Aimsun

Spain · aimsun.com · 25 vendors

Aimsun is a software company that provides simulation software and services for transportation planning and traffic management. It offers integrated transport modeling software and data analytics to help clients understand transport network performance, predict its evolution, and make data-driven decisions for smart and sustainable mobility.

Resilience scores

Technology vendors

Insights

Last updated 2026-07-18 · revision 2

25 direct vendors, 317 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Aimsun demonstrates a good level of migration readiness, primarily driven by its existing adoption of modern cloud technologies and development practices. The internal tech stack includes Amazon Web Services (AWS), CI/CD, and DevOps, alongside "Cloud-based Simulation" as a key technology, indicating a foundational understanding and capability for cloud-native operations. The absence of specified data residency requirements simplifies potential migration efforts, removing a common hurdle. Furthermore, the company benefits from a geographically diverse vendor ecosystem, with services sourced from 10 unique countries, which generally reduces the risk of vendor lock-in and provides more flexibility in choosing migration partners or alternative solutions. However, the assessment is limited by the lack of information regarding financial stability, which is crucial for funding significant migration projects. While the tech stack is modern, the presence of C++ and Qt might indicate some components that could require more effort to refactor into fully cloud-native, containerized, or microservices architectures. The specific vendor lock-in risk remains unknown, despite the overall vendor diversity.

Compliance

14 in-scope frameworks identified; showing 3.

SOC 2 (source) — Assessment Required

Aimsun provides cloud-based and SaaS-adjacent services including myAimsun (customer portal), Aimsun Insight (data-driven mobility insights), Aimsun Predict (traffic data processing), and Aimsun Live (real-time digital twins). These services involve processing customer data in cloud environments (evidenced by AWS eu-central-1 S3 bucket usage). Enterprise and government clients — particularly US-based clients such as NYCDOT, FDOT, and Ontario Ministry of Transportation — commonly require SOC 2 Type II reports from software vendors as part of procurement and vendor risk management. The absence of a publicly disclosed SOC 2 report is a gap, though the company may have one available under NDA for enterprise clients. Risk is Medium because: (1) cloud service delivery creates SOC 2 relevance; (2) US government and enterprise clients typically require SOC 2; (3) no public SOC 2 report found; (4) the company's ISO 9001 and ENS certifications partially address trust service criteria but do not substitute for SOC 2.

Evidence: https://www.aimsun.com/compliance/, https://www.aimsun.com/aimsun-insight/, https://www.aimsun.com/aimsun-predict/, https://www.aimsun.com/aimsun-live/, https://aimsun-marketing.s3.eu-central-1.amazonaws.com/Docs/Aimsun+Declaraci%C3%B3n+de+Conformidad+ENS_Signed+2.pdf

NIS2 (source) — Assessment Required

NIS2 (EU Directive 2022/2555, transposed into Spanish law) applies to entities in listed sectors that meet size thresholds (50+ employees or €10M+ turnover). Aimsun provides transport simulation software, digital twins, and real-time traffic management systems to transport authorities and infrastructure operators across the EU and globally. As a software/ICT provider to the transport sector, Aimsun may qualify as an 'Important Entity' under NIS2 Annex II (digital providers / ICT service management) or potentially as a supplier to Essential Entities in the transport sector. The company's Aimsun Live product provides real-time traffic management for road infrastructure — a function directly supporting transport critical infrastructure. However, Aimsun itself is a software vendor, not a transport operator, which creates ambiguity about direct NIS2 entity classification. Spain transposed NIS2 via the pending update to Ley 36/2015 and related legislation. Risk is Medium because: (1) the company's products directly support critical transport infrastructure; (2) as part of Yunex Traffic (Siemens), the group likely has NIS2 obligations; (3) the ENS Basic Declaration of Conformity (RD 311/2022) demonstrates cybersecurity awareness aligned with NIS2 principles; but (4) direct NIS2 entity classification requires formal assessment of sector classification and size thresholds.

Evidence: https://www.aimsun.com/compliance/, https://aimsun-marketing.s3.eu-central-1.amazonaws.com/Docs/Aimsun+Declaraci%C3%B3n+de+Conformidad+ENS_Signed+2.pdf, https://www.aimsun.com/aimsun-live/, https://www.yunextraffic.com/company/sustainability/

EU AI Act (source) — Assessment Required

The EU AI Act (fully applicable from August 2026 for most provisions) is relevant to Aimsun given its AI-powered transport simulation, predictive analytics (Aimsun Predict), and real-time traffic management (Aimsun Live) products. Traffic management systems that influence road safety decisions may be classified as 'high-risk AI systems' under Annex III of the EU AI Act (specifically: AI systems used in transport safety-critical infrastructure management). Risk is Medium because: (1) Aimsun's AI-powered products directly influence transport network operations; (2) the EU AI Act's high-risk classification for transport AI systems could impose significant conformity assessment obligations; (3) the Act's full applicability timeline (2026) means compliance preparation is urgently needed; (4) no public AI Act compliance assessment has been disclosed.

Evidence: https://www.aimsun.com/aimsun-live/, https://www.aimsun.com/aimsun-predict/, https://www.aimsun.com/aimsun-insight/

Financials

Three-year financials

Financial Resilience Score: 7/10

Aimsun demonstrates strong qualitative financial resilience despite the lack of publicly disclosed standalone financials. As a subsidiary of Yunex Traffic Group, which is owned by Mundys (formerly Atlantia), Aimsun benefits from significant balance-sheet backing and access to capital that most standalone software SMEs would lack. The company has a ~30-year track record with its flagship Aimsun Next simulation software, generating recurring licence and maintenance revenues with high switching costs due to calibrated models and trained analyst bases. The company serves a diversified, blue-chip client base spanning public transport authorities and infrastructure operators globally, including NYCDOT, Transport for Greater Manchester, National Highways UK, Île-de-France Mobilités, Singapore LTA, Transport NSW, and Abu Dhabi Mobility. Multi-currency, geographically diversified revenue reduces single-country policy or budget exposure. ISO 9001/14001/45001 certifications and Spanish ENS compliance support public sector tender eligibility. Key risks include heavy public-sector exposure tied to transport budgets and infrastructure investment cycles, project-based revenue lumpiness, ownership complexity with Mundys carrying significant infrastructure-related leverage at parent level, and competition from Bentley/Cube, PTV Group, Siemens Sitraffic, TransModeler, and emerging cloud-native mobility tools. Limited public financial transparency as a private SLU inside a private group also creates opacity for external partners.

Key strengths: Strong owner backing from Yunex Traffic / Mundys group providing balance-sheet support and capital access, Diversified blue-chip client base across public authorities and infrastructure operators in 100 countries, Long-lived software franchise with ~30-year track record and recurring licence/maintenance revenues, High switching costs due to calibrated models and trained analyst bases, Multi-currency, geographically diversified revenue reducing single-country exposure, ISO 9001/14001/45001 certifications and Spanish ENS compliance supporting tender eligibility, Strategic fit within Yunex portfolio suggesting continued intra-group investment

Risk factors: Heavy public-sector exposure tied to transport budgets and infrastructure investment cycles, Project timing and revenue lumpiness from digital-twin and consulting projects, Ownership complexity and refinancing risk at Mundys parent level with significant infrastructure leverage, Competition from Bentley/Cube, PTV Group, Siemens Sitraffic, TransModeler, Emme, and open-source tools, Limited public financial transparency as private SLU inside private group, FX risk on non-EUR revenue from UK, US, Middle East, and APAC

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report