exocad GmbH

Germany · exocad.com · 10 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 10 sub-vendors.

Insights

Last updated 2026-08-12 · revision 2

10 direct vendors, 162 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

exocad GmbH exhibits good migration readiness, primarily driven by its modern tech stack and existing cloud adoption. The use of AWS, .NET / ASP.NET, Blazor, Entity Framework Core, PostgreSQL, gRPC, and REST APIs indicates a foundation that is conducive to cloud-native architectures and microservices. The presence of cloud-based products like 'dentalshare' and 'exocad webview' suggests prior experience and capabilities in deploying and managing cloud solutions. The 'Open Platform / White-Label Software Architecture' also implies a modular design that could facilitate phased migration. However, significant challenges exist due to the highly regulated nature of their products. Compliance with Medical Device Software standards (ISO 13485, MDR EU 2017/745, MDSAP) will add substantial complexity, cost, and time to any migration effort, requiring re-validation and certification of migrated systems. The core CAD software, likely involving C++ / C#, may also present challenges in transitioning to a fully cloud-native, serverless environment. Data residency requirements are not specified, which could introduce unforeseen complexities if strict regulations apply. The 'Vendor Lock-in Risk' is unknown, and while vendor geographic diversity is present, the exact number of vendors for the 14 services is unclear, making a precise assessment of vendor-related migration hurdles difficult.

Compliance

13 in-scope frameworks identified; showing 3.

ISO 13485 — Compliant

ISO 13485:2016 certification is confirmed with publicly available certificate documentation. The standard is mandatory for medical device manufacturers in the EU (required for MDR compliance) and is a prerequisite for MDSAP. The risk is Low because: (a) active certification is documented with certificate number MD794750.2025; (b) the scope explicitly covers 'Development, manufacture and distribution of software programs for medical applications'; (c) MDSAP certification (which includes ISO 13485) is also confirmed; (d) the company has maintained this certification since at least 2016 based on the standard version referenced. Surveillance audits are conducted regularly as part of certification maintenance.

Evidence: https://exocad.com/company/certifications, https://exocad.com/fileadmin/content/company/01_exocad_Certificate_of_Registration_13485_2016_MD794750.2025.pdf, https://exocad.com/fileadmin/content/company/02_exocad_Certificate_of_Registration_MDSAP_701658_2025_04.pdf

ISO 27001 (source) — Assessment Required

ISO 27001 is the international standard for Information Security Management Systems (ISMS) and is highly relevant for a medical device software company processing sensitive dental patient data globally. exocad's certifications page explicitly lists ISO 13485:2016 (quality management for medical devices), MDSAP, and EU MDR — but does NOT list ISO 27001. This is a notable gap for a company of exocad's scale (75,000+ licenses, global operations, cloud services). The risk is Medium because: (a) ISO 27001 is increasingly expected by enterprise customers and healthcare regulators; (b) EU MDR and NIS2 both have cybersecurity requirements that ISO 27001 would help satisfy; (c) the absence of ISO 27001 certification does not mean the controls are absent (Align Technology may have group-level ISMS), but it reduces assurance for customers and regulators; (d) without ISO 27001, exocad may face competitive disadvantage in enterprise procurement and regulatory scrutiny under NIS2.

Evidence: https://exocad.com/company/certifications, https://exocad.com/fileadmin/content/company/01_exocad_Certificate_of_Registration_13485_2016_MD794750.2025.pdf, https://exocad.com/fileadmin/content/company/02_exocad_Certificate_of_Registration_MDSAP_701658_2025_04.pdf

MDSAP — Compliant

MDSAP certification is confirmed with publicly available certificate documentation (Certificate No. 701658_2025_04). MDSAP is a voluntary program that allows a single regulatory audit to satisfy requirements of five participating regulatory authorities (US FDA, Health Canada, TGA Australia, ANVISA Brazil, PMDA Japan). The risk is Low because: (a) active MDSAP certification is documented; (b) MDSAP is the most rigorous multi-jurisdictional medical device audit program available; (c) maintaining MDSAP certification demonstrates a high level of regulatory maturity and ongoing compliance across multiple jurisdictions.

Evidence: https://exocad.com/company/certifications, https://exocad.com/fileadmin/content/company/02_exocad_Certificate_of_Registration_MDSAP_701658_2025_04.pdf

Financials

Three-year financials

Financial Resilience Score: 8/10

exocad GmbH demonstrates strong financial resilience primarily due to its ownership by Align Technology (NASDAQ: ALGN), a large cash-generative parent that generated approximately US$3.99 billion in revenue in FY2023 and holds significant cash reserves. This backing provides exocad with balance-sheet support, working capital, and R&D funding well beyond what a standalone SME could access. The company operates a software business model with high gross margins, benefiting from both perpetual licenses and growing subscription/rental revenue streams, along with add-on module attach revenue. The company's competitive position is reinforced by strong network effects through its OEM channel strategy, with integrations to 35+ scanners, 40+ printers, 80,000+ implant components, and 19 articulators, making it the de-facto open platform in dental CAD/CAM. Its geographic footprint spans 150 countries with offices in Germany, USA, UK, Luxembourg, and South Korea. License unit growth from 50,000 (2022) to 75,000 (2026) implies approximately 10-11% compound annual growth in installed base, with revenue growth likely higher due to price increases and rising subscription mix. Key risks include concentration on the cyclical dental industry, competitive pressure from 3Shape and Dentsply Sirona, potential distortion of standalone results due to intercompany transfer pricing with Align, FX exposure across USD/KRW/GBP/CNY, and software piracy concerns. Limited public transparency as a private German GmbH inside a US parent also constrains detailed financial visibility.

Key strengths: Wholly-owned by Align Technology with ~US$3.99B revenue parent, High-margin software business model with recurring revenue, Strong OEM channel with extensive hardware integrations (35+ scanners, 40+ printers), Global footprint across 150 countries with 5 international offices, Steady license installed base growth: 50k (2022) → 75k (2026), Broad product portfolio including AI Design, TruSmile, ChairsideCAD, R&D headcount doubled between 2020 and 2021

Risk factors: Concentration on cyclical dental industry capital-equipment spending, Related-party transactions with parent Align may distort standalone results, Competitive pressure from 3Shape, Dentsply Sirona inLab, and AI entrants, Software piracy risk in some markets, FX exposure to USD/KRW/GBP/CNY movements, Limited public transparency as private GmbH inside US parent, 100% indirect sales channel creates customer concentration with large OEM partners

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report