Carerix B.V.

Netherlands · www.carerix.com · 24 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 24 sub-vendors.

Insights

Last updated 2026-08-03 · revision 2

24 direct vendors, 258 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Carerix B.V. exhibits a high level of migration readiness, primarily driven by its modern and cloud-native technology stack. The use of Amazon Web Services (AWS), Docker, and a REST API, along with its core offerings being 'Cloud-based SaaS', strongly indicates an architecture that is well-suited for migration, likely leveraging containerization and microservices principles. This technical foundation provides significant flexibility and reduces the complexity typically associated with migrating legacy or monolithic systems. The company's adoption of 'AI-powered candidate matching' and 'OAuth 2.0' further underscores its modern approach. While 'Total Vendors' is listed as 0, which would imply no vendor lock-in, the provided 'Vendor Geographic Diversity' across 7 unique countries suggests some external dependencies. However, the geographic diversity of these potential vendors would generally mitigate migration complexity related to vendor concentration in a single region. Critical information regarding the regulatory environment, data residency requirements, financial stability to fund migration, and explicit vendor lock-in risk is not available, which prevents a perfect score. Nevertheless, the robust technical architecture positions Carerix B.V. very favorably for future migrations.

Compliance

7 in-scope frameworks identified; showing 3.

ISAE 3000 (source) — Assessment Required

ISAE 3000 is relevant for organizations that provide assurance reports to third parties (e.g., on internal controls, sustainability, or data processing). For a SaaS provider like Carerix, ISAE 3402 (a subset focused on service organization controls) could be relevant if clients require assurance over Carerix's processing controls. However, this is less common than SOC 2 or ISO 27001 for a company of this profile. Risk is LOW because ISAE 3000/3402 is not a primary regulatory requirement for recruitment SaaS providers, and alternative frameworks (ISO 27001, SOC 2) are more commonly used.

Evidence: https://www.ifac.org/, https://www.carerix.com

NIS2 (source) — Assessment Required

Carerix B.V. operates as a cloud-based SaaS provider (digital service provider / ICT service management). Under NIS2, 'digital providers' including cloud computing services and online marketplaces are classified as Important Entities. If Carerix meets the size threshold (50+ employees OR €10M+ annual turnover), NIS2 would apply. As a well-established Dutch SaaS company serving the recruitment/staffing industry across the Netherlands and potentially other EU markets, it is plausible they meet these thresholds, but exact employee count and revenue figures were not confirmed during research. Risk is MEDIUM because: NIS2 applicability depends on size threshold confirmation; if applicable, non-compliance carries significant penalties (up to €7M or 1.4% of global turnover for Important Entities); the Dutch implementation (Cyberbeveiligingswet) is in progress.

Evidence: https://www.ncsc.nl/, https://www.rdi.nl/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555, https://www.carerix.com

ISO 27001 (source) — Assessment Required

ISO 27001 is the internationally recognized standard for information security management and is particularly prevalent among European SaaS providers as an alternative or complement to SOC 2. For a Dutch recruitment SaaS company processing sensitive personal data (CVs, assessments, employment records), ISO 27001 certification would be a strong indicator of mature security controls. Risk is MEDIUM because: (1) no public certification evidence was found; (2) the absence of ISO 27001 in a data-intensive SaaS company increases security risk; (3) Dutch enterprise clients and public sector clients often require ISO 27001 as a procurement condition.

Evidence: https://www.iso.org/isoiec-27001-information-security.html, https://www.carerix.com

Financials

Three-year financials

Financial Resilience Score: 6/10

Carerix B.V. operates a recurring SaaS revenue model providing ATS/CRM software to staffing agencies and recruiters in the Benelux region. The subscription-based model typically generates predictable ARR with high gross retention, and ATS platforms are deeply embedded in staffing-agency workflows, creating high switching costs and supporting customer retention. The company has an established brand in the Benelux staffing niche, limiting competition from generic global ATS vendors, and benefits from strategic/PE ownership providing capital and consolidation opportunities. However, the company is small in scale (likely sub-€20m revenue range typical for niche Benelux HR-tech firms), providing limited buffer against downturns. Its client base of staffing agencies is highly sensitive to labour-market cycles, and recessions hurt hiring volumes and thus per-seat/per-placement revenue. Competitive pressure comes from global ATS players (Bullhorn, SmartRecruiters, Recruitee) and Dutch specialists (OTYS, Connexys/Salesforce, Mysolution). Repeated M&A activity introduces ownership/transition risk that can disrupt product roadmap and cause customer churn. As a small Dutch B.V., Carerix files abbreviated statutory accounts under small-entity filing exemptions (Title 9, Book 2 Dutch Civil Code, Article 396), so revenue and EBIT are not publicly disclosed, making external assessment of financial resilience difficult without paid data sources.

Key strengths: Recurring SaaS subscription revenue model with predictable ARR, High switching costs and sticky ATS product embedded in client workflows, Established brand and niche footprint in Benelux staffing market, Backing by strategic/PE ownership providing capital

Risk factors: Small scale (likely sub-€20m revenue) with limited downturn buffer, Cyclicality of the staffing market and sensitivity to labour-market cycles, Competitive pressure from global ATS vendors and Dutch specialists, Ownership/transition risk from repeated M&A activity, Limited public financial transparency due to small-entity filing exemption

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report