Aqualog
Denmark · owned by Independent (Denmark) · aqualog.dk · 7 vendors
Aqualog is a Danish company specializing in quality assurance and management systems ('Kvalitetssikring og Ledelsessystem'). The company provides software or services related to quality management and documentation, likely targeting businesses in Denmark that require structured quality and compliance solutions. The website is operated in Danish, indicating a primarily Danish-speaking customer base.
Resilience scores
- Digital Sovereignty: 14
- Digital Resilience: 5
- Financial Resilience: 6
Disruption prediction
Aqualog has an estimated 17% probability of disruption in the next 6 months.
4 of Aqualog's 7 vendors monitored for disruptions.
Technology vendors
- Google LLC — Technology — United States
- Meta Platforms, Inc. — Technology — United States
- Simply.com A/S — Technology — Denmark
- and 4 more
Insights
Last updated 2026-09-13 · revision 8
7 direct vendors, 131 subvendors
Direct vendors by controlling owner country (sample)
- United States: 4
- United Kingdom: 2
- Belgium: 1
Subvendors by controlling owner country (sample)
- Singapore: 1
- Ireland: 2
- Poland: 1
Migration Readiness: 5/10
Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.
Aqualog exhibits medium migration readiness. A key strength is its modern web-based SaaS platform and API-driven integrations (e.g., GEUS Jupiter, LER.dk, Betalingsservice), suggesting a flexible and modular architecture that is generally conducive to migration. Consistent financial growth indicates the potential to fund migration efforts. However, significant challenges arise from the regulatory and data residency environment. GDPR mandates EU/EEA data processing, and there are potential additional national data localization requirements under Danish critical infrastructure protection laws for water utilities. NIS2 also imposes stringent supply chain security requirements that would heavily influence cloud provider selection and data transfer strategies. The 'Assessment Required' status for GDPR, NIS2, SOC2, and ISO 27001 means that comprehensive compliance efforts would be necessary during any migration, adding complexity, cost, and potential delays. Furthermore, the ambiguity in vendor relationships, with 'Total Services: 22' but 'Total Vendors: 0' explicitly listed, combined with 'Vendor Lock-in Risk: Unknown,' suggests a potentially complex web of integrations and dependencies that could be challenging to disentangle and re-establish in a new environment.
Compliance
5 in-scope frameworks identified; showing 3.
NIS2 (source) — Assessment Required
Aqualog provides critical IT infrastructure services to drinking water utilities, which are classified as Essential Entities under NIS2. As a digital service provider to critical infrastructure, they likely qualify as an Important Entity. High risk due to potential operational disruptions, regulatory sanctions, and impact on critical water infrastructure if cybersecurity measures are inadequate.
Evidence: https://aqualog.dk/?Menu=Aqualog&Side=it_sikkerhed_info, https://aqualog.dk/?Menu=Aqualog&Side=kls
Danish Water Supply Act — Assessment Required
As a service provider to Danish water utilities, Aqualog must ensure their systems comply with Danish water supply regulations. Medium risk as non-compliance could affect their ability to serve water utilities and potentially impact water quality monitoring and reporting requirements.
Evidence: https://aqualog.dk/?Menu=Aqualog&Side=kls
GDPR (source) — Assessment Required
As a Danish company (EU member state) processing personal data of water utility customers, employees, and suppliers, GDPR compliance is mandatory. High risk due to potential fines up to 4% of annual turnover or €20M, whichever is higher. Water utilities handle sensitive customer data including consumption patterns, billing information, and personal identifiers. Non-compliance could result in significant financial penalties and reputational damage.
Evidence: https://aqualog.dk/?Menu=Aqualog&Side=it_sikkerhed_info
Financials
Three-year financials
- 2025: gross profit DKK 330K, EBIT DKK -19.9K, equity DKK -56.8K
- 2024: revenue DKK 656K, EBIT DKK -48.0K, equity DKK -292
- 2023: gross profit DKK 34.2K, EBIT DKK -790, equity DKK 47.1K
Financial Resilience Score: 6/10
Aqualog ApS demonstrates qualitative financial resilience through its niche dominance in the Danish drinking-water utility software sector. The company benefits from a sticky customer base of ~2,000 small consumer-owned waterworks (forbrugerejede vandværker) that rarely switch IT vendors once core systems like KLS, CMS, and billing are integrated. This creates high recurring-revenue characteristics typical of vertical SaaS businesses. Regulatory tailwinds significantly bolster resilience: Danish drinking-water suppliers are legally required to operate documented quality-management systems (KLS) and report pipe data via LER2, embedding Aqualog's products directly into statutory compliance workflows. The diversified module mix across SaaS (KLS, CMS, SMS, Finans, GIS, SRO), hardware-related services (SPA, DriveBy), training, and IT-security advisory reduces single-product risk. Low capital intensity as a software/services business based in Fredericia further supports financial stability. However, the score is moderated by significant risks: 100% concentration in Denmark and the drinking-water sector, small company/key-person risk (likely <10 FTEs), competitive pressure from larger players (Rambøll Water, Microwa, Vandværksdata), and limited financial disclosure as a Klasse B ApS. The ongoing structural consolidation of small waterworks into larger municipal utilities threatens to shrink the addressable market over time.
Key strengths: Niche dominance in Danish waterworks IT sector with sticky customer base, Regulatory tailwind from mandatory KLS quality management and LER2 reporting requirements, Diversified module mix across SaaS, hardware services, training, and IT-security, Low capital intensity software/services business model, Low customer concentration risk across many small waterworks, Free-tier marketing strategy (KLS/CMS free to vandråd) lowers customer acquisition cost
Risk factors: 100% single-country exposure (Denmark only), 100% single-vertical exposure (drinking-water sector only), Small company / key-person risk with likely <10 FTEs, Structural consolidation of small waterworks shrinks addressable market, Competition from larger players (Rambøll Water, Microwa, Vandværksdata), Limited financial disclosure as Klasse B ApS reduces external visibility, Cyber-security exposure from serving critical infrastructure (SCADA/SRO)
Revenue by geography
- Denmark: 100%
Revenue by product/service
- KLS (Quality Management SaaS): 40%
- CMS, SMS, Finans/Billing, GIS/LER2: 35%
- SRO/SPA/DriveBy specialised services: 20%
- Training and IT-security advisory: 5%
Workforce by country
- Denmark: 6
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.