Exact

Netherlands · www.exact.com · 39 vendors

Exact is a Dutch software company that develops cloud-based and on-premises business software for small and medium-sized enterprises (SMEs) and accountants. Their solutions automate processes such as accounting, ERP, finance, and HR. The company serves various industries including manufacturing, wholesale distribution, and professional services.

Resilience scores

Technology vendors

Services catalogue

6 services in catalogue across 5 categories; runs on 39 sub-vendors.

Insights

Last updated 2026-03-03 · revision 5

39 direct vendors, 354 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Exact exhibits high migration readiness, primarily driven by its highly modern and cloud-native technology stack. The company's extensive use of Microsoft Azure, Kubernetes, Docker, microservices architecture, and CI/CD pipelines positions it exceptionally well for efficient migration. This cloud-native approach, coupled with REST APIs and a focus on AI/ML, means that Exact's applications are likely decoupled, portable, and designed for scalability, significantly reducing the technical hurdles associated with migrating to new environments or evolving within their current cloud provider. Opportunities for migration are high due to the flexibility offered by containerization and microservices, allowing for granular migration strategies and minimal downtime. The adoption of Azure as a primary cloud platform also suggests familiarity with cloud operations and tooling. Migration challenges primarily stem from the regulatory environment. While Exact is aware of and preparing for regulations like GDPR and DORA, the 'Assessment Required' status for NIS2, DORA, SOC2, and ISO 27001 means that any migration effort would need to meticulously ensure continued compliance and potentially involve re-certification or re-assessment in the new infrastructure. Data residency requirements under GDPR (and DORA for financial clients) are also a key consideration, requiring careful planning to ensure data remains within compliant jurisdictions or is transferred with appropriate safeguards. The financial stability to fund a significant migration is unknown due to missing data. The vendor lock-in risk is also unclear due to the ambiguous 'Total Vendors: 0' data point; however, the cloud-native and open-standard-leaning internal tech stack suggests a degree of platform independence, which generally reduces vendor lock-in at the infrastructure level.

Compliance

6 in-scope frameworks identified; showing 3.

ISAE 3000 (source) — Assessment Required

As a software provider to accounting firms and finance professionals, ISAE 3000 assurance reporting may be relevant for customer trust, particularly given their focus on financial software. However, this is primarily a customer expectation rather than regulatory requirement, resulting in lower risk level.

Evidence: https://www.exact.com/trust

NIS2 (source) — Assessment Required

As a cloud-based business software provider in the EU serving 675,000+ companies, Exact may qualify as an Important Entity under NIS2 if they provide digital services or ICT service management. The company clearly exceeds size thresholds (675,000+ customers indicates significant revenue/employees). However, specific sector classification requires further assessment to determine if they fall under 'digital providers' or 'ICT service management' categories.

Evidence: https://www.exact.com/trust

SOC 2 (source) — Assessment Required

As a cloud services provider serving 675,000+ companies with business-critical software, SOC2 compliance would be expected by enterprise customers for trust and security assurance. Non-compliance could result in customer loss and competitive disadvantage. However, SOC2 is not legally mandated, reducing regulatory risk compared to GDPR/NIS2.

Evidence: https://www.exact.com/trust

Financials

Three-year financials

Financial Resilience Score: 8/10

Exact demonstrates strong financial resilience, primarily driven by its robust business model, market position, and strategic ownership, despite the lack of detailed public financial statements. Exact is a dominant player in the Benelux SME software market, particularly with its cloud-based solutions like Exact Online. This strong market share provides a stable customer base and recurring revenue streams (SaaS model), which are inherently resilient. The shift to a subscription-based (SaaS) model ensures predictable and recurring revenue, reducing volatility and providing a stable financial foundation. This model is less susceptible to economic downturns than transactional revenue models. The backing by leading global investment firms like KKR and Partners Group (who acquired Exact for €2.5 billion in 2021) signifies strong investor confidence in Exact's business model, growth prospects, and financial health. These firms typically invest in companies with proven profitability and significant growth potential, and they provide strategic capital and expertise. The available revenue data (2019-2021) shows consistent double-digit growth, indicating healthy demand for its products and effective business execution. This growth trajectory suggests the company is expanding its market reach and customer base. While SMEs can be sensitive to economic cycles, Exact's comprehensive suite of essential business software makes it a critical partner for its customers, often leading to high retention rates. The digital transformation trend among SMEs further bolsters demand for Exact's cloud solutions. Exact has a history of strategic acquisitions (e.g., Unit4 Bedrijfssoftware, ProQuro, SRXP) that expand its product portfolio and market reach, further strengthening its competitive position and resilience.

Key strengths: Strong Market Position, Recurring Revenue Model (SaaS), Strategic Private Equity Ownership, Consistent Growth, Focus on SMEs, Strategic Acquisitions

Risk factors: Lack of public access to detailed profitability metrics (like EBIT margins), Lack of public access to balance sheet health (like debt levels relative to equity or cash flow)

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report