BSS ApS

Denmark · owned by Independent (Denmark) · bionicsystemsolutions.com · 7 vendors

BSS ApS (Bionic System Solutions) is a Danish technology company headquartered in Odense that develops data-driven solutions inspired by biology, combining advanced signal processing, sensor infrastructure, and artificial intelligence. The company offers products including passive acoustic Counter-UAS (C-UAS) and Counter-RAM systems, wastewater management tools, remote asset monitoring, and noise compliance solutions. Originally spun out of a research project at the University of Southern Denmark (SDU), BSS serves both public institutions and private enterprises with a focus on operational efficiency and security.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-13 · revision 2

7 direct vendors, 126 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

BSS ApS exhibits medium migration readiness. Strengths include the 'BSS Analytics' product being a 'Cloud-based remote asset monitoring and decision-making platform,' demonstrating existing cloud capabilities and experience. The use of 'REST API' in the internal tech stack facilitates integration with cloud services. The 'BSS SoftSensor' is an AI-powered software solution requiring 'no new hardware,' indicating potential for flexible, software-only deployment in a cloud environment. However, several weaknesses and unknowns hinder readiness. The internal tech stack includes 'Embedded Linux,' suggesting components likely tied to specialized hardware, which could complicate or prevent direct migration to a pure cloud environment. NIS2 compliance is 'Assessment Required,' which could introduce significant regulatory hurdles, compliance costs, and architectural constraints during a migration, especially if new data residency or security requirements emerge. Data residency requirements are 'Not explicitly stated,' posing a critical unknown that could dictate specific cloud regions or architectures, adding complexity and cost. The complete lack of public financial information makes it impossible to assess the company's ability to fund a potentially significant and costly migration effort. The 'Vendor Lock-in Risk: Unknown' is a concern, especially with 9 services from various vendors, as migrating away from critical vendor dependencies can be complex, time-consuming, and expensive. The mixed architecture (cloud-based platform alongside embedded systems) indicates that a full, seamless migration would be challenging.

Compliance

9 in-scope frameworks identified; showing 3.

GDPR (source) — Partially Compliant

BSS ApS is headquartered in Denmark (EU member state) and explicitly processes personal data of customers, suppliers, employees, job applicants, and website visitors, making GDPR universally applicable. The company has published a detailed privacy policy, declared data minimisation principles, restricted data processors to EU-only, and signed the Danish D-Mærket Data Ethics Schema — all positive compliance indicators. However, risk remains Medium because: (1) no formal Data Protection Officer (DPO) appointment is publicly disclosed, which may be required if processing is systematic or large-scale; (2) no evidence of a formal Data Protection Impact Assessment (DPIA) process; (3) the privacy policy references Google Analytics (a third-party US-based processor) without explicit adequacy mechanism disclosure (e.g., Standard Contractual Clauses); (4) no record of Datatilsynet (Danish DPA) registration or audit clearance; (5) the company is growing and serving NATO/defence clients, increasing data sensitivity. Enforcement by Datatilsynet is active in Denmark, with fines issued to Danish companies in recent years.

Evidence: https://www.bionicsystemsolutions.com/privacy-policy, https://www.bionicsystemsolutions.com/company, https://www.datatilsynet.dk/english, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679

EU AI Act (source) — Assessment Required

The EU AI Act, adopted in August 2024 and applying progressively through 2026-2027, regulates AI systems placed on the EU market. BSS ApS explicitly uses machine learning and AI algorithms across all its products: BSS SoftSensor (AI-driven chemical dosing predictions), BSS Komodo (acoustic AI for drone detection), BSS Analytics (AI-driven asset monitoring), and BSS Fennec (acoustic signal processing). Risk is High because: (1) C-UAS and C-RAM systems used in defence/security contexts may qualify as high-risk AI systems under Annex III (safety components of critical infrastructure, law enforcement/border control adjacent applications); (2) wastewater AI controlling chemical dosing in critical infrastructure may be classified as high-risk (safety component of critical infrastructure); (3) high-risk AI systems require conformity assessments, technical documentation, human oversight mechanisms, and registration in the EU AI database; (4) penalties reach €30M or 6% of global annual turnover for prohibited AI; (5) BSS's NATO contract and EUDIS/EDF participation may trigger additional AI governance requirements.

