24Nettbutikk AS

Norway · www.24nettbutikk.no · 26 vendors

24Nettbutikk AS provides an e-commerce platform designed for Norwegian entrepreneurs and businesses to create and manage online stores. The platform offers a comprehensive solution including web hosting, integrated payment options like Klarna and Vipps, shipping agreements, and design tools. Their aim is to simplify online selling and support businesses in their e-commerce endeavors.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 26 sub-vendors.

Insights

Last updated 2026-07-18 · revision 6

26 direct vendors, 278 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

24Nettbutikk AS exhibits medium migration readiness. The company's core '24Next' platform is a modern, SaaS-based e-commerce solution, likely built on a cloud-native architecture with API-driven integrations, which generally provides a good foundation for migration. The extensive ecosystem of pre-built integrations (55+ services) suggests an adaptable system. However, the sheer volume of these integrations, while beneficial for current functionality, presents a significant challenge for migration, as each integration would need to be re-evaluated, re-configured, or re-implemented in a new environment, increasing complexity and potential cost. Regulatory compliance and data residency requirements are critical factors. GDPR compliance is an 'Assessment Required' area with 'High' risk, and any migration would need to meticulously address data handling, international transfers (especially to HubSpot and Google), and legal safeguards. Norway's adherence to EU/EEA data protection standards means strict adherence to GDPR data residency and transfer rules. The lack of SOC2 and ISO 27001 certifications means that a migration project might need to incorporate efforts to achieve these, adding to the scope and complexity. Financial stability and the ability to fund a potentially large-scale migration are unknown due to missing data. Furthermore, the vendor lock-in risk is unknown, but reliance on core internal tech like HubSpot and numerous third-party integrations could pose challenges if contracts are inflexible or migration paths are not well-defined by vendors.

Compliance

8 in-scope frameworks identified; showing 3.

Norwegian Electronic Communications Act — Assessment Required

The Norwegian Electronic Communications Act (Ekomloven, LOV-2003-07-04-83) and its implementing regulations govern the use of cookies and similar tracking technologies. The risk is Medium because the company's cookie consent mechanism relies on browser settings rather than a dedicated Consent Management Platform (CMP), which may not meet the granular, informed, and freely given consent requirements. Datatilsynet has issued guidance requiring active opt-in consent for non-essential cookies, and enforcement in this area has increased across the EEA. Non-compliance could result in enforcement action, fines, or reputational damage.

Evidence: https://www.24nettbutikk.no/personvernerkl%C3%A6ring-cookies, https://lovdata.no/dokument/NL/lov/2003-07-04-83, https://www.datatilsynet.no/regelverk-og-verktoy/veiledere/informasjonskapsler/, https://www.nkom.no/internett/informasjonskapsler-cookies

Norwegian Consumer Protection Regulations — Assessment Required

As a SaaS platform provider enabling Norwegian e-commerce, 24Nettbutikk's merchant customers are subject to Norwegian consumer protection law. As the platform provider, 24Nettbutikk has a responsibility to ensure its platform supports compliance with the Consumer Purchases Act (Forbrukerkjøpsloven) and the Right of Withdrawal Act (Angrerettloven). The risk is Medium because non-compliant platform features could expose both the company and its merchant customers to regulatory action from Forbrukertilsynet (the Norwegian Consumer Authority). The company publishes its own terms of service (kjøpsbetingelser) but the extent to which the platform enforces consumer protection requirements for end-merchants is unclear.

Evidence: https://www.24nettbutikk.no/kjopsbetingelser, https://lovdata.no/dokument/NL/lov/2014-06-20-27, https://lovdata.no/dokument/NL/lov/2002-06-21-34, https://www.forbrukertilsynet.no/

EU Digital Services Act — Assessment Required

The DSA (Regulation EU 2022/2065) applies to online intermediary services, including online platforms, operating in the EU/EEA. 24Nettbutikk provides a SaaS e-commerce platform to Norwegian merchants. If the platform enables transactions between merchants and consumers (acting as an online marketplace), DSA obligations may apply. However, 24Nettbutikk appears to be a platform-as-a-service provider (merchants build their own stores) rather than a marketplace, which may reduce DSA obligations. The risk is Low because the company is small (likely below the 'very large online platform' threshold of 45M+ EU users) and primarily serves Norwegian SMEs. The DMA applies only to 'gatekeepers' (very large platforms), which 24Nettbutikk clearly is not.

Evidence: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R2065, https://www.24nettbutikk.no, https://www.regjeringen.no/no/tema/naringsliv/handel-og-naring/digitale-tjenester/id3059870/

Financials

Three-year financials

Financial Resilience Score: 6/10

24Nettbutikk AS demonstrates moderate financial resilience based on qualitative factors, though specific financial figures are not publicly available in this report. The company benefits from an ~18-20 year operating history, which significantly reduces early-stage business risk and suggests the presence of recurring SaaS revenue streams. Its diversified customer base of over 1,000 Norwegian merchants reduces single-customer concentration risk, and its deep integration ecosystem (Vipps, Klarna, Bring, PostNord, Tripletex) creates meaningful switching costs that support customer retention. However, the company faces several structural risks that limit its resilience score. As a Norway-only SaaS provider, it is fully exposed to Norwegian retail and e-commerce cycles, with no geographic diversification to buffer local downturns. Intense competition from global platforms like Shopify, WooCommerce, Wix, and Squarespace, as well as Nordic peers (Mystore, Askås, Jetshop, Centra), pressures both pricing and growth. The SMB customer base is inherently churn-prone, particularly given the wave of Norwegian retail bankruptcies in 2023-2024. Additionally, the ongoing platform re-write to '24Next' implies elevated R&D spending that could compress margins, and as a private AS likely funded internally, heavy investment cycles could pressure equity.

Key strengths: 18+ years of operating history reducing young-company risk, 1,000+ active merchants providing diversified recurring revenue, Deep local integration ecosystem (Vipps, Klarna, Bring, PostNord) creating switching costs, Local-language and local-payments moat vs. international competitors, Multiple ancillary revenue streams (shipping, design, training, marketing), Continued reinvestment in technology via new 24Next product

Risk factors: Revenue essentially Norway-only, exposing company to local retail cycles and NOK strength, Intense competition from Shopify, WooCommerce, Wix, Squarespace and Nordic peers, SMB customer base vulnerable to churn and bankruptcies in soft Norwegian consumer market, Platform re-write (24Next) implies elevated R&D spending compressing margins, Rørvik location limits engineering talent pool for scaling, Private AS with likely internal funding; heavy investment cycles could pressure equity

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report