GapSolutions Due Diligence

Run due diligence on GapSolutions: check compliance and get alerts when suppliers or ownership change.

Denmark · owned by Independent (Denmark) · gapsolutions.dk · 11 vendors

GapSolutions A/S is a Danish software and consulting company that specializes in governance, risk, and compliance (GRC). They provide a GRC platform called GapPortal and advisory services to help businesses manage GDPR, information security, and whistleblower schemes effectively and in a structured manner.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-13 · revision 6

11 direct vendors, 193 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

5 in-scope frameworks identified; showing 3.

SOC 2 (source) — No public evidence

GDPR (source) — Evidence found

Evidence: https://gapsolutions.dk/om-os/erklaeringer/, https://gapsolutions.dk/wp-content/uploads/2025/11/ISAE_3000_GDPR_report_FSR_Type_2-2025.pdf

NIS2 (source) — No public evidence

Evidence: https://gapsolutions.dk/service/informationssikkerhed#nis2

Financials

Three-year financials

Financial Resilience Score: 6/10

GapSolutions A/S operates in a structurally growing market (GRC/compliance software and consulting) with strong regulatory tailwinds from GDPR, NIS2, the EU AI Act, and Danish whistleblower legislation. Its SaaS platform (GapPortalen) provides a recurring, high-margin revenue base, and its customer portfolio is diversified across retail, banking, education, construction, architecture, sports, and associations, reducing single-sector exposure. The hybrid software-plus-consulting model increases stickiness and creates upsell opportunities. However, the company is a small/mid-sized private Danish A/S with a limited capital base, geographic concentration almost entirely in Denmark despite Nordic branding, and dependency on scarce senior compliance/security talent. It also competes with larger and better-funded Nordic and international GRC vendors such as ComplyCloud, OneTrust, RISMA, Wired Relations, and Whistleblower Software. Demand has been driven by regulatory implementation peaks, and growth could moderate once first-time compliance projects normalise. Without access to the official årsrapport filings (revenue, EBIT, equity, employees), a precise resilience score cannot be fully validated. The mid-range score reflects strong qualitative positioning offset by SME-scale risks and lack of verified financial disclosure.

Key strengths: Recurring SaaS revenue from GapPortalen platform, Strong regulatory tailwinds (GDPR, NIS2, EU AI Act, whistleblower laws), Diversified customer base across multiple sectors, Hybrid software + consulting model increases stickiness, Operating since at least 2017-2019, surviving multiple regulatory cycles

Risk factors: Small/mid-cap private company with limited capital base, Competitive GRC market with larger international vendors, Regulatory cyclicality - demand tied to compliance implementation peaks, Talent dependency on scarce senior compliance/security specialists, Geographic concentration effectively limited to Denmark, Likely concentrated ownership/management risk typical of SMEs

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report