical mail volumes across Scandinavia, representing a permanent headwind to the largest revenue segment. The company has changed ownership twice in four years (2021 and 2025), creating potential management instability, customer uncertainty, and integration costs. The prior parent's financial difficulties may have constrained investment capacity during 2021–2025, potentially widening competitive gaps. Quantitative financial data (revenue, EBIT, equity) could not be retrieved or verified in this research session due to access restrictions on Swedish business databases (allabolag.se blocked). The estimated revenue range of SEK 50–300M is based solely on contextual inference from Gazelle award eligibility criteria and is not an audited or confirmed figure. This significant data gap prevents a higher confidence score and limits the precision of any financial resilience assessment.

Key strengths: 21-year operating history with survival through multiple market disruptions, Dagens Industri Gazelle Company recognition in 2014 and 2015 (sustained high growth with positive results), Six acquisitions completed between 2010 and 2019 demonstrating integration capability, Proprietary technology platforms (iSort, Winjet, PostSort) providing technical differentiation, World Mail Awards: best postal technology (2008) and best postal service (2010), CTD certification since 2015 creating regulatory moat in Swedish e-invoice market, 2025 acquisition by PostNord Strålfors providing access to stronger balance sheet and Nordic network, Nordic geographic diversification across Sweden, Norway, and Denmark

Risk factors: Structural secular decline in physical mail volumes across Scandinavia — irreversible headwind to core business, Two ownership changes in four years (Unifiedpost 2021, PostNord Strålfors 2025) creating management and customer instability risk, Prior parent Unifiedpost/Banqup Group faced significant financial pressures, potentially constraining 21grams' investment capacity 2021–2025, Highly competitive digital communications and e-invoice market with larger players including Strålfors, Bisnode, Nets, and international fintechs, SME scale limits pricing power and margin resilience against larger competitors, UK subsidiary established 2006 appears inactive in recent materials, suggesting a possible historical write-off, No audited financial data publicly accessible in this session — quantitative resilience cannot be confirmed

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report