Ankiro A/S
Denmark · owned by FAKULA ApS (Denmark) · ankiro.dk · 12 vendors
Ankiro ApS is a Danish software company specializing in developing intelligent search engines and digital tools. They combine linguistic and computer science expertise, including AI and machine learning, to create user-friendly semantic search solutions for businesses and public authorities. Their offerings include tools for converting website visitors into customers, providing insights into the job market, and detecting copyright infringements.
Resilience scores
- Digital Sovereignty: 25
- Digital Resilience: 4
- Financial Resilience: 6
Technology vendors
- Fortinet, Inc. — Technology — United States
- Kriesi — Technology — Austria
- Veeam Software Group GmbH — Technology — United States
- and 9 more
Services catalogue
2 services in catalogue across 1 category; runs on 12 sub-vendors.
- Ankiro
- Search & Recommendation Engine
Insights
Last updated 2026-09-13 · revision 2
12 direct vendors, 211 subvendors
Direct vendors by controlling owner country (sample)
- Japan: 2
- Austria: 1
- Belgium: 2
Subvendors by controlling owner country (sample)
- Latvia: 1
- Poland: 3
- Finland: 1
Migration Readiness: 7/10
Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.
Ankiro A/S demonstrates high migration readiness, primarily driven by the stated "Total Vendors: 0". Despite contradictory vendor data (listing "Vendor HQ Countries" and "Vendor Geographic Diversity" after stating "Total Vendors: 0"), interpreting "Total Vendors: 0" as a lack of formal vendor relationships is a significant advantage. This eliminates vendor lock-in risks, complex contract negotiations, and the need to re-platform vendor-specific technologies, which are often major hurdles in migration projects. This provides Ankiro with maximum flexibility to decide its future infrastructure strategy without external dependencies. However, challenges exist within their internal tech stack. While their core products leverage modern technologies like AI, Machine Learning, NLP, and Semantic Search, the underlying "proprietary distributed virtual server infrastructure" for cloud hosting could pose migration difficulties. Proprietary systems often lack portability and may require significant re-engineering to move to standard cloud-native environments (e.g., public cloud providers, container orchestration platforms). The lack of explicit mention of containerization or microservices also suggests that their architecture might not be fully optimized for seamless cloud migration, potentially requiring refactoring efforts. The absence of specified data residency requirements is a neutral factor that could simplify migration planning. However, the lack of financial data (revenue concentration, growth history) prevents a comprehensive assessment of their capacity to fund a potentially complex migration effort. Despite the internal infrastructure challenges, the overwhelming advantage of zero vendor lock-in positions Ankiro A/S with a strong foundation for future migration initiatives.
Compliance
7 in-scope frameworks identified; showing 3.
GDPR (source) — Assessment Required
GDPR is universally applicable to Ankiro as a Danish (EU) company. Risk is HIGH for several compounding reasons: (1) Ankiro operates a cloud-hosted SaaS search engine that processes user search queries, behavioral data (clicks, search patterns), and potentially indexes document content including personal data on behalf of clients; (2) Clients include Danish public authorities (Erhvervsstyrelsen, Region Midtjylland, Region H, Sundhed.dk) and healthcare-adjacent entities, meaning Ankiro likely acts as a data processor under Article 28 GDPR and must have Data Processing Agreements (DPAs) in place with each; (3) The Jobcloud product processes Danish job market data which may include personal data about job seekers; (4) Copyfighter processes content across the internet to detect copyright violations, potentially involving personal data; (5) The product explicitly advertises CPR-number (Danish national ID) detection, confirming processing of special category-adjacent data; (6) No public privacy policy, DPO appointment, or GDPR compliance documentation was found on the website; (7) Danish Datatilsynet (the supervisory authority) has an active enforcement record and has issued fines to Danish companies; (8) As a small company (~13-14 employees), dedicated compliance resources may be limited. The combination of acting as both data controller and data processor for sensitive public-sector clients, with no visible compliance documentation, represents a high-risk profile.
