Cognigy

Germany · www.cognigy.com · 9 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 9 sub-vendors.

Insights

Last updated 2026-08-04 · revision 2

9 direct vendors, 202 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Cognigy exhibits strong migration readiness, primarily driven by its highly modern and cloud-native internal tech stack. The use of Kubernetes, Helm, and Azure Blob Storage indicates a containerized and likely microservices-based architecture, which is highly conducive to cloud migration and portability. The company's experience with key technologies like OpenAI, Anthropic, Google, and AWS further suggests familiarity and integration with major cloud platforms, significantly easing potential migration efforts. However, several critical unknowns could pose challenges. Data residency requirements are 'Not specified,' which is a significant gap that could impact migration strategies and target cloud regions. The regulatory environment is also not provided, meaning potential compliance requirements during migration are unknown. Financial stability data (revenue concentration, growth history) is missing, making it impossible to assess the company's capacity to fund a potentially complex migration. Similar to resilience, the vendor data is contradictory ('Total Vendors: 0' vs. 'Total Services: 11' and diverse vendor countries). Assuming there are vendors for the 11 services, the precise number of unique vendors and the associated lock-in risk are 'Unknown,' which could impact migration flexibility.

Compliance

14 in-scope frameworks identified; showing 3.

ISO 42001 — Compliant

ISO 42001 certification is explicitly confirmed through Cognigy's official Trust Center. ISO 42001 is the first international standard for AI Management Systems, published in December 2023, and is directly relevant to Cognigy as an AI platform provider. The risk level is Low because: (1) certification is confirmed from an official primary source; (2) ISO 42001 demonstrates proactive AI governance maturity; (3) the certification aligns with emerging EU AI Act requirements; (4) as one of the early adopters of ISO 42001 certification, Cognigy demonstrates leadership in AI governance. This certification is particularly significant given the EU AI Act's requirements for AI system providers.

Evidence: https://trust.cognigy.com/, https://www.cognigy.com/about

BSI C5 — Compliant

BSI C5 certification is explicitly confirmed through Cognigy's official Trust Center. BSI C5 is the German Federal Office for Information Security's cloud security standard, which is the de facto requirement for cloud service providers serving German public sector and regulated industry customers. The risk level is Low because: (1) certification is confirmed from an official primary source; (2) BSI C5 requires third-party attestation by a qualified auditor; (3) the certification demonstrates compliance with German government cloud security requirements; (4) BSI C5 substantially overlaps with NIS2 technical requirements, providing evidence of NIS2 readiness; (5) German enterprise customers (Lufthansa, DHL, Bosch, Henkel) would require BSI C5 for cloud service providers. This is a commercially critical certification for the German market.

Evidence: https://trust.cognigy.com/, https://www.bsi.bund.de/EN/Themen/Unternehmen-und-Organisationen/Informationen-und-Empfehlungen/Empfehlungen-nach-Angriffszielen/Cloud-Computing/Zertifizierung-C5/zertifizierung-c5_node.html, https://www.cognigy.com/about

Personal Information Protection Act — Assessment Required

Cognigy has a confirmed office in Seoul, South Korea (Mapo-gu), making South Korea's Personal Information Protection Act (PIPA) directly applicable. South Korea's PIPA is one of the strictest data protection laws globally, with requirements that in some respects exceed GDPR. The risk is Medium because: (1) Korea operations are confirmed; (2) PIPA applies to all entities processing personal information in Korea; (3) PIPA requires explicit consent for most data processing activities; (4) cross-border data transfers require either consent or standard contractual clauses approved by the Personal Information Protection Commission (PIPC); (5) PIPA mandates appointment of a Chief Privacy Officer (CPO) and Privacy Officer; (6) the PIPC has been actively enforcing PIPA with significant fines against technology companies.

Evidence: https://www.cognigy.com/about

Financials

Three-year financials

Financial Resilience Score: 8/10

Cognigy demonstrates strong financial resilience despite the absence of publicly disclosed revenue, EBIT, and equity figures. The company was well-capitalized as a private entity, raising over US$175M across Series A, B, and C rounds from tier-1 investors including Insight Partners, Eurazeo Growth, DTCP, and DN Capital. The most compelling financial anchor is the ~US$955M enterprise value acquisition by NiCE Ltd. (NASDAQ: NICE), announced in May 2025 and closed on 8 September 2025, which implies an estimated ARR range of US$60–90M based on typical enterprise SaaS multiples. Post-acquisition, Cognigy is now backed by a US$14B+ market-cap listed parent, significantly de-risking its balance sheet and providing operational stability. The company benefits from a blue-chip enterprise customer base (Lufthansa, Toyota, Mercedes-Benz, Bosch, DHL, Henkel, Bayer, Nestlé) with multi-year contracts implying high revenue retention. Strong analyst positioning as a Leader in Gartner Magic Quadrant (2023–2025), Forrester Wave, and IDC MarketScape further validates its market position. Key risks include likely historical unprofitability typical of growth-stage SaaS (evidenced by successive fundraises), intense competition from Google, Microsoft/Nuance, Amazon, Kore.ai, and hyperscaler-native tooling, LLM commoditization risk on the orchestration layer, and integration risk with NiCE's overlapping CXone Enlighten AI product. The strategic exit at ~US$955M nonetheless demonstrates realized enterprise value and strong investor confidence.

Key strengths: Acquired by NiCE Ltd. (NASDAQ: NICE) at ~US$955M enterprise value in September 2025, Raised ~US$175M+ across Series A/B/C from tier-1 investors (Insight Partners, Eurazeo Growth, DTCP, DN Capital), Series C of US$100M in August 2024 led by Eurazeo Growth, Blue-chip enterprise customer base with multi-year contracts (Lufthansa, Toyota, Mercedes-Benz, DHL, Bosch), Leader in Gartner Magic Quadrant for Enterprise Conversational AI Platforms (2023, 2024, 2025), Now backed by US$14B+ market-cap listed parent NiCE Ltd., Product category tailwind in Agentic AI / Voice AI enterprise segment, 1B+ annual customer interactions handled on platform

Risk factors: Historical unprofitability likely, as typical for growth-stage SaaS with cumulative losses driving successive fundraises, Intense competition from Google Dialogflow, Microsoft/Nuance, Amazon Lex, Kore.ai, LivePerson, OpenAI-based challengers, LLM commoditization risk on the orchestration layer eroding margins and moat, Integration risk with NiCE, including product overlap with CXone Enlighten AI and potential customer/talent attrition, FX and multi-jurisdictional exposure across EUR/USD/GBP costs and multi-currency revenue, Concentration in contact-center vertical, sensitive to enterprise IT budget cycles, No public disclosure of revenue, EBIT, or equity figures limits transparency

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report