ALSO

Switzerland · www.also.com · 29 vendors

ALSO Holding AG is a leading technology provider for the Information and Communication Technology (ICT) industry, operating as a comprehensive B2B marketplace. The company offers hardware, software, IT services, and cloud solutions from over 800 vendors to approximately 140,000 resellers. It is active in 31 European countries and extends its reach globally through Platform-as-a-Service (PaaS) partners.

Resilience scores

Disruption prediction

ALSO has an estimated 11% probability of disruption in the next 6 months.

13 of ALSO's 29 vendors monitored for disruptions.

Technology vendors

Services catalogue

5 services in catalogue across 3 categories; runs on 29 sub-vendors.

Insights

Last updated 2026-07-22 · revision 7

29 direct vendors, 305 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

ALSO exhibits high migration readiness, primarily driven by its highly modern and cloud-native internal tech stack. The adoption of Microsoft Azure, Kubernetes, Docker, Microservices Architecture, CI/CD Pipelines, and Terraform provides a robust and flexible foundation for migrating and operating in cloud environments. Strategic partnerships with major hyperscalers like Microsoft and Google Cloud Platform, coupled with their role as a cloud aggregator, further enhance their capability for cloud adoption and migration. The company's strong financial position, with growing revenues, ensures it has the necessary resources to fund complex migration initiatives. The use of containerization and microservices architecture inherently reduces vendor lock-in at the application level and promotes portability across different cloud platforms. However, significant challenges for migration arise from the complex regulatory environment. The "Assessment Required" and "High Risk" status for GDPR, SOC2, ISO 27001, NIS2, and ISAE 3000 will necessitate extensive compliance planning, legal review, and technical implementation during any migration. Furthermore, extensive data residency requirements across 30+ countries, with varying data protection laws and customer contractual obligations, will demand meticulous data mapping, classification, and strategic data placement, adding considerable complexity to migration efforts. The "Vendor Lock-in Risk" is unknown, and the "Total Vendors: 0" entry in the vendor relationships data is ambiguous, making it difficult to fully assess potential lock-in from internal service providers.

Compliance

9 in-scope frameworks identified; showing 3.

NIS2 (source) — Assessment Required

ALSO is a large-scale ICT distributor and cloud marketplace operator with operations across 30+ EU member states and annual revenues exceeding €10 billion. NIS2 explicitly covers 'digital providers' and 'ICT service management (B2B)' as Important Entities, and potentially Essential Entities under 'digital infrastructure.' ALSO's ACMP (ALSO Cloud Marketplace) and managed services offerings place it squarely within the digital provider and ICT service management categories. Risk is High because: (1) ALSO far exceeds the size thresholds (large enterprise, €10B+ revenue); (2) its cloud marketplace and distribution infrastructure are critical to thousands of downstream resellers and SMEs across Europe; (3) NIS2 imposes significant obligations including incident reporting (24-hour initial notification), supply chain security, board-level accountability, and cybersecurity risk management; (4) non-compliance penalties can reach €10M or 2% of global annual turnover for Important Entities; (5) NIS2 transposition deadlines (October 2024) mean enforcement is now active in most EU member states.

Evidence: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555, https://www.enisa.europa.eu/topics/cybersecurity-policy/nis-directive-new, https://www.also.com

ISO 27001 (source) — Compliant

ALSO has publicly referenced ISO 27001 certification in its corporate communications and partner documentation. As a large technology distributor and cloud marketplace operator, ISO 27001 is a baseline expectation from major technology vendors (Microsoft, Google, AWS, etc.) whose products ALSO distributes. Risk is Low because: (1) ALSO appears to hold ISO 27001 certification; (2) the certification is regularly audited by accredited third-party certification bodies; (3) major vendor partnerships typically require and verify ISO 27001 status; (4) ALSO's scale and market position make maintaining this certification a business necessity.

Evidence: https://www.iso.org/isoiec-27001-information-security.html, https://www.also.com

GDPR (source) — Assessment Required

ALSO Holding AG is headquartered in Emmen, Switzerland, and operates extensively across 30+ EU/EEA countries including Germany, France, the Netherlands, Poland, and the Nordics. As a large-scale B2B technology distributor and cloud marketplace operator, ALSO processes substantial volumes of personal data including employee records, customer contact data, reseller/partner data, and end-user data flowing through its cloud platforms. GDPR applies unambiguously given EU/EEA operational footprint. Risk is rated High because: (1) ALSO operates cloud marketplace and SaaS distribution services that involve processing personal data at scale; (2) cross-border data transfers between Switzerland and EU are subject to adequacy decisions and SCCs; (3) fines under GDPR can reach €20M or 4% of global annual turnover; (4) Switzerland is not an EU member, creating additional complexity for intra-group data transfers; (5) enforcement by EU DPAs has intensified significantly since 2021.

Evidence: https://www.also.com, https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679

Financials

Three-year financials

Financial Resilience Score: 7/10

ALSO Holding AG demonstrates solid financial resilience underpinned by its scale as one of Europe's top-three IT distributors, giving it strong purchasing power with major vendors like Microsoft, HP, Lenovo, Apple, Cisco, and Dell. The company has diversified its business model across three segments—Supply (traditional distribution), Solutions (project business), and Service (cloud/subscription)—with the higher-margin Service segment providing recurring revenue that cushions cyclical hardware demand. The balance sheet is solid with an equity ratio historically around 20-25%, investment-grade credit metrics, and positive free cash flow enabling tuck-in M&A funded partly from operations. However, resilience is constrained by structurally thin distribution margins (EBIT margin ~1.5-2.0%), making the business vulnerable to small pricing or FX shifts. The 2022-2023 period saw mid-single-digit revenue declines due to post-pandemic normalization of PC/notebook demand and lower component prices, though EBITDA held up thanks to a richer mix. The controlling stake by Droege Group (~52%) provides stability but concentrates governance and limits minority influence. Overall, the company has proven able to weather the post-pandemic downturn while continuing strategic M&A like the Westcoast France acquisition.

Key strengths: Top-three European IT distributor scale with strong vendor purchasing power, Diversified three-model business (Supply/Solutions/Service) with growing recurring cloud revenue, Equity ratio historically 20-25% with investment-grade credit metrics, Positive free cash flow funding M&A and dividends, Anchor shareholder Droege Group (~52%) provides stability, Growing dividend with payout ratio typically 30-50%

Risk factors: Thin distribution margins (~1.5-2.0% EBIT) amplify pricing and FX moves, Cyclicality tied to consumer PC/smartphone and IT capex cycles, Currency exposure across EUR, CHF, Nordic currencies, PLN and others, Vendor concentration with reliance on a few large vendors and rebate structures, M&A integration risk from ongoing acquisitions like Westcoast France, Limited free float and minority influence due to Droege's controlling stake

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report