Evidence: https://ankiro.dk, https://ankiro.dk/ankiro-enterprise-suite/, https://ankiro.dk/kontakt/, https://gdpr-info.eu/, https://www.datatilsynet.dk/english, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679
Danish Data Protection Act — Assessment Required
Risk is HIGH for the same reasons as GDPR. The Danish Data Protection Act supplements GDPR with national specifications, including stricter rules on processing of CPR numbers (Danish personal identification numbers), employee data, and public authority data processing. Ankiro's product explicitly advertises CPR-number detection functionality, confirming awareness of and likely processing of CPR numbers. The Danish Datatilsynet has enforcement authority and has issued fines and reprimands to Danish companies. The combination of CPR-number processing, public authority clients, and no visible compliance documentation creates a high-risk profile.
Evidence: https://ankiro.dk/ankiro-enterprise-suite/, https://www.datatilsynet.dk/english, https://www.retsinformation.dk/eli/lta/2018/502, https://gdpr-info.eu/
EU AI Act (source) — Assessment Required
Risk is MEDIUM. The EU AI Act entered into force on 1 August 2024 with phased implementation (prohibited practices banned from February 2025; high-risk AI obligations from August 2026; full application by August 2027). Ankiro explicitly uses AI and machine learning in its products: the Enterprise Suite uses 'machine learning' for self-learning search algorithms, 'AI/machine learning' is mentioned in the company description, and they employ a dedicated 'AI-specialist' (Carl Nørlund). The risk is medium rather than high because: (1) Ankiro's AI use appears to be in search/recommendation systems, which are likely 'limited risk' or 'minimal risk' under the AI Act; (2) Full high-risk AI obligations don't apply until August 2026; (3) The specific risk classification depends on use cases not fully disclosed. However, if Ankiro's AI is used in public authority decision-making contexts (given their public-sector clients), risk classification could be higher.
Evidence: https://ankiro.dk/kontakt/, https://ankiro.dk/ankiro-enterprise-suite/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32024R1689, https://artificialintelligenceact.eu/
Financials
Three-year financials
- 2025: gross profit DKK 9.68M, EBIT DKK 156K, equity DKK 2.33M
- 2024: gross profit DKK 11.9M, EBIT DKK 267K, equity DKK 2.30M
- 2023: gross profit DKK 9.61M, EBIT DKK 228K, equity DKK 2.10M
Financial Resilience Score: 6/10
Ankiro ApS is a long-established Danish enterprise-search software company operating since 1999, giving it 25+ years of survival through multiple technology cycles. This longevity suggests a durable niche business model with sticky customers, particularly among Danish public-sector entities and large enterprises that typically provide reliable, creditworthy revenue streams. The company has diversified across three product lines (Enterprise Search, Jobcloud, Copyfighter), reducing single-product dependency and providing multiple revenue streams. However, as a small Danish ApS (private limited company) filing under regnskabsklasse B, financial disclosure is limited, making external credit assessment difficult. The company likely has a limited capital cushion typical of Danish private micro/small caps and faces key-person risk. Competitive pressure from generative AI and LLM-based search solutions (Elastic, Algolia, Coveo, OpenAI/Azure Cognitive Search) threatens the classic dictionary-based search value proposition. Geographic concentration in Denmark limits growth headroom but also FX exposure. Overall resilience is moderate, supported by longevity and customer quality but constrained by scale and disclosure opacity.
Key strengths: Long operating history since 1999 (25+ years), Blue-chip and public-sector Danish customer base, Diversified product portfolio across three lines (Search, Jobcloud, Copyfighter), Domain expertise moat in Danish-language information retrieval, Sticky public-sector contracts
Risk factors: Small ApS structure with limited capital cushion, Key-person risk typical of Danish micro/small caps, Competitive pressure from generative AI and LLM-based search, Geographic concentration in Denmark limits growth headroom, Limited financial disclosure as class-B ApS makes credit assessment harder
Revenue by geography
- Denmark: 100%
Revenue by product/service
- Jobcloud: 0%
- Copyfighter: 0%
- Enterprise Search: 0%
Workforce by country
- Denmark: 0
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.