EcoOnline Due Diligence

Run due diligence on EcoOnline: check compliance and get alerts when suppliers or ownership change.

Norway · owned by Independent (Norway) · www.ecoonline.com · 58 vendors

EcoOnline is a global SaaS company providing integrated software solutions for Environment, Health & Safety (EHS), chemical management, and ESG/sustainability reporting. Trusted by over 11,000 organisations worldwide, its platform covers incident management, audits, risk assessment, lone worker safety, safety data sheet management, and carbon accounting. The company helps businesses in high-risk industries stay compliant, protect their people, and meet sustainability goals.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 58 sub-vendors.

Insights

Last updated 2026-10-19 · revision 2

58 direct vendors, 434 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

EcoOnline exhibits high migration readiness. Its extensive use of cloud services (AWS, Azure, Digital Ocean) and managed databases (MongoDB Atlas, PostgreSQL via Crunchy Data) indicates a modern, likely cloud-native and potentially microservices-oriented architecture, which is inherently more portable and less prone to monolithic lock-in. This facilitates easier transitions between cloud environments or to new services. The company's strong financial position, backed by consistent revenue growth and private equity acquisition, provides ample resources to fund significant migration efforts. A key strength for migration readiness is the explicitly stated low vendor lock-in risk, supported by a diverse base of 32 vendors. This reduces dependency on any single vendor's proprietary systems or complex contracts, simplifying potential re-platforming or service transitions. While the existing adherence to GDPR, ISO 27001, SOC2, and NIS2 means robust security and data governance frameworks are in place, the primary challenge for migration is the data residency requirement, with data primarily hosted in EU data centers. Any migration strategy must ensure continued compliance with these specific regional requirements, which could influence the choice of cloud regions or providers.

Compliance

11 in-scope frameworks identified; showing 3.

ISO 45001 — Evidence found

EcoOnline provides safety management software that helps organizations achieve and maintain ISO 45001 compliance, demonstrating their expertise and engagement with this standard.

Evidence: https://www.ecoonline.com/en-us/ehs-software/safety-management-software/osha-cor-standards/, https://www.ecoonline.com/en-us/guides/iso-45001/, https://www.ecoonline.com/guides/iso-45001-certification/, https://www.ecoonline.com/en-us/blog/what-you-need-to-know-about-iso-45001/, https://www.ecoonline.com/chemical-management-software/coshh-risk-assessment/, https://www.ecoonline.com/en-us/chemical-safety/chemical-management-software/

ISO 27001 (source) — Evidence found

As a technology company handling customer data, there is a strong expectation for robust information security management, making this certification relevant.

Evidence: https://www.ecoonline.com/en-us/privacy-policy/

SOC 2 (source) — Evidence found

As a provider of cloud-based software, customers will expect assurance over the security, availability, and confidentiality of their data, making a SOC 2 report a common requirement.

Financials

Three-year financials

Financial Resilience Score: 5/10

EcoOnline's financial resilience is mixed. The Norwegian operating entity (ECOonline AS) maintains a strong equity ratio of 43.3% in 2025, classified as 'very good' by Brønnøysund, and benefits from the backing of Apax Partners, a well-capitalized private equity sponsor. The SaaS business model with 11,000+ customers provides sticky, recurring revenue, and significant cost actions have moved the Norwegian entity from EBIT losses of NOK -167.8M in 2023 to roughly break-even (+NOK 0.2K) in 2025, demonstrating management discipline. However, significant risks remain. Liquidity at the Norwegian entity is rated 'not satisfactory' at 0.31 in 2025, with cash on hand of just NOK 1.5M, indicating heavy reliance on intra-group funding. The entity carries NOK 1.89B in long-term inter-company debt generating NOK 263.9M in annual finance costs, keeping it deeply loss-making at the bottom line (NOK -160.6M in 2025). Revenue at the Norwegian entity has declined for two consecutive years, and Purehelp's driftscore is only 12/100. Reporting opacity post-delisting makes consolidated group assessment difficult.

Key strengths: Strong equity ratio of 43.3% at ECOonline AS (2025), Backed by Apax Partners private equity, SaaS recurring revenue model with 11,000+ customers, EBIT moved to break-even in 2025 after significant cost cuts, Holding company equity ratio of 78% (Erling Holdco AS)

Risk factors: Liquidity ratio of only 0.31 (not satisfactory), Cash on hand of just NOK 1.5M at year-end 2025, NOK 1.89B in long-term intra-group debt driving NOK 263.9M in finance costs, Revenue declined -0.9% in 2024 and -6.7% in 2025 at Norwegian entity, Purehelp driftscore of only 12/100 in 2025, No consolidated IFRS group reporting since 2021 delisting, Deep net losses continue (NOK -160.6M in 2025)

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report