3Q GmbH

Germany · 3q.video · 13 vendors

Resilience scores

Technology vendors

Services catalogue

4 services in catalogue across 3 categories; runs on 13 sub-vendors.

Insights

Last updated 2026-08-03 · revision 1

13 direct vendors, 223 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

3Q GmbH exhibits a medium level of migration readiness. The company's 'API-First' architecture is a significant strength, providing modularity and clear interfaces that would facilitate re-platforming or integration during a migration. The use of S3-compatible object storage (Ceph) offers flexibility, as this storage standard is widely supported across public cloud providers. The multi-CDN strategy also indicates a degree of vendor independence for content delivery. However, several factors present challenges for a potential migration, particularly to a public cloud environment. The core infrastructure is based on self-managed colocation in Germany (Hetzner and NTT Data Center), rather than being inherently cloud-native. This suggests that a migration would likely involve a substantial 'lift-and-shift' or a complex re-architecture effort, rather than a straightforward cloud adoption. While the tech stack is modern for video, there is no explicit mention of containerization (e.g., Kubernetes) or a microservices architecture beyond 'API-First,' which could imply a more monolithic core that is harder to decompose. The strong regulatory compliance requirements (GDPR, PIPL, ICP filing) are a positive for operations but add significant complexity and cost to any migration, as compliance must be maintained in the new environment. The lack of data on financial stability makes it impossible to assess the company's capacity to fund a major migration initiative. Additionally, the 'Vendor Lock-in Risk' is unknown, which could pose unforeseen challenges. Overall, while the API-first approach and S3 compatibility offer some advantages, the self-managed infrastructure and regulatory complexities temper the overall migration readiness.

Compliance

9 in-scope frameworks identified; showing 3.

NIS2 (source) — Assessment Required

NIS2 applicability for 3Q GmbH requires careful assessment. The company operates as a digital infrastructure and SaaS provider in Germany (EU). Under NIS2, 'Digital Providers' — specifically 'online marketplaces, online search engines, and cloud computing service providers' — are listed as Important Entities. 3Q GmbH's SaaS video platform with CDN infrastructure could potentially qualify under 'cloud computing services' or 'digital infrastructure' categories depending on the specific German NIS2 transposition (BSIG/NIS2UmsuCG). The company serves critical-sector customers (banking/insurance: Raiffeisen, Signal Iduna, Swiss Life; public broadcasting: ARD, SWR; public sector use cases explicitly marketed). Size thresholds (50+ employees or €10M+ turnover) are unconfirmed from public sources — the company was founded in 2009 and serves enterprise clients, suggesting it may meet thresholds, but this is not verified. Risk is Medium because: if NIS2 applies, non-compliance carries significant penalties (up to €10M or 2% of global turnover for Important Entities); however, the sector classification is not definitively confirmed, and the company's ISO 27001:2022 certification demonstrates a mature security posture that would substantially address NIS2 technical requirements.

Evidence: https://3q.video/de/help-center/informationssicherheit-datenschutz, https://3q.video/de/loesungen/infrastruktur, https://3q.video/de/help-center/datenschutz-und-richtlinien

PIPL — Assessment Required

3Q GmbH explicitly offers a 'China Delivery' CDN service with ICP filing (Internet Content Provider license), enabling video streaming to audiences in China. The company's website states it is 'PIPL-ready' for its China delivery service. China's PIPL (effective November 2021) applies to organizations processing personal information of individuals located in China, including foreign companies providing services to Chinese users. Since 3Q GmbH routes video streams and potentially viewer analytics through Chinese CDN infrastructure (ChinaCache), PIPL compliance is directly relevant. Risk is Medium because: (1) PIPL carries significant penalties for non-compliance (up to RMB 50 million or 5% of annual revenue); (2) the company explicitly markets China delivery as a feature; (3) the 'PIPL-ready' claim is self-declared without independent verification; (4) PIPL requirements (data localization, cross-border transfer restrictions, consent requirements) are complex and evolving.

Evidence: https://3q.video/de/loesungen/cdn/china-delivery, https://3q.video

IAB Europe Transparency & Consent Framework — Partially Compliant

3Q GmbH is a registered member of IAB Europe (logo displayed in website footer with link to iabeurope.eu), which is directly relevant to the IAB Transparency & Consent Framework (TCF). The company's video player supports consent management tool integration and offers a tracking-free player option. The German Telecommunications-Telemedia Data Protection Act (TTDSG) and the EU ePrivacy Directive (Cookie Law) apply to 3Q GmbH's platform and its customers' use of the video player. The company explicitly offers 'consent-free integration' and 'integration in Consent Management Tools' as privacy features. Risk is Medium because: (1) IAB TCF compliance is complex and has faced regulatory scrutiny (Belgian DPA ruling against IAB Europe in 2022); (2) the company's advertising module (VAST/VPAID ad integration) creates additional consent obligations; (3) partial compliance is indicated by the availability of both tracking and tracking-free options.

Evidence: https://3q.video, https://3q.video/de/help-center/datenschutz-und-richtlinien, https://iabeurope.eu/

Financials

Three-year financials

Financial Resilience Score: 6/10

3Q GmbH is a private German SaaS company in the video technology space that has been operating continuously since 2009, indicating a sustainable business model that has weathered multiple industry cycles including the rise of Netflix/YouTube, the COVID streaming boom, and the current AI transition. The company serves a blue-chip customer base including Siemens, Strabag, Swiss Life, Signal Iduna, Raiffeisen, ARD, SWR, and Funke Mediengruppe, which typically implies long contract durations and stable recurring revenue via SaaS subscriptions. Its positioning as a European, GDPR-compliant, ISO 27001-certified alternative to US hyperscaler-based video platforms provides a regulatory tailwind given growing EU data-sovereignty concerns (Schrems II, EU Data Act, DSA). However, the company faces intense global competition from far larger players including Vimeo, Brightcove, Kaltura, JW Player, Wowza, Bitmovin, Mux, and hyperscalers (AWS IVS, Azure Media, Google Cloud), placing it at a scale disadvantage on R&D and pricing. Operating its own EU-based infrastructure creates capex intensity and negative operating leverage risk in demand downturns. As a small GmbH, it likely has a limited equity cushion and constrained financing options. Financial transparency is low due to the small-GmbH disclosure exemption under §267 HGB, meaning revenue and EBIT are almost certainly not publicly disclosed, making independent financial assessment difficult.

Key strengths: 15+ years of continuous operation since 2009, Blue-chip enterprise customer base (Siemens, Swiss Life, ARD, SWR, Funke), Recurring SaaS subscription revenue model, ISO 27001 certification enables public-sector and regulated-industry deals, European data-sovereignty positioning aligned with GDPR/Schrems II tailwinds, Innovation Award 2023 recognition, Ongoing investment in AI features and FAST-channel infrastructure

Risk factors: Intense competition from larger global players (Vimeo, Brightcove, Kaltura) and hyperscalers, Capex-intensive model operating own EU data center infrastructure, Likely customer concentration risk with few named marquee accounts, Small-GmbH balance sheet with limited equity cushion, Technology transition risk in fast-moving video AI and real-time streaming space, Low financial transparency due to small-company disclosure exemptions, Scale disadvantage on R&D spending versus global competitors

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report