DanBAN - Danish Business Angels
Denmark · owned by Independent (Denmark) · danban.org · 35 vendors
DanBAN (Danish Business Angels) is Denmark's leading network of private investors who invest in growth companies, often as the first professional investors in early-stage startups. Operating as a non-profit association, it facilitates investments, knowledge sharing, and networking among business angels. It has financed over 1,300 startups with more than 2.9 billion DKK invested, and hosts over 80 events annually.
Resilience scores
- Digital Sovereignty: 29
- Digital Resilience: 6
- Financial Resilience: 6
Technology vendors
- Canva Pty Ltd — Technology — Australia
- HubSpot, Inc. — Technology — United States
- Meta Platforms, Inc. — Technology — United States
- and 32 more
Insights
Last updated 2026-07-12 · revision 29
35 direct vendors, 406 subvendors
Direct vendors by controlling owner country (sample)
- Sweden: 1
- United Kingdom: 1
- Denmark: 5
Subvendors by controlling owner country (sample)
- UK: 1
- Germany: 13
- Denmark: 25
Migration Readiness: 5/10
Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.
DanBAN exhibits medium-to-low migration readiness. A key strength is that its tech stack is almost entirely composed of modern, cloud-based SaaS platforms (Wix, Dealum, Monday.com, Wufoo, WhistlePortal). This means DanBAN does not have legacy on-premise infrastructure to migrate, making it inherently 'cloud-native' in its consumption model. However, this also introduces significant vendor lock-in for core business functions. Platforms like Dealum (dealflow management) and Wix (website/CMS) are deeply integrated into DanBAN's operations. Migrating away from these would involve substantial effort in data export, re-platforming business processes, and re-training, despite the underlying infrastructure being cloud-native. The 'Total Services: 47' also points to a potentially complex web of dependencies that would need to be untangled during a migration. Crucially, there are critical data gaps that severely impede migration planning: 'Regulatory Environment: No public information available,' 'Data Residency Requirements: No public information available,' and 'Financial Stability: No public information available' (which impacts the ability to fund a migration). These gaps make it impossible to assess potential compliance hurdles, data transfer complexities, and the financial feasibility of a major migration effort. The 'Vendor Lock-in Risk: Unknown' further highlights this uncertainty, and the geographic diversity of vendors, while good for resilience, could add complexity to data transfer and compliance during a migration.
Compliance
11 in-scope frameworks identified; showing 3.
NIS2 (source) — Assessment Required
NIS2 covers 'financial market infrastructures' and 'credit institutions' as Essential Entities under Annex I, and 'providers of online marketplaces' and certain digital providers as Important Entities under Annex II. DanBAN is a non-profit business angel network — it is not a regulated credit institution, bank, payment institution, or financial market infrastructure operator under MiFID II or CRD IV. It does not operate critical digital infrastructure. As a non-profit association (foreningens formål er ikke-erhvervsdrivende) with an estimated small staff (well below 50 FTE) and likely annual turnover/budget below €10M, DanBAN almost certainly falls below NIS2's size thresholds (medium enterprise: 50+ employees OR €10M+ turnover). Risk is Low because the combination of sector classification (non-profit angel network, not a regulated financial entity) and likely sub-threshold size makes NIS2 applicability unlikely. However, formal confirmation of employee count and annual budget would be needed to definitively rule out applicability.
Evidence: https://danban.org, https://www.danban.org/terms, https://www.cfcs.dk/en/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555
EU Anti-Money Laundering Directives — Assessment Required
This is the highest-risk regulatory area for DanBAN. Business angel networks that facilitate investments in unlisted companies may fall within the scope of the Danish Hvidvasklov (Money Laundering Act, consolidating Act No. 930/2017 as amended), which implements EU AMLD5 and AMLD6. Key risk factors: (1) DanBAN facilitates investments of 3+ billion DKK in 1,300+ startups — this is significant capital flow; (2) If DanBAN or its members are classified as 'alternative investment fund managers' or 'investment advisers' under Danish financial regulation, AML obligations (customer due diligence, KYC, suspicious transaction reporting) apply; (3) The privacy policy references processing of 'criminal records' data for members, which may indicate KYC/AML screening is already being conducted — but the legal framework for this is not clearly articulated; (4) Finanstilsynet (the Danish FSA) supervises AML compliance for financial sector entities; (5) Non-compliance with AML rules carries severe penalties including criminal liability. Risk is High due to the severity of AML non-compliance consequences and the uncertainty about DanBAN's regulatory classification.
