Fenwick Software

Australia · www.fenwicksoftware.com.au · 17 vendors

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 17 sub-vendors.

Insights

Last updated 2026-08-16 · revision 1

17 direct vendors, 222 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Fenwick Software exhibits medium migration readiness (Score: 45). Strengths include a highly modern and cloud-native internal tech stack, built around Microsoft Azure, Dynamics 365 Business Central, and Microsoft 365. They actively implement and support cutting-edge Microsoft technologies like Microsoft 365 Copilot and AI for Business, demonstrating strong internal capabilities and expertise in cloud adoption. This positions them well for migrations *within* the Microsoft ecosystem. The primary challenge to migration readiness is an extremely high degree of vendor lock-in with Microsoft. Their entire business model, product offerings, and internal operations are deeply integrated into the Microsoft platform. While they are cloud-native within this ecosystem, migrating to a fundamentally different technology stack or cloud provider would be a monumental and costly undertaking. The provided data on "Total Vendors: 0" (if interpreted as their direct vendors) further suggests a concentrated vendor landscape, increasing lock-in risk. Data on regulatory environment, data residency requirements, and financial stability (to fund a major migration) is not available, which limits a comprehensive assessment of these factors.

Compliance

8 in-scope frameworks identified; showing 3.

Spam Act 2003 — Assessment Required

The Spam Act 2003 regulates commercial electronic messages sent by Australian businesses. Fenwick conducts email marketing (referenced in its privacy policy) and uses Google Ads. Risk is Low because: (1) Fenwick's privacy policy explicitly provides an opt-out mechanism for email communications (privacy@fenwick.com.au); (2) the company appears to be aware of consent requirements; (3) Spam Act penalties (up to AUD $2.22 million per day for serious breaches) are significant but enforcement against compliant businesses with opt-out mechanisms is rare. No ACMA enforcement actions against Fenwick identified.

Evidence: https://www.fenwick.com.au/resources/privacy-policy/, https://www.acma.gov.au/spam, https://www.legislation.gov.au/Details/C2004A01214

Australian Consumer Law — Assessment Required

The Australian Consumer Law (Schedule 2 of the Competition and Consumer Act 2010) applies to all businesses operating in Australia. For Fenwick Software, key ACL obligations include: consumer guarantees for services (must be provided with due care and skill, fit for purpose, within reasonable time); prohibition on misleading or deceptive conduct; unfair contract terms provisions (particularly relevant for Fenwick's standard-form software license agreements and terms of engagement). Risk is Low because ACL compliance is standard business practice for Australian companies, and Fenwick's published Terms of Engagement and Software License Agreement suggest awareness of these obligations. No ACCC enforcement actions against Fenwick have been identified.

Evidence: https://www.fenwick.com.au/resources/terms-of-engagement/, https://www.fenwick.com.au/resources/software-license-agreement/, https://www.accc.gov.au/business/business-rights-protections/unfair-contract-terms, https://www.legislation.gov.au/Details/C2011A00003

ISO 27001 (source) — Assessment Required

ISO 27001 is the international standard for Information Security Management Systems (ISMS). For an IT services company like Fenwick that provides cloud hosting, ERP implementation, custom app development, and managed services — handling sensitive client business data — ISO 27001 is highly relevant. Risk is Medium because: (1) Fenwick handles client financial, operational, and potentially sensitive business data through its cloud and managed services; (2) no ISO 27001 certification has been publicly disclosed, representing a gap in formal information security assurance; (3) enterprise clients in regulated industries (healthcare research, food manufacturing) may expect ISO 27001 certification from their IT service providers; (4) the Australian Cyber Security Centre (ACSC) and the Australian Government's Essential Eight framework encourage ISO 27001 alignment for IT service providers; (5) without certification, Fenwick cannot formally demonstrate to clients that its information security practices meet international standards. Risk is not High because ISO 27001 is voluntary in Australia and Fenwick's SMB-focused market may not universally require it.

Evidence: https://www.fenwick.com.au/solutions/dynamics-365-business-central/hosted/, https://www.fenwick.com.au/about/, https://www.iso.org/isoiec-27001-information-security.html, https://www.cyber.gov.au/resources-business-and-government/essential-cyber-security/essential-eight

Financials

Three-year financials

Financial Resilience Score: 7/10

Fenwick Software demonstrates strong qualitative financial resilience despite the absence of public financial disclosures. The company has nearly 50 years of continuous operation since 1976, having successfully navigated multiple technology cycles from COBOL/Pick systems through Navision, Dynamics NAV, and now Dynamics 365 Business Central. This longevity is a powerful indicator of financial stability and adaptive capacity. The company's own statement that revenue comes chiefly from existing clients suggests a sticky, recurring revenue base driven by support contracts, hosting subscriptions (Fenwick Cloud), and proprietary IP subscriptions (Fenwick Gold). The firm's self-funded geographic expansion — opening Brisbane in 2019 and Sydney in 2023 — indicates sufficient cash flow to invest in organic growth without apparent need for external capital. Employee retention averaging close to 10 years suggests low turnover costs and stable delivery capacity. Strategic alignment with Microsoft as a Solutions Partner with SMB Management Specialization provides co-selling leverage. However, resilience is constrained by several factors: heavy vendor concentration on Microsoft Dynamics, near-total geographic concentration in Australia, exposure to SME/mid-market IT capex cycles, and small scale (~60 staff) relative to global competitors like Accenture, DXC, KPMG, and Wiise. As a small proprietary company not required to lodge audited reports with ASIC, independent verification of financial health is not possible, which itself represents an analytical risk. Overall, the qualitative signals point to a stable, well-managed small business with reasonable — but not exceptional — resilience.

Key strengths: Nearly 50 years of continuous operation (founded 1976), Recurring revenue base from existing clients (support, hosting, IP subscriptions), Referral-driven growth with low customer acquisition costs, Microsoft Solutions Partner with SMB Management Specialization, High employee retention (average tenure ~10 years), Self-funded geographic expansion (Brisbane 2019, Sydney 2023), Proprietary IP: Fenwick Gold apps and Fenwick Cloud hosting

Risk factors: Heavy vendor concentration on Microsoft Dynamics 365 Business Central, Geographic concentration: almost exclusively Australian domestic market, SME/mid-market segment concentration exposes to domestic IT capex cycles, Small scale (~60 staff) vs. global system integrators, Limited ability to absorb large project overruns, Key-person / founder-family transition risk since 2011, No public financial disclosure limits independent credit assessment

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report