EU-Supply

United Kingdom · eu-supply.com · 7 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 7 sub-vendors.

Insights

Last updated 2026-09-12 · revision 1

7 direct vendors, 190 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

EU-Supply exhibits a medium-to-low migration readiness. The primary challenge lies in its "Internal Tech Stack", which heavily features "ASP.NET", ".NET Framework", "IIS", and "Windows Server". This suggests a traditional, potentially monolithic architecture that would require substantial refactoring and modernization efforts to transition to a truly cloud-native, containerized, or microservices-based environment. The company's products are built for "EU Procurement Directives Compliance", a complex regulatory landscape that would necessitate careful planning and execution during any migration to ensure continued adherence, potentially increasing complexity and cost. A critical missing piece of information is "Data Residency Requirements", which, depending on its specifics, could significantly constrain migration options and increase complexity, especially given operations across multiple EU countries. Financial stability data (revenue concentration, growth history) is also absent, making it impossible to assess the company's capacity to fund a potentially large-scale migration. While "Vendor Lock-in Risk: Unknown" is stated, the fact that 8 services are sourced from vendors with HQs in only 2 countries (United States, Australia) suggests a potential for vendor lock-in, which could complicate or hinder migration efforts if contracts are rigid or exit strategies are not clear. On the positive side, the existing use of "Microsoft Azure" indicates some familiarity with cloud environments, and being a "SaaS (Software as a Service)" provider means they already operate in a service delivery model, which aligns with cloud principles, but does not guarantee a modern underlying architecture.

Compliance

11 in-scope frameworks identified; showing 3.

EU Public Procurement Directives — Compliant

EU-Supply's CTM platform is explicitly designed to help public authorities manage tenders in full compliance with EU Directives.

Core business is providing an e-tendering platform for public authorities in the EU, making compliance with these directives essential. Non-compliance would undermine their entire business model and lead to loss of all public sector contracts.

Evidence: https://www.devex.com/organizations/eu-supply-115131, https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dtime%2Bin%2BUnited%2BKingdom&q=EhAqBdAUBhsnC6UOP7wZFuo5GPaDldUGIjAU7j6DgtkR0Itggmk2jg_5zfz54-a6WkgeOxNuysPzeygRA4Yrgquss8ByWGH_yXoyAnJSWgFD, https://bondiq.eu/en/glossary/electronic-procurement-eprocurement, https://www.trade.gov/country-commercial-guides/eu-selling-public-sector

ISO 27001 (source) — Compliant

As a provider of a critical e-tendering platform for the public sector, ISO 27001 is a de facto requirement to demonstrate a commitment to information security and build trust with clients.

Public sector clients, especially for a service handling sensitive procurement data, have high expectations for information security. Lacking this certification would be a significant commercial disadvantage and could lead to exclusion from tenders.

Evidence: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dtime%2Bin%2BUnited%2BKingdom&q=EhAqBdAUBhsnC6UOP7wZFuo5GPWDldUGIjDpjFTOLgcDhkX43t_HQurhL-rtQ3_JVdSARGY4vDaElGTQgau_V8_kQUjcQAf8IfsyAnJSWgFD, https://uk.eu-supply.com/ctm/Advertisement/PublicAdvertisement/SupplierPremiumSevicesTermsAndConditions

P2B Regulation — Assessment Required

The company provides an online intermediation service connecting business users (suppliers) to contracting authorities within the EU, falling under the scope of the P2B Regulation.

The regulation aims to ensure fairness and transparency for business users of online platforms. While applicable, the risk of significant disputes or penalties is lower compared to data security regulations.

Evidence: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dtime%2Bin%2BUnited%2BKingdom&q=EhAqBdAUBhsnC6UOP7wZFuo5GPaDldUGIjAU7j6DgtkR0Itggmk2jg_5zfz54-a6WkgeOxNuysPzeygRA4Yrgquss8ByWGH_yXoyAnJSWgFD, https://www.arthurcox.com/knowledge/platform-to-business-regulation-an-overlooked-forerunner-to-the-digital-services-package/, https://yogatax.co.uk/help/vat/vat-digital-services-eu/, https://zonos.com/docs/guides/country-guides/eu-vat-scheme/eu-vat-scheme-for-digital-services, https://www.lawsociety.org.uk/topics/brexit/vat-after-brexit, https://stripe.com/de/resources/more/uk-to-eu-vat-compliance

Financials

Three-year financials

Financial Resilience Score: 5/10

EU-Supply's financial resilience is difficult to assess directly because the company was acquired by Mercell Holding ASA in 2021 and delisted from Nasdaq First North Stockholm, after which its results were consolidated into Mercell (which itself was subsequently taken private by Thoma Bravo in 2022). Standalone financial disclosure has therefore ceased, and the UK subsidiary EU-Supply Ltd files only abridged small-company accounts at Companies House. Qualitatively, the business benefits from a recurring SaaS revenue model, a sticky public-sector customer base (EU/UK government agencies, NHS, municipalities), and structural regulatory tailwinds from EU procurement directives and e-invoicing mandates. These factors support revenue visibility and customer retention. However, resilience is constrained by concentration in public-sector procurement (subject to budget cycles and competitive tenders), intense competition from larger players such as Jaggaer, Basware, SAP Ariba, Coupa, and Visma/Proactis, and the fact that parent Mercell has historically reported operating losses and goodwill impairments, suggesting sector-wide margin pressure. Historically, EU-Supply itself oscillated around operating break-even as a listed entity, indicating limited standalone financial cushion.

Key strengths: Recurring SaaS subscription revenue model, Sticky public-sector customer base with multi-year framework contracts, Regulatory tailwinds from EU procurement directives and e-invoicing mandates, Backing of Mercell Group (owned by Thoma Bravo) providing scale and financing access

Risk factors: Loss of standalone financial disclosure post-2021 acquisition, Concentration in public-sector procurement exposed to budget cycles, Intense competition from larger e-procurement vendors (Jaggaer, Basware, SAP Ariba, Coupa, Visma/Proactis), Parent Mercell has reported operating losses and goodwill impairments, Historical break-even operating performance as a listed entity, Integration risk into Mercell's platform strategy

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report