Cobot

Germany · www.cobot.me · 25 vendors

Upstream – Agile GmbH, operating as Cobot, provides web-based software for managing coworking spaces, office hubs, and flexible workspaces. The platform automates administrative tasks such as billing, bookings, membership management, and access control. This allows space managers to streamline operations and focus on fostering their communities.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 25 sub-vendors.

Insights

Last updated 2026-08-14 · revision 2

25 direct vendors, 249 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Cobot's migration readiness is moderate. The company's tech stack, which includes a RESTful API, OAuth 2, Webhooks, and an 'Open API' for developers, suggests a modular and extensible architecture that could facilitate migration efforts. The 'Cobot Bot Builder' further indicates a platform designed for custom add-ons, implying a degree of flexibility. The use of Vite for the frontend is a modern choice, and 'Active Storage' in Ruby on Rails can integrate with cloud storage solutions, indicating some cloud-ready components. However, several factors present challenges. There is no explicit mention of cloud-native architectural patterns such as containerization (e.g., Docker, Kubernetes) or microservices, which would significantly boost migration readiness. The 'Vendor Lock-in Risk: Unknown' is a critical concern, especially given the integration with 30 services and multiple physical access control systems (Kisi, SaltoKS, Tapkey, etc.). Deep integration with these systems could lead to significant re-engineering efforts during a migration. The geographic diversity of vendors, while beneficial for resilience, could introduce complexity in contract management and data transfer during a large-scale migration. Furthermore, the absence of data on financial stability (revenue concentration, growth history) makes it impossible to assess the company's capacity to fund a potentially costly migration. Similarly, the lack of specified regulatory environment and data residency requirements means potential compliance hurdles cannot be proactively assessed or planned for.

Compliance

8 in-scope frameworks identified; showing 3.

German Commercial Code — Partially Compliant

As a German GmbH, Upstream-Agile GmbH is subject to HGB (Handelsgesetzbuch) accounting and record-keeping requirements, including mandatory retention of business records for 6-10 years. Cobot's compliance features page explicitly references support for ZUGFeRD (German electronic invoicing standard), DATEV integration, and immutable invoice storage — all of which align with HGB and GoBD (Grundsätze zur ordnungsmäßigen Führung und Aufbewahrung von Büchern) requirements. Risk is Low because the company demonstrates active engagement with German accounting compliance requirements through its product features.

Evidence: https://www.cobot.me/en/features/ensure-compliance-with-ease, https://www.cobot.me/en/imprint

NIS2 (source) — Assessment Required

NIS2 (EU Directive 2022/2555, transposed into German law via the NIS2UmsuCG) applies to Essential Entities and Important Entities operating in the EU. Cobot (Upstream-Agile GmbH) is a SaaS/cloud software provider headquartered in Germany. The relevant NIS2 category for Cobot would be 'Digital Providers' under Annex II (Important Entities), specifically as an 'online marketplace', 'online search engine', or 'cloud computing service provider'. However, Cobot is a vertical SaaS platform for coworking space management — it is not a general-purpose cloud infrastructure provider, online marketplace, or search engine as defined under NIS2 Annex II. The NIS2 size threshold requires medium enterprises (50+ employees OR €10M+ annual turnover). Cobot's exact employee count and revenue are not publicly disclosed, but based on pricing tiers (starting at $89/month for up to 10 members), the company appears to be a small-to-medium SaaS business. If Cobot falls below the 50-employee / €10M revenue threshold, NIS2 would not apply regardless of sector. Risk is Low because: (1) Cobot's sector (coworking management SaaS) does not clearly fall within NIS2's listed Essential or Important Entity categories; (2) Company size likely falls below NIS2 thresholds; (3) Even if applicable as a digital provider, enforcement risk for a small SaaS in this sector is lower than for critical infrastructure operators. A formal assessment is required to confirm employee count, revenue, and precise sector classification.

Evidence: https://www.cobot.me/en/imprint, https://www.bsi.bund.de/EN/Themen/Unternehmen-und-Organisationen/Informationen-und-Empfehlungen/Empfehlungen-nach-Angriffszielen/Industrielle-Steuer-und-Regelungssysteme/NIS2/nis2_node.html

SOC 2 (source) — Assessment Required

SOC 2 is a voluntary auditing framework developed by the AICPA, applicable to service organizations that store, process, or transmit customer data in the cloud. Cobot is a cloud-based SaaS platform that processes significant personal and financial data on behalf of coworking space operators globally (including US customers). SOC 2 compliance is increasingly expected by enterprise customers and US-based clients as a baseline security assurance. Risk is Medium because: (1) Cobot serves customers in 90+ countries including the US, where SOC 2 is a common procurement requirement; (2) No SOC 2 report (Type I or Type II) has been found publicly; (3) The absence of SOC 2 certification may limit Cobot's ability to win enterprise contracts, particularly with US-based coworking operators; (4) As a SaaS platform handling billing, access control, and member personal data, the Trust Service Criteria (Security, Availability, Confidentiality) are directly relevant. Risk is not High because SOC 2 is voluntary and Cobot's primary market appears to be SME coworking spaces rather than large enterprises with mandatory SOC 2 requirements.

Evidence: https://www.cobot.me/en/features/ensure-compliance-with-ease, https://www.cobot.me/en/privacy-policy

Financials

Three-year financials

Financial Resilience Score: 7/10

Cobot (Upstream – Agile GmbH) is a small, privately held, founder-led German SaaS company operating in the coworking-management niche since 2008. Although no public financial figures are available due to its small GmbH status under §267 HGB, multiple qualitative indicators point to a stable and resilient business. The company has been bootstrapped and founder-run for over 15 years, with the three co-founders still serving as managing directors, suggesting no venture-capital-driven burn pressure and likely consistent profitability or break-even operations typical of long-lived founder-run German SaaS GmbHs. The recurring SaaS revenue model, based on subscription pricing per active member, provides predictable ARR with low customer-acquisition volatility. Cobot's product is deeply integrated into customers' billing, access control, and daily operations, creating high switching costs and customer stickiness. Geographic diversification across 90+ countries reduces dependence on any single national market, and the company has strong brand equity as one of the earliest dedicated coworking-management SaaS providers. However, risks include concentrated end-market exposure to the coworking/flex-office sector, which is vulnerable to structural downturns (as seen during COVID-19 and the WeWork collapse in 2023). Cobot also faces competition from better-capitalised, venture-backed competitors like Nexudus, OfficeRnD, Andcards, and Optix. Additional risks include FX exposure (revenue in USD/GBP, costs in EUR), key-person concentration around three founder-directors, and limited financial transparency as a small GmbH.

Key strengths: Bootstrapped and founder-led since ~2008 with no VC pressure, Recurring SaaS subscription revenue model with predictable ARR, 15+ years of continuous operation and strong brand equity as pioneer, Geographic diversification across 90+ countries, Sticky product deeply integrated into customer operations with high switching costs, Survived COVID-19 disruption without publicly reported layoffs

Risk factors: Concentrated end-market exposure to coworking/flex-office sector, Competition from better-capitalised VC-backed competitors (Nexudus, OfficeRnD, Andcards, Optix), FX exposure with revenue in USD/GBP and cost base in EUR, Key-person concentration around three founder-directors, Limited financial transparency as small GmbH, Small scale relative to competitors limits R&D and sales spending

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report