Fleximap

Denmark · owned by Independent (Denmark) · www.fleximap.dk · 12 vendors

FlexiMap provides flexible multi-channel electrical mapping solutions for gastroenterology and cardiology research. The company offers packages for signal processing and analysis of gastrointestinal electrical activity, designed for accuracy and efficiency.

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 1 category; runs on 12 sub-vendors.

Insights

Last updated 2026-08-19 · revision 5

12 direct vendors, 175 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Fleximap's migration readiness is assessed as medium, characterized by a mix of opportunities and significant challenges. A key opportunity stems from the contradictory vendor data: if "Total Vendors: 0" is interpreted as a lack of direct vendor lock-in, it provides high flexibility in choosing new cloud providers and services without the complexities of untangling existing contracts or proprietary technologies. The existing web-based tech stack (HTML5, JavaScript, responsive design) also offers a modern foundation that is generally more adaptable to cloud environments than older legacy systems. However, significant challenges exist. The current "SaaS hosting infrastructure" and reliance on "Excel/CSV data processing" suggest an architecture that is likely not cloud-native, containerized, or microservices-based, requiring substantial refactoring and re-architecting for a true cloud migration. The regulatory environment presents considerable complexity, with GDPR, NIS2, SOC2, and ISO 27001 all requiring assessment or compliance. Any migration strategy must meticulously ensure adherence to these regulations, particularly GDPR's strict requirements for data processing and cross-border transfers, which adds significant cost and risk. EU data residency requirements further constrain the choice of cloud providers and regions. Financially, the extreme revenue concentration on a single product and geography indicates vulnerability, which could limit the company's capacity to fund a potentially costly and resource-intensive migration project.

Compliance

6 in-scope frameworks identified; showing 3.

ePrivacy Directive — Assessment Required

The ePrivacy Directive (implemented in Denmark via the Cookie Executive Order – Cookiebekendtgørelsen) requires informed consent for non-essential cookies and tracking technologies on websites. Fleximap's embedded map product (served via iframe/script to third-party websites) and the dudal.com/fleximap.dk websites themselves are subject to these requirements. Risk is Medium because: (1) Embedded SaaS tools that set cookies on third-party websites create complex consent chain obligations; (2) Datatilsynet has issued guidance and enforcement actions on cookie compliance; (3) No cookie consent mechanism was observed on the website.

Evidence: https://www.datatilsynet.dk/english/cookie-information, https://www.retsinformation.dk/eli/lta/2011/1148, https://www.fleximap.dk

Danish Data Protection Act — Assessment Required

The Danish Data Protection Act supplements GDPR with national specifications, including stricter rules for processing of sensitive data, CPR numbers (Danish personal identification numbers), and specific rules for public authorities. As a Danish company potentially processing CPR numbers or sensitive data for Danish public sector clients (Ankestyrelsen, Socialstyrelsen, Danmarks Statistik), compliance with the Danish DPA is mandatory. Risk is High because: (1) Processing CPR numbers without legal basis is a specific Danish violation; (2) Datatilsynet actively enforces both GDPR and the Danish DPA; (3) No compliance evidence was found.

Evidence: https://www.datatilsynet.dk/english, https://www.retsinformation.dk/eli/lta/2018/502, https://www.fleximap.dk

ISO 27001 (source) — Assessment Required

ISO 27001 is the international standard for information security management systems (ISMS). As a SaaS provider hosting client data and serving embedded content to third-party websites, Dudal Webdesign/Fleximap has information security obligations. Risk is Medium because: (1) The company processes client business data uploaded to their platform; (2) Public sector clients (Ankestyrelsen, Danmarks Statistik, Socialstyrelsen) may require ISO 27001 or equivalent security assurance from vendors; (3) No evidence of ISO 27001 certification was found; (4) The company appears small, making full ISO 27001 certification costly but not impossible. Danish public sector procurement increasingly requires ISO 27001 or equivalent from IT vendors.

Evidence: https://www.iso.org/isoiec-27001-information-security.html, https://www.ds.dk/da/certificering/iso-27001, https://www.fleximap.dk

Financials

Financial Resilience Score: 3/10

Dudal Webdesign (operating fleximap.dk under the FlexKort product brand) is a Danish sole proprietorship (enkeltmandsvirksomhed) based in Holstebro with CVR 27024157. As a sole proprietorship, it is not required to file annual reports with the Erhvervsstyrelsen, and no revenue, EBIT, or equity figures are publicly available. The business has been operating for over 13 years (since approximately 2011), which indicates baseline continuity, and it serves a diversified base of reputable Danish institutional customers including Ankestyrelsen, Danmarks Statistik, Rambøll, BDO, Jyllands-Posten, Socialstyrelsen, Lundbeck Fonden, HK, and G4S. Revenue streams appear to combine one-off custom web/system development projects, license sales (DKK 6,500–12,000 per license), and recurring SaaS subscriptions (DKK 199/month per customer). The financial resilience score is low primarily due to extreme key-person concentration risk — the business appears to be operated by a single individual (Jesper Dudal Madsen) — combined with micro-scale operations, low subscription pricing that limits ARR potential, and the absence of any published financial statements that would allow external verification of solvency or profitability. The niche product (interactive Denmark maps) also faces competition from generic BI platforms such as Power BI, Tableau, and Google Data Studio. The stated 'Healthcare & Pharmaceuticals' industry classification does not match the actual web design / SaaS business.

Key strengths: Over 13 years of continuous operating history (founded ~2011), Diversified revenue mix: custom projects, license sales, and recurring SaaS subscriptions, Reputable Danish institutional customer base (Ankestyrelsen, Danmarks Statistik, Rambøll, BDO, Lundbeck Fonden, etc.), Low overhead structure — single-location, owner-operated, Gradual organic product-line expansion (web design → FlexKort SaaS → Intras intranet → drone/video)

Risk factors: Key-person concentration: business appears operated by a single individual, Micro-scale operations with very low subscription pricing (DKK 199/month), No published annual accounts (sole proprietorship not required to file), Narrow niche product facing competition from generic BI tools (Power BI, Tableau, Google Data Studio, kepler.gl), ~100% geographic concentration in Denmark, Industry classification mismatch — not actually a healthcare/pharmaceutical company

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report