At Work A/S

Denmark · owned by AFTER WORK 2014 ApS (Denmark) · atwork.dk · 28 vendors

At Work A/S is a Danish education company that offers courses and certifications in health, wellness, nutrition counseling, personal training, massage therapy, mindfulness, and positive psychology. The company operates At Work Skolen (At Work School) and has grown to employ more than 100 people since its founding by Camilla Hilbrands.

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 28 sub-vendors.

Insights

Last updated 2026-09-13 · revision 32

28 direct vendors, 292 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

At Work A/S exhibits a medium-low level of migration readiness. The primary challenge stems from their current tech stack, which is built on WordPress and Moodle. These are generally monolithic applications that are not inherently cloud-native, containerized, or microservices-based. A migration to a modern cloud environment would likely necessitate significant refactoring or a "lift-and-shift" approach that might not fully capitalize on cloud benefits. A notable vendor lock-in exists with Twentyfour/html24.dk, their dedicated hosting and DevOps provider, which would need to be addressed during any infrastructure migration. Specific data residency requirements, mandating data storage within EU data centers to comply with GDPR, add a layer of complexity by narrowing the choice of cloud regions. The absence of financial stability and growth data also creates uncertainty regarding the company's ability to fund a potentially complex and costly migration. On the positive side, the open-source nature of WordPress and Moodle offers flexibility in terms of hosting environments, reducing proprietary software lock-in. The clear regulatory framework (GDPR, potential NIS2) provides well-defined parameters for a compliant cloud migration strategy, which can streamline planning.

Compliance

6 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Assessment Required

ISO 27001 is an internationally recognized information security management standard. While not legally mandatory for At Work A/S, it is highly relevant given the company processes sensitive personal data including student financial information (bank details), exam results, login credentials, and potentially health-adjacent data. The company has 100+ employees and operates an e-learning platform and student portal (mit.atwork.dk, teori.atnet.dk), increasing the attack surface. The company's privacy policy describes security measures (encryption, access controls, security systems, employee training) that are consistent with ISO 27001 principles, but no certification has been publicly disclosed. Risk is Medium because: (1) the company processes sensitive financial and personal data at scale; (2) a security breach could expose student financial data and personal information; (3) the company relies on third-party processors (Google, Twentyfour) whose security posture affects At Work's overall risk; (4) absence of ISO 27001 certification means no independent verification of security controls exists.

Evidence: https://www.atwork.dk/persondatapolitik/, https://www.html24.dk/compliance/, https://www.iso.org/isoiec-27001-information-security.html

Danish Databeskyttelsesloven — Partially Compliant

The Danish Data Protection Act (Act No. 502 of 23 May 2018, as amended) supplements GDPR with Danish-specific provisions. It is directly applicable to At Work A/S as a Danish company. The same compliance gaps identified under GDPR apply here, with additional Danish-specific considerations including rules on processing of CPR numbers (Danish civil registration numbers), which At Work A/S may process for student enrollment and payroll purposes. The Datatilsynet (Danish Data Protection Authority) has been active in enforcement, including issuing guidance on Google Analytics use and fining organizations for non-compliance. Risk is Medium for the same reasons as GDPR, with the additional consideration that Danish enforcement is active and proximate.

Evidence: https://www.atwork.dk/persondatapolitik/, https://www.datatilsynet.dk/english, https://www.retsinformation.dk/eli/lta/2018/502

Danish E-Commerce Act — Assessment Required

At Work A/S uses Google Analytics, Google Ads Remarketing, and Facebook tracking cookies on their website. Danish cookie legislation (implementing the ePrivacy Directive) requires prior informed consent for non-essential cookies. The Datatilsynet has issued specific guidance on cookie consent and has found Google Analytics use to be non-compliant in several Danish cases without proper configuration and consent mechanisms. The company has a cookie policy page but the adequacy of their consent mechanism cannot be verified without live testing. Risk is Medium because: (1) cookie enforcement is active in Denmark; (2) the company uses multiple third-party tracking technologies; (3) the privacy policy acknowledges remarketing cookies that track users across websites.

Evidence: https://www.atwork.dk/om-cookies/, https://www.atwork.dk/persondatapolitik/, https://www.datatilsynet.dk/english/google-analytics

Financials

Three-year financials

Financial Resilience Score: 5/10

At Work A/S is an established private Danish adult-education company operating the 'At Work Skolen' brand, focused on health, fitness, and wellbeing certifications. The company has approximately 20 years of operating history (incorporated around 2005-2006 based on CVR number) and appears to hold a leadership position in the Danish nutrition counselor education niche. Its business model shows resilience through diversified program offerings, hybrid delivery (in-person and online), and a mix of B2C and B2B revenue channels including workplace wellness programs and gross-salary financing schemes. However, actual financial figures (revenue, EBIT, equity) could not be verified from primary Danish sources in this research session, limiting the ability to assess quantitative financial health. As a small private A/S, the capital base is likely modest, making the company vulnerable to single-year downturns. The business is exposed to discretionary consumer spending, which is cyclically sensitive to Danish inflation and cost-of-living pressures. Competition in the fragmented Danish wellness/fitness education market and potential post-COVID demand normalization present additional risks. A mid-range score reflects the established brand and diversified model balanced against unverified financials and typical small-company vulnerabilities.

Key strengths: Established brand with ~20 years of operating history, Leadership position in Danish nutrition counselor education niche, Diversified program portfolio across nutrition, fitness, mindfulness, and wellness, Hybrid delivery model (physical sites + e-learning platform), B2B/B2C revenue mix including workplace wellness programs, Multiple student financing options expanding addressable market

Risk factors: Small private A/S with likely modest capital base, Discretionary consumer spending sensitivity to economic cycles, Post-COVID normalization creating uneven revenue trends, Fragmented competitive market with pricing pressure, Regulatory/accreditation risk (programs outside SU-supported system), Key-person dependency typical of small training A/S, Danish inflation and interest-rate pressures on 2022-2024 enrollments

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report