Fortiv ApS Due Diligence

Run due diligence on Fortiv ApS: track operational status, monitor disruption and compliance, and get alerts when suppliers, ownership or leadership change.

Denmark · owned by Independent (Denmark) · fortiv.io · 17 vendors

Fortiv is a Danish AI-native Business Continuity Management (BCM) platform that automates the full BCM lifecycle, including BIA data collection, dependency mapping, continuity planning, tabletop exercises, and incident response. Founded in 2025 by Thomas Sehested and Emil Pfeiffer, the company uses AI agents to help enterprise resilience teams anticipate, prepare for, and recover from disruptions. Its unified platform integrates business continuity, exercise & simulation, and incident management modules into a single connected solution.

Resilience scores

Disruption prediction

Fortiv ApS has an estimated 17% probability of disruption in the next 6 months.

9 of Fortiv ApS's 17 vendors monitored for disruptions.

Technology vendors

Insights

Last updated 2026-09-22 · revision 2

17 direct vendors, 239 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Fortiv.io exhibits a high level of migration readiness, primarily driven by its modern technological foundation and proactive compliance posture. The internal tech stack, featuring Next.js and Sanity CMS, indicates a modern web development and content management approach. Next.js, a React framework, is well-suited for serverless and containerized deployments, suggesting a codebase that is likely adaptable to cloud environments. Sanity CMS, as a headless solution, offers inherent flexibility for various deployment and integration models. The company's strong adherence to GDPR and SOC 2 Type II, coupled with its awareness of the NIS2 Directive, means it already operates with stringent data protection and security standards. This proactive compliance significantly streamlines migration to cloud platforms that offer robust security and compliance certifications. Furthermore, the flexible data residency options, allowing customer data storage in the EU (Ireland, Germany) and the US (Virginia), provide excellent strategic advantage for cloud migration, as Fortiv.io can select cloud providers with data centers in these regions to meet customer and regulatory requirements without complex architectural overhauls. However, certain factors present challenges or unknowns. The absence of financial data (growth history, revenue concentration) makes it difficult to assess Fortiv.io's capacity to fund a potentially significant cloud migration project. The data states "Total Vendors: 0" but lists 17 services from vendors in 5 countries. Assuming vendors exist, the specific number of distinct vendors is not provided, making it challenging to assess the degree of vendor lock-in. If many services are tied to a few critical vendors, disentangling these relationships during migration could be complex and costly. The "Vendor Lock-in Risk" is explicitly "Unknown." While the tech stack is modern, there is no explicit mention of current containerization (e.g., Docker, Kubernetes) or microservices architecture, which would indicate an even higher degree of cloud-native readiness. Additionally, while vendor geographic diversity is beneficial for resilience, it could add complexity to migration if services need to be consolidated or re-platformed across different regional providers.

Compliance

7 in-scope frameworks identified; showing 3.

GDPR (source) — Partially Compliant

Fortiv ApS is established in Denmark, an EU member state. The GDPR applies to any organization established in the EU/EEA that processes personal data, which includes customer, employee, and supplier information.

As a Danish company processing customer and employee data, non-compliance with GDPR could lead to significant fines (up to 4% of global turnover) and reputational damage. The risk is high due to the direct processing of personal data.

Evidence: https://www.fortiv.io/legal-and-privacy

DORA (source) — Assessment Required

Fortiv ApS provides a business continuity management platform to the financial services industry. Under DORA, ICT third-party service providers to financial entities are in scope. Fortiv's website explicitly mentions helping clients with DORA compliance.

As a critical ICT third-party provider to the financial sector, non-compliance could lead to contractual penalties and loss of business. The risk is high as financial entities will be required to ensure their critical providers are compliant.

Evidence: https://www.fortiv.io/industries/financial-services, https://www.fortiv.io/blog/dora-compliance-checklist, https://www.fortiv.io/about

EU AI Act (source) — Assessment Required

Fortiv's platform is described as 'AI-native' and is used for business continuity management in sectors like energy and finance, which involve critical infrastructure. AI systems used as safety components in the management of critical infrastructure are classified as high-risk.

If Fortiv's AI platform is classified as high-risk, non-compliance would lead to significant fines and a potential ban on their product in the EU. The risk is high due to the potential for their AI to be used in managing critical infrastructure.

Evidence: https://www.fortiv.io/, https://www.fortiv.io/about, https://pitchbook.com/profiles/company/841080-79, https://www.thebci.org/corporate-partner-detail/fortiv-aps.html, https://www.fortiv.io/business-continuity, https://www.prnewswire.com/news-releases/fast-growing-ai-startup-fortiv-enters-us-as-demand-for-business-continuity-accelerates-in-an-uncertain-world-302658881.html

Financials

Three-year financials

Financial Resilience Score: 6/10

Fortiv ApS is a seed-stage Danish SaaS startup with only one filed fiscal year (an extended ~13-month period ending December 2025). The company reported a negative gross profit of DKK -2.33M and a net loss of DKK -8.80M, cushioned by DKK 13.7M in equity derived primarily from a €3M seed round led by Seed Capital in May 2025. This equity base implies roughly 12-18 months of runway at current burn rates without additional funding or meaningful revenue acceleration. Resilience is bolstered by tier-1 VC backing (Seed Capital, whose portfolio includes Trustpilot, Lunar, Templafy, VEO, and Flatpay), a credible board including former Humio CEO Geeta Schmidt, and structural demand tailwinds from mandatory EU regulatory frameworks (DORA, ISO 22301). Seed Capital's newly closed €130M Fund V has already identified Fortiv as an early deployment, providing follow-on financing optionality. However, the company remains pre-revenue or early-revenue, with negative gross margins indicating cost of delivery exceeds any booked revenue, and faces execution risk in its January 2026 US market entry as well as competition from established BCM incumbents (Fusion, Riskonnect, Archer, ServiceNow).

Key strengths: €3M seed round from Seed Capital (May 2025) provides DKK 13.7M equity cushion, Tier-1 VC backing with strong portfolio track record (Trustpilot, Lunar, Templafy), Regulatory tailwind from mandatory EU frameworks (DORA, ISO 22301), Recurring-revenue SaaS model supports sticky, subscription-based economics, Seed Capital Fund V (€130M) identifies Fortiv as early deployment, enabling follow-on funding, Experienced board including former Humio CEO Geeta Schmidt

Risk factors: Pre-revenue/early-revenue stage with negative gross profit (DKK -2.33M), Cash burn of DKK 8.8M vs DKK 13.7M equity implies 12-18 month runway, Single-product, single-category concentration in niche BCM market, Customer concentration risk with small team (~16 employees) and lumpy customer base, Nascent US market entry (January 2026) unproven, Competitive pressure from established BCM incumbents and other AI startups, Revenue not disclosed in filed accounts, limiting transparency

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report