Dual ApS

Denmark · owned by Independent (Denmark) · dual.dk · 7 vendors

Dual ApS is a Copenhagen-based web development company that designs and builds custom web systems and websites for small teams and businesses. Founded by Jim Pannell and Michael Rasmussen, the company offers services including bespoke web development, SEO/performance/UX audits, business process clarity, and modernisation of legacy systems. They are known for long-term client relationships, with some customers having been with them since the early 2000s.

Resilience scores

Disruption prediction

Dual ApS has an estimated 40% probability of disruption in the next 6 months.

5 of Dual ApS's 7 vendors monitored for disruptions.

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 7 sub-vendors.

Insights

Last updated 2026-09-13 · revision 7

7 direct vendors, 136 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Dual ApS exhibits moderate migration readiness. A key strength is its strong financial stability as part of the Howden Group, providing the necessary resources to fund migration efforts. Crucially, Dual ApS offers 'Legacy System Modernisation' services to clients, indicating significant internal expertise and established processes for managing complex migrations, including codebase review, data migration, and testing. However, the internal tech stack's reliance on PHP and Drupal suggests a non-cloud-native and potentially monolithic architecture, which presents a considerable challenge for migration to modern cloud environments. The company operates within a highly regulated environment (GDPR, Solvency II, NIS2) and is likely subject to local data residency requirements, which adds significant complexity and constraints to any cloud migration strategy. While vendor geographic diversity exists, the 'Total Vendors: 0' data point is contradictory to other vendor information, and the exact number of unique vendors is not provided, making it difficult to fully assess potential vendor lock-in risks that could impact migration complexity.

Compliance

3 in-scope frameworks identified; showing 3.

SOC 2 (source) — Assessment Required

While not mandatory, SOC2 could be relevant as Dual ApS provides web systems and handles client data. Many clients, especially larger enterprises, may require SOC2 compliance from technology service providers. Risk is medium as lack of SOC2 could limit business opportunities but is not legally required.

ISO 27001 (source) — Assessment Required

ISO 27001 is not legally required but would be valuable for a technology company handling client data and building web systems. Risk is medium as lack of certification could impact client confidence and competitive positioning, especially for larger enterprise clients who may require vendor security certifications.

GDPR (source) — Compliant

Company demonstrates strong GDPR compliance with comprehensive privacy policy, clear legal basis for data processing, appropriate retention periods (12 months), privacy-focused analytics (Fathom), and explicit user consent mechanisms. As a Danish company processing EU personal data, GDPR compliance is mandatory and appears well-implemented.

Evidence: https://dual.dk/privatlivspolitik, https://dual.dk/en/privacy-policy

Financials

Three-year financials

Financial Resilience Score: 5/10

Dual ApS is a small Danish micro-consultancy (CVR 32309542) run by two co-founders, Jim Pannell and Michael Rasmussen, based in Copenhagen. No specific revenue, EBIT, or equity figures could be retrieved from CVR/Virk.dk or other Danish registries in the source session, so a quantitative resilience assessment is not possible. The qualitative profile suggests a stable but small operation with very long client tenure (customers since 2003, including PortugalProperty.com and My-French-House.com still active 15+ years later), implying sticky recurring revenue from maintenance and hosting work. Strengths include a low overhead model (two founders, no apparent office overhead), diversified service mix (custom development, SEO/UX audits, business process clarity, legacy modernization), and a tailwind from Drupal 7 and legacy PHP end-of-life migrations in 2024-2026. However, the business carries extreme key-person risk (the company effectively is its two founders), likely high client concentration on a few flagship accounts, no visible external capital cushion, and pricing exposure tied to project budgets in the tens to low hundreds of thousands of DKK. Overall the resilience score reflects a stable boutique consultancy with deliberate continuity-over-growth strategy, balanced against severe scale and concentration risks.

Key strengths: Very long customer tenure with clients since 2003 (PortugalProperty.com, My-French-House.com still active 15+ years later), Low overhead two-founder model with highly variable cost base, Diversified service mix: custom development, audits, process work, legacy modernization, Niche specialization in legacy modernization (Drupal 7, old PHP) aligned with 2024-2026 end-of-life tailwinds, Sticky recurring revenue from long-running managed platforms

Risk factors: Extreme key-person risk: business effectively is Jim Pannell and Michael Rasmussen, Likely high client concentration on a handful of named flagship clients, No visible external capital cushion or outside investors/debt facilities, Small project sizes (tens to low hundreds of thousands DKK) mean few projects drive the top line, No public financial disclosures available; abbreviated micro-ApS accounts limit transparency

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report