Evidence: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=OJ:L_202401689, https://www.bionicsystemsolutions.com/company, https://www.bionicsystemsolutions.com/solutions/counter-uas, https://www.bionicsystemsolutions.com/solutions/wastewater-treatment, https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai

EU Wastewater Treatment Directive — Assessment Required

BSS ApS provides technology (BSS SoftSensor) to wastewater treatment plants (WWTPs) to help them comply with effluent discharge limits under the EU Urban Wastewater Treatment Directive. BSS is not itself a wastewater operator and therefore is not directly regulated by this directive. However, BSS's software must support its WWTP clients' compliance with phosphorus and other discharge limits. Risk is Medium because: (1) if BSS SoftSensor malfunctions and causes a WWTP to breach discharge limits, BSS may face contractual liability; (2) the revised 2024 Wastewater Directive introduces stricter requirements that BSS's clients must meet, driving demand for BSS's solutions but also raising the stakes for software reliability; (3) BSS's product marketing explicitly references 'compliance with effluent discharge limits' as a key benefit.

Evidence: https://www.bionicsystemsolutions.com/solutions/wastewater-treatment, https://www.bionicsystemsolutions.com/news/otterup-wwtp, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A31991L0271, https://environment.ec.europa.eu/topics/water/urban-wastewater_en

Financials

Three-year financials

Financial Resilience Score: 6/10

BSS ApS is a small, founder-led Danish deep-tech company (class-B ApS) with limited public financial disclosure, making external assessment of financial resilience difficult. However, qualitative indicators are broadly positive: the company has diversified end-markets across four verticals (wastewater treatment, remote asset monitoring, counter-UAS, and noise-compliance monitoring), reducing single-market risk unusual for its size. Its participation in EU Defence Fund projects (EDF21 ACHILE and EDF23 EISNET) provides non-dilutive, multi-year R&D funding that reduces pressure on equity capital. The August 2026 selection by NATO Support and Procurement Agency (NSPA) as one of five contractors under a framework agreement for tactical and deployable Counter-UAS is a potentially transformational commercial milestone, positioning BSS on a major NATO procurement vehicle at the start of a European defence spending upcycle. Ecosystem embedding in Odense Robotics, CenSec, and University of Southern Denmark provides talent pipeline and reference customers. Offsetting these strengths, the company has a limited equity base and cash reserves typical of a small ApS, faces working-capital risk from long defence sales cycles where NATO/NSPA framework contracts create call-off potential but not guaranteed orders, and has grant dependency risk if EDF projects roll off. Customer concentration risk (a handful of Danish reference customers) and key-person risk (departure of the two founders would be material) further constrain resilience.

Key strengths: Diversified end-markets across four verticals (wastewater, asset monitoring, C-UAS, noise compliance), NATO NSPA framework contract selection (August 2026) for tactical/deployable Counter-UAS, EU Defence Fund grant participation (EDF21 ACHILE, EDF23 EISNET) providing non-dilutive R&D funding, Ecosystem embedding in Odense Robotics, CenSec, Dansk Industri, and SDU linkage, Recurring/dual-use IP combining sensor-fusion, ML software, and acoustic hardware

Risk factors: Small-company scale with limited equity base and cash reserves, Working-capital risk from long defence sales cycles and up-front NSPA capacity investment, Grant dependency risk if EDF and co-funded projects roll off, Customer concentration risk with a handful of Danish reference customers, Key-person risk as a founder-led firm dependent on Mads Helle and Gert Nielsen, Minimal financial disclosure under class-B reporting rules limiting external assessment

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report