Enonic Due Diligence
Run due diligence on Enonic: check compliance and get alerts when suppliers change.
Norway · enonic.com · 11 vendors
Enonic is a Norwegian tech company that develops and delivers the open-source digital platform Enonic XP. It offers a headless CMS, web application framework, and NoSQL storage solution, enabling users to build, manage, and deliver digital experiences like websites, applications, and APIs.
Resilience scores
- Digital Sovereignty: 0
- Digital Resilience: 8
- Financial Resilience: 6
Technology vendors
- InnoCraft — Technology — New Zealand
- Usercentrics GmbH — Technology — Germany
- Zendesk, Inc. — Technology — United States
- and 9 more
Services catalogue
1 service in catalogue across 1 category; runs on 11 sub-vendors.
- XP
Insights
Last updated 2026-08-16 · revision 2
11 direct vendors, 177 subvendors
Direct vendors by controlling owner country (sample)
- Denmark: 1
- Germany: 1
- United States: 8
Subvendors by controlling owner country (sample)
- Slovenia: 1
- Czech Republic: 1
- South Korea: 1
Compliance
8 in-scope frameworks identified; showing 3.
SOC 2 (source) — No public evidence
Evidence: https://enonic.com/platform/security, https://www.iso.org/obp/ui/#iso:std:iso-iec:27001:ed-3:v1:en
ISO 27001 (source) — Evidence found
Evidence: https://enonic.com/platform/security, https://www.iso.org/obp/ui/#iso:std:iso-iec:27001:ed-3:v1:en, https://www.iso.org/standard/62085.html
ISO 9001 — Evidence found
Evidence: https://enonic.com/platform/security, https://www.iso.org/standard/62085.html
Financials
Three-year financials
- null:
Financial Resilience Score: 6/10
Enonic AS demonstrates qualitative financial resilience through its 25-year operating history, blue-chip Norwegian public-sector customer base (NAV, Norsk Tipping, SSB, HDIR, Forsvaret, Posten), and long-duration, sticky contracts that provide predictable revenue streams. The transition to recurring revenue models through Enonic Cloud (launched 2021) and enterprise subscription licensing supports revenue stability, while ISO 9001 certification since 2011 signals mature process controls that align with public procurement requirements. However, the company's small scale (~20 employees) significantly limits R&D velocity and international sales reach compared to well-funded global rivals like Optimizely, Contentful, and Sanity. Heavy geographic concentration in Norway and dependency on a small number of flagship public-sector accounts creates material customer concentration risk. Currency exposure (NOK-denominated revenue vs. USD-funded competitors) and competitive pressure from hyperscalers and VC-backed headless CMS vendors add further risk. Founder-led private ownership limits capital-raising flexibility. Actual three-year financial figures were not accessible in this session and would need to be pulled from Brønnøysundregistrene to confirm resilience quantitatively.
Key strengths: 25-year operating track record since 2000, Blue-chip Norwegian public-sector customer base (NAV, Norsk Tipping, SSB, HDIR, Forsvaret, Posten), Recurring revenue potential via Enonic Cloud SaaS (launched 2021), ISO 9001 certified since 2011, Ranked #1 in SoftwareReviews DXP category four years running, Open-source strategy reduces marketing spend, Sticky, long-duration public-sector contracts
Risk factors: Small scale with only ~20 employees limits R&D and international reach, Heavy geographic concentration in Norway, Customer concentration in Norwegian public sector, Currency exposure with NOK revenue vs USD-funded competitors, Competitive pressure from well-funded global DXP/headless CMS vendors, Founder-led private ownership limits capital-raising options, AI/DXP competitive pressure requires ongoing investment
Revenue by geography
- Norway: 95%
- International: 5%
Workforce by country
- Norway: 20
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.