AddPro AB

Sweden · www.addpro.se · 13 vendors

AddPro AB is a leading Swedish and Danish business transformation partner that provides managed IT services. The company offers mission-critical services and solutions across the entire IT value chain, including managed infrastructure, cloud integration, application development, and digital workspace solutions.

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 13 sub-vendors.

Insights

Last updated 2026-08-07 · revision 1

13 direct vendors, 213 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

AddPro AB exhibits good migration readiness, scoring 70. A major strength is their core business offering, which includes 'Cloud & Infrastructure' services like cloud migration and transformation, indicating strong internal expertise and a strategic focus on cloud adoption. Their internal tech stack heavily features cloud-native platforms such as Microsoft Azure, Microsoft 365, and Microsoft Dynamics 365, demonstrating practical experience with modern cloud environments. While the presence of Oracle Database and VMware suggests some traditional or legacy infrastructure components that might require more complex migration strategies, AddPro's 'Application Services' include Oracle license management and database administration, implying they possess the expertise to manage and potentially migrate these systems. The geographic diversity of their operations and vendors could also support distributed migration efforts. However, the assessment is hampered by critical missing information, including specific data residency requirements and details about their regulatory environment, which are crucial factors in migration planning. The 'Vendor Lock-in Risk' is unknown, and while their reliance on major platforms like Microsoft and Oracle is evident, the degree of internal lock-in and contract complexity is not specified. Financial stability data, which would indicate their ability to fund large-scale migrations, is also unavailable.

Compliance

7 in-scope frameworks identified; showing 3.

NIS2 (source) — Assessment Required

AddPro AB / itm8 Sweden operates as an IT managed services provider, cloud hosting provider, and cybersecurity services provider. Under NIS2 Directive (transposed into Swedish law via the Cybersäkerhetslagen, SFS 2024:1105, effective 1 January 2025), 'ICT service management' (managed service providers and managed security service providers) is explicitly listed as an Essential Entity sector. With 1,600+ employees group-wide and operations across 4 countries, itm8 clearly exceeds the medium enterprise threshold (50+ employees or €10M+ turnover). The Swedish entity (AddPro AB / itm8 Sweden) with offices in Malmö, Stockholm, Göteborg, Helsingborg, and Kristianstad likely independently meets size thresholds. The risk level is Medium rather than High because: (1) NIS2 applicability to the specific Swedish legal entity (AddPro AB) versus the group parent (itm8 A/S, Danish entity) requires formal self-assessment; (2) the company offers NIS2/GRC consulting to clients, suggesting awareness but no public self-compliance declaration has been found; (3) non-compliance with NIS2 in Sweden can result in fines up to SEK 100M or 2% of global turnover for essential entities.

Evidence: https://itm8.se/management-consulting/governance-risk-management-compliance, https://itm8.se/it-raadgivning/grc, https://www.msb.se/sv/amnesomraden/informationssakerhet-cybersakerhet-och-sakra-kommunikationer/nis2/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555, https://www.riksdagen.se/sv/dokument-och-lagar/dokument/svensk-forfattningssamling/cyberssakerhetslagen-2024-1105_sfs-2024-1105/

ISO 27001 (source) — Assessment Required

AddPro AB / itm8 is an IT managed services and cybersecurity provider handling sensitive customer data, operating cloud infrastructure, and providing security monitoring services. ISO 27001 is the internationally recognized standard for information security management and is highly expected of companies in this sector. The company holds ISO 14001 (environmental management, since 2017) and references '1,000 certifications' on its website, but no explicit ISO 27001 certification has been confirmed in public sources. Risk is Medium because: (1) absence of ISO 27001 would be a significant gap for a cybersecurity and managed services provider; (2) enterprise customers and regulated-sector clients typically require ISO 27001 as a baseline; (3) NIS2 compliance (likely applicable) is substantially facilitated by ISO 27001 alignment; (4) the company's own cybersecurity service offerings imply internal security maturity, but this is unverified by external audit.

Evidence: https://itm8.se/om-itm8/esg, https://itm8.se/cybersecurity, https://itm8.se/vara-viktiga-dokument, https://www.iso.org/standard/27001

EU AI Act (source) — Assessment Required

The EU AI Act entered into force in August 2024 with phased applicability (prohibited AI systems: February 2025; high-risk AI systems: August 2026; general-purpose AI: August 2025). AddPro AB / itm8 offers AI services including Microsoft Copilot integration and AI consulting. As a provider and deployer of AI systems in the EU, itm8 may have obligations under the AI Act depending on the risk classification of AI systems used or deployed for clients. Risk is currently Low because: (1) most AI services offered appear to be general-purpose AI tools (Microsoft Copilot) rather than high-risk AI systems; (2) full applicability for high-risk systems is August 2026; (3) the company's AI offerings appear to be reselling/integrating third-party AI rather than developing proprietary high-risk AI.

Evidence: https://itm8.se/ai, https://itm8.se/ai/microsoft-365-copilot, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32024R1689

Financials

Financial Resilience Score: 6/10

AddPro AB was a well-established Swedish IT solutions provider with a strong Nordic footprint and long-standing customer base, particularly in southern Sweden. The company benefited from recurring revenue streams through managed services, cloud hosting, and support contracts, providing baseline stability. Its acquisition by the Axcel-backed itm8 group provides access to capital, cross-Nordic scale, and M&A firepower, which strengthens its financial position going forward. However, the business model carries structural margin pressure. A significant portion of revenue is pass-through hardware and software licenses, resulting in thin gross margins and EBIT sensitivity to project mix. Industry EBIT margins in this segment typically run in the low single digits (~2-5%). Additionally, integration risk following the itm8 acquisition, vendor concentration (particularly Microsoft), intense talent competition with wage inflation for cloud/security specialists, and cyclicality in enterprise IT spending all weigh on resilience. The retirement of the AddPro brand and consolidation into itm8 Sverige also creates transitional risk with potential customer and employee attrition. Without verified year-by-year financials, a precise resilience score is difficult, but the combination of PE backing, recurring revenue, and Nordic scale is balanced against low-margin dynamics and integration challenges.

Key strengths: Strong Nordic footprint with long-standing customer base in mid-market and enterprise IT, Recurring revenue from managed services, cloud hosting, and support contracts, Strong vendor relationships (Microsoft Gold Partner, Cisco, HPE, Oracle, VMware), Owned by well-capitalized PE-backed group (Axcel via itm8) providing capital access and Nordic scale, Historical revenue in range of SEK 900M - SEK 1.3B pre-acquisition

Risk factors: Low-margin resale business with thin gross margins sensitive to project mix, Integration risk from merging into itm8's operating model and brand, Vendor concentration, especially dependence on Microsoft partner programs, Intense talent competition and wage inflation for cloud/security specialists, Cyclicality tied to hardware refresh cycles and enterprise IT spending, Loss of AddPro brand identity may reduce visibility for legacy customers

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report