CapaSystems A/S

Denmark · owned by PBH 26.207 ApS (Denmark) · capasystems.dk · 37 vendors

CapaSystems is a Danish software company that helps IT departments manage endpoints. We offer solutions for User and Access Management, IT Asset Management, Software Deployment, and OS Deployment.

Resilience scores

Disruption prediction

CapaSystems A/S has an estimated 40% probability of disruption in the next 6 months.

15 of CapaSystems A/S's 37 vendors monitored for disruptions.

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 37 sub-vendors.

Insights

Last updated 2026-09-13 · revision 24

37 direct vendors, 352 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

CapaSystems demonstrates moderate to high migration readiness, primarily driven by its successful development and deployment of CapaOne, a cloud-native SaaS platform built on Microsoft Azure. This indicates strong internal capabilities in cloud development, modern tech stack adoption (Node.js, TypeScript, Microsoft Entra ID), and an understanding of EU data residency requirements. Their robust GDPR compliance (ISAE 3000 certified) also provides a solid foundation for secure data handling in a cloud environment. However, significant challenges remain: 45% of their revenue is derived from CapaInstaller, an on-premise UEM solution, implying a substantial legacy customer base and product that would require a complex and potentially costly migration strategy. While the implied vendor base shows geographic diversity, the exact number of direct vendors and potential lock-in risks are unknown due to 'Total Vendors: 0' data. Reliance on specific platforms like Microsoft Azure, while beneficial for current operations, also introduces a degree of platform lock-in. The 'Assessment Required' status for NIS2, SOC2, and ISO 27001 could add compliance overhead to a large-scale migration project. The absence of recent financial growth data also makes it difficult to assess the company's capacity to fund a comprehensive migration effort. While technically capable, the business dependency on legacy on-premise solutions presents a significant hurdle for full migration readiness.

Compliance

6 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Assessment Required

ISO 27001 is the international standard for Information Security Management Systems (ISMS). CapaSystems is a cloud and on-premise software provider handling customer IT infrastructure data, endpoint configurations, and potentially sensitive organizational data. The company's ISAE 3000 FAQ explicitly references ISO 27001 and 27002 as the foundation for its control framework, stating 'ISO 27001 and 27002 focus on the design of controls. ISAE reports build on these ISO controls.' This suggests the company is ISO 27001-aligned but may not hold formal certification. Risk is Medium because: (1) ISO 27001 certification is increasingly required by public sector and enterprise customers in Denmark, (2) the Danish government and EU procurement frameworks often mandate it for IT service providers, (3) absence of certification may create competitive disadvantage and customer trust issues. The ISAE 3000 partially compensates but does not replace ISO 27001 certification.

Evidence: https://capasystems.dk/capasystems-isae-faq/, https://capasystems.dk/om-capasystems/

SOC 2 (source) — Assessment Required

SOC 2 is a US-origin framework (AICPA) but is increasingly required by international enterprise customers, particularly for cloud service providers. CapaSystems operates CapaOne, an EU-hosted cloud platform for endpoint management, and explicitly markets it as a SaaS/cloud solution. Enterprise and public sector customers increasingly request SOC 2 Type II reports as part of vendor due diligence. CapaSystems has instead pursued an ISAE 3000 declaration, which is the European equivalent and is widely accepted in the EU/Nordic market. Risk is Medium because: (1) the absence of SOC 2 may limit market access with US-linked or internationally operating customers, (2) the ISAE 3000 partially mitigates this risk for EU customers, (3) there is no regulatory mandate for SOC 2 in Denmark. The business risk of not having SOC 2 is reputational and commercial rather than regulatory.

Evidence: https://capasystems.dk/capasystems-isae-faq/, https://capasystems.dk/

NIS2 (source) — Assessment Required

NIS2 (EU Directive 2022/2555, transposed into Danish law via 'Lov om sikkerhed i net- og informationssystemer') is potentially applicable to CapaSystems as a digital infrastructure or ICT service management provider. CapaSystems provides Unified Endpoint Management (UEM), cloud-based IT management (CapaOne), and IT security tooling (patch management, vulnerability management, BitLocker encryption) to Danish municipalities and large private organizations. Under NIS2, 'ICT service management' providers (Annex I) and 'digital providers' including managed service providers (Annex II) may qualify as Essential or Important Entities. The company explicitly serves public sector clients (Danish municipalities such as Fredericia Kommune). Size thresholds (50+ employees or €10M+ turnover) are uncertain from public sources — the team page lists approximately 25-30 named staff, suggesting the company may be near or below the 50-employee threshold, but contractor/unlisted staff could push it above. Risk is Medium because: (1) the sector match is plausible but not definitive, (2) size threshold is uncertain, (3) NIS2 enforcement in Denmark began in 2024 and the Danish Centre for Cyber Security (CFCS) is actively supervising. If applicable, non-compliance could result in significant fines and operational restrictions.

Evidence: https://capasystems.dk/om-capasystems/, https://capasystems.dk/, https://capasystems.dk/capasystems-isae-faq/

Financials

Three-year financials

Financial Resilience Score: 4/10

CapaSystems A/S shows a concerning multi-year decline in revenue and profitability. Revenue has dropped from DKK 32.9M (FY2022/23 peak) to DKK 22.3M in FY2025/26 - a cumulative decline of ~32%. EBIT losses have widened each year since the last profitable year (FY2022/23), reaching DKK -5.81M in FY2025/26. Equity has eroded by ~30% from DKK 33.3M to DKK 23.1M over the same period. On the positive side, the company still holds a meaningful equity buffer of DKK 23.1M, which comfortably exceeds the registered share capital of DKK 7M and provides roughly 5 years of runway at the current loss rate. Ownership is stable and concentrated under parent PBH 26.207 ApS. The company has a ~30-year operating history in a defined niche (endpoint management) with a diversified proprietary product portfolio including a SaaS growth vehicle (CapaOne). However, the combination of shrinking revenue, widening losses, headcount reductions (from 31 avg. to 26, now 24 FTE), CEO transition during a downturn, and intense competition from Microsoft Intune and other giants creates significant execution risk. The SaaS pivot has not yet compensated for legacy revenue erosion. The company is not in immediate distress but requires either a successful turnaround or capital injection within the medium term.

Key strengths: Positive equity buffer of DKK 23.1M covering ~5 years of losses at current run-rate, Equity comfortably exceeds registered share capital of DKK 7M, ~30 years of continuous operation in endpoint management niche, Diversified proprietary product portfolio (CapaInstaller, PerformanceGuard, CapaOne, AdminOnDemand), Stable concentrated ownership under parent PBH 26.207 ApS, Cloud SaaS platform CapaOne as growth vehicle for recurring revenue

Risk factors: Four consecutive years of losses with widening EBIT deficit, Revenue declined ~32% cumulatively from FY2022/23 peak (DKK 32.9M to DKK 22.3M), Equity erosion of ~30% over three years, Workforce contraction from 31 avg. to 24 FTE currently, Intense competition from Microsoft Intune, ManageEngine, Ivanti, Tanium, CapaOne positioned as extension to Microsoft Intune - potential disintermediation risk, No subsidiaries or diversification - all group risk in one operating entity, Recent CEO transition during declining revenue period, SaaS transition not yet compensating for legacy revenue erosion

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report