D-mærket Due Diligence

Run due diligence on D-mærket: check compliance and get alerts when suppliers change.

Denmark · d-maerket.dk · 11 vendors

D-mærket is Denmark's official labeling scheme for IT security and responsible data usage. It helps companies enhance their IT security, protect against cyberattacks, and demonstrate digital responsibility to consumers and partners. The scheme guides businesses in meeting recognized international standards for IT security, data protection, and data ethics.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-13 · revision 16

11 direct vendors, 142 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

5 in-scope frameworks identified; showing 3.

NIS2 (source) — No public evidence

Evidence: https://www.d-maerket.dk/da/nis2

GDPR (source) — No public evidence

Evidence: https://www.d-maerket.dk/da/privatlivspolitik

ISAE 3000 (source) — No public evidence

Financials

Three-year financials

Financial Resilience Score: 6/10

D-mærket's financial resilience is anchored by strong institutional backing rather than commercial scale. Industriens Fond reportedly earmarked approximately DKK 35M to develop and run the scheme during its build-up phase, and the organisation is co-sponsored by Denmark's largest business and consumer organisations (Dansk Erhverv, DI, SMVdanmark, Forbrugerrådet Tænk). This significantly de-risks the early-stage operating model and provides a stable funding base while the audit-fee revenue stream scales. The operating model is capital-light: an audit-and-certification scheme with a small core team of ~10 employees, no inventory, and minimal physical infrastructure. NIS2 implementation in Denmark provides a structural demand tailwind, and D-mærket is the only nationally endorsed combined IT-security and data-ethics label in Denmark, giving it brand exclusivity domestically. However, resilience is constrained by grant dependency, low certification volumes (dozens to low hundreds of certified companies), key-person risk in a small team, and substitution risk from international standards like ISO 27001. Verified revenue, EBIT, and equity figures could not be retrieved in this research session, limiting quantitative assessment.

Key strengths: Backed by Industriens Fond with ~DKK 35M earmarked grant funding, Sponsorship from Denmark's largest business and consumer organisations, NIS2 regulatory tailwind driving SME demand, Capital-light audit-and-certification operating model, Only nationally endorsed combined IT-security + data-ethics label in Denmark, Annual recertification provides recurring revenue potential

Risk factors: Grant dependency on Industriens Fond funding tranches, Low adoption volume (dozens to low hundreds of certified companies), Customer churn risk after first-year certification, Substitution by ISO 27001 and other international standards, Key-person dependency in a ~10-person organisation, Voluntary scheme—uptake risk constrains fee revenue

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report