Evidence: https://danban.org, https://www.danban.org/privacy-policies, https://www.finanstilsynet.dk/en, https://www.retsinformation.dk/eli/lta/2017/930, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32018L0843
GDPR (source) — Partially Compliant
DanBAN demonstrates meaningful GDPR compliance efforts: a detailed, publicly available privacy policy (last updated January 31, 2025), explicit legal bases cited per GDPR Article 6, a published list of data processors with DPAs in place, documented data subject rights, and a complaints referral to Datatilsynet (the Danish DPA). However, several risk factors remain: (1) No formal Data Protection Officer (DPO) is identified or publicly disclosed — while DanBAN as a non-profit association may fall below the mandatory DPO threshold, the absence of a named DPO or DPO contact point is a gap; (2) Use of OpenAI (a US-based processor) for processing pitch deck personal data introduces cross-border transfer risk, mitigated by SCCs but requiring ongoing monitoring; (3) The privacy policy references a cookie policy hosted at openli.com but no standalone cookie banner or consent management platform is visibly documented; (4) Criminal records data is listed as a data category processed, which under Danish law (Databeskyttelsesloven §8) requires specific legal basis beyond standard GDPR Article 6 — this is a notable compliance risk; (5) No evidence of a formal GDPR audit or DPA registration was found. Risk is Medium rather than High because the organisation has clearly invested in GDPR documentation and processes, and is a small non-profit with limited data volumes.
Evidence: https://www.danban.org/privacy-policies, https://danban.org, https://www.danban.org/terms, https://www.datatilsynet.dk/english, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679
Financials
Three-year financials
- null:
- null:
- null:
Financial Resilience Score: 6/10
DanBAN is organized as a non-profit membership association (forening) rather than a commercial ApS or A/S, which means it does not publish standard revenue/EBIT/equity figures on CVR. Its financial resilience rests on recurring member subscription fees, partner/sponsor contributions, and event revenue, giving it a relatively predictable but modest revenue base with low working-capital intensity. Importantly, DanBAN does not invest its own capital — investment risk sits with individual angel members — so the association's balance sheet is insulated from startup investment losses. As Denmark's leading business-angel network with established scale (>DKK 3B deployed by members cumulatively, 1,300+ startups financed, 80+ events/year, 400-600 startups screened annually), DanBAN benefits from strong brand recognition and ecosystem partnerships that support member retention. However, as a non-profit, it likely holds modest equity/reserves, making it more vulnerable to one-off operational shocks. Its dependence on member willingness to pay exposes it to cycles in the Danish/European early-stage funding climate, which has been softer in 2022-2024. Limited public financial transparency also makes external creditworthiness assessment difficult.
Key strengths: Established position as Denmark's leading business-angel network, Recurring member subscription fee model with low working-capital intensity, Strong ecosystem partners (banks, law firms, EIFO, corporates, universities), Low balance-sheet risk — does not co-invest from a fund vehicle, Scale advantages: 80+ events/year, 400-600 startups screened annually, Cumulative network activity: >DKK 3B deployed, 1,300+ startups financed
Risk factors: Dependence on member willingness to pay subscriptions, Cyclical exposure to Danish/European early-stage funding climate, Non-profit structure limits capital buffer and reserves, Limited public financial transparency hinders creditworthiness assessment, Regulatory/reputational risk from facilitating private early-stage investments, Key-person and partner dependency risk
Revenue by geography
- Denmark: 100%
Revenue by product/service
- Event revenue: 0%
- Educational programs: 0%
- Member subscriptions: 0%
- Associated-partner fees: 0%
Workforce by country
- Denmark: 0
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.