BrightCom Solutions (part of Exsitec)

Sweden · owned by Exsitec (Sweden) · brightcom.se · 6 vendors

BrightCom is a Nordic ERP company and certified Microsoft partner specialising in Microsoft Dynamics 365 Business Central implementations for e-commerce and retail businesses. The company offers standardised integrations, apps, and implementation services that connect finance, inventory, logistics, and sales into a unified platform. It operates as a brand within the Exsitec group and has completed over 160 Business Central projects across the Nordic region.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-01 · revision 3

6 direct vendors, 132 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

BrightCom Solutions demonstrates a high level of migration readiness, primarily driven by its deeply cloud-native and API-centric technology stack. The company's core platform, Microsoft Dynamics 365 Business Central, is a Software-as-a-Service (SaaS) ERP, and many of its proprietary products (e.g., BRC Connect) are hosted on Microsoft Azure. This indicates a modern, flexible architecture that is already largely "migrated" to the cloud, reducing the complexity and effort typically associated with moving from legacy on-premise systems. The extensive use of REST APIs for integrating with over 25 e-commerce platforms, payment providers, and logistics systems (e.g., Shopify, WooCommerce, Klarna, nShift) further highlights a modular and interoperable design, which facilitates easier integration or replacement of individual components if needed. However, a significant factor influencing migration readiness is the inherent vendor lock-in to the Microsoft Dynamics 365 Business Central ecosystem. While this is a modern and robust platform, any strategic decision to migrate away from this core ERP would represent a substantial undertaking due to the deep integration of BrightCom's products and services within it. The absence of data regarding financial stability (revenue concentration, growth history) makes it difficult to assess the company's capacity to fund a large-scale migration effort. Furthermore, while GDPR compliance is a given, the lack of specific data residency requirements and the uncertainty surrounding NIS2 applicability introduce potential complexities that would need to be thoroughly addressed during any migration planning.

Compliance

7 in-scope frameworks identified; showing 3.

Microsoft Partner Network Compliance Requirements — Partially Compliant

BrightCom is a certified Microsoft Solutions Partner (Business Applications designation) and publishes apps on Microsoft AppSource. Microsoft's partner program requires adherence to the Microsoft Partner Network Agreement, AppSource certification standards, and security requirements. BrightCom has demonstrated compliance with AppSource certification (their apps are listed as 'AppSource-certified'). Risk is Low because: (1) BrightCom has achieved Microsoft Solutions Partner status and AppSource certification, demonstrating active compliance with Microsoft's requirements; (2) Microsoft's certification process includes security and quality reviews; (3) ongoing compliance is maintained through annual partner reviews.

Evidence: https://www.brightcom.se/om-brightcom, https://mvp.microsoft.com/en-US/MVP/profile/d6617e54-4a7f-ec11-8d21-0022482837b1, https://appsource.microsoft.com/, https://partner.microsoft.com/en-us/partnership/solutions-partner

SOC 2 (source) — Assessment Required

SOC 2 is a voluntary framework developed by the AICPA, relevant to technology and cloud service providers that store, process, or transmit customer data. BrightCom provides ERP implementation services and develops Microsoft AppSource-certified integrations and apps (BRC Connect, BRC Retail Extension, BRC Logistics Connector, etc.) that are deployed in customer environments and handle customer business data including financial records, inventory, order data, and potentially personal data. As a Microsoft Solutions Partner delivering cloud-based Business Central implementations and operating SaaS-style integrations, BrightCom's enterprise customers may request SOC 2 reports as part of vendor due diligence. Risk is rated Medium because: (1) BrightCom develops and publishes apps on Microsoft AppSource, which involves handling customer data in cloud environments; (2) enterprise and mid-market customers increasingly require SOC 2 Type II reports from ERP vendors and integrators; (3) no SOC 2 report has been publicly disclosed, which could be a competitive disadvantage and a gap in vendor risk management for their clients. Risk is not High because SOC 2 is voluntary and BrightCom's primary delivery model is consulting/implementation rather than operating a standalone SaaS platform.

Evidence: https://www.brightcom.se/om-brightcom, https://www.brightcom.se/business-central-integrationer, https://appsource.microsoft.com/, https://www.aicpa-cima.com/resources/landing/soc-2

ISO 27001 (source) — Assessment Required

ISO 27001 is the international standard for Information Security Management Systems (ISMS). It is highly relevant for technology companies that implement ERP systems, develop software integrations, and handle customer business data. BrightCom, as a Microsoft Solutions Partner implementing Dynamics 365 Business Central for Nordic e-commerce and retail companies, handles sensitive customer data including financial records, inventory data, customer/supplier data, and potentially personal data. Risk is rated Medium because: (1) ISO 27001 certification is increasingly expected by enterprise clients as part of vendor due diligence; (2) BrightCom's parent Exsitec (Nasdaq First North listed, 650+ consultants) may hold or be pursuing group-level ISO 27001 certification; (3) no public certification has been found for BrightCom specifically; (4) the Swedish market and Nordic enterprise clients commonly require ISO 27001 from technology service providers. Risk is not High because BrightCom is primarily a consulting/implementation firm rather than a critical infrastructure operator, and the underlying Microsoft Azure/Business Central platform is ISO 27001 certified.

Evidence: https://www.brightcom.se/om-brightcom, https://www.iso.org/standard/27001, https://www.sis.se/standarder/iso-27001/

Financials

Three-year financials

Financial Resilience Score: 7/10

BrightCom Solutions benefits significantly from being a wholly-owned subsidiary of Exsitec Holding AB, a profitable Nasdaq First North-listed Nordic technology group. The parent company has demonstrated strong growth, roughly doubling revenue from SEK ~386M in 2021 to SEK ~830M+ in 2024, providing a solid balance sheet backing and shared services infrastructure. BrightCom's business model includes recurring revenue elements through Microsoft Business Central SaaS licensing, proprietary AppSource app subscriptions, and managed services, which enhances resilience compared to pure project-based consulting. The company maintains a diversified customer base across e-commerce, retail, fashion, and logistics verticals, with Nordic geographic diversification across Sweden, Denmark, and Norway providing currency and market risk mitigation. Certified Microsoft Solutions Partner status and MVP-level expertise create competitive moats. However, the small absolute size (~50 consultants, estimated SEK 90-130M revenue) limits capacity to absorb large customer losses or failed implementations. Key risks include heavy exposure to the e-commerce and retail vertical currently under margin pressure, dependency on the Microsoft ecosystem for pricing and licensing conditions, and structural wage inflation for Business Central consultants across the Nordics. Competition is intense from other Nordic Business Central partners like Fellowmind, Advania, Innofactor, and Iver targeting the same mid-market segment.

Key strengths: Backed by listed profitable parent Exsitec Holding AB (Nasdaq First North), Recurring revenue mix from SaaS licenses, proprietary apps, and managed services, Diversified customer base in e-commerce/retail verticals, Certified Microsoft Solutions Partner with proprietary AppSource apps, Nordic footprint (SE/DK/NO) provides geographic and currency diversification, 50+ ERP specialists with 160+ Business Central implementations completed

Risk factors: Heavy exposure to e-commerce and retail vertical under margin pressure, Dependency on Microsoft ecosystem for pricing and licensing, Wage inflation pressure for Business Central consultants across Nordics, Intense competition from other Nordic Business Central partners, Small absolute size limits ability to absorb large customer losses, Customer bankruptcy risk among mid-market e-commerce companies

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report