GMO GlobalSign K.K. Due Diligence

Run due diligence on GMO GlobalSign K.K.: check incident history and compliance and get alerts when suppliers or ownership change.

Japan · owned by GMO Internet Group, Inc. (Japan) · www.globalsign.com · 24 vendors

GMO GlobalSign is a global Certificate Authority and provider of identity and security solutions for the Internet of Things. It offers a range of digital certificates, including SSL/TLS, and other PKI-based solutions to secure websites, communications, and online transactions.

Resilience scores

Disruption prediction

GMO GlobalSign K.K.: 1 critical incidents expected in the next three months, based on its recorded incident history.

Forecast estimates are rounded up to whole numbers.

No active incident reported (its status page, as of 2026-11-09 17:25 UTC)

12 of GMO GlobalSign K.K.'s 24 vendors have incident tracking.

Technology vendors

Services catalogue

12 services in catalogue across 4 categories; runs on 24 sub-vendors.

Insights

Last updated 2026-09-12 · revision 9

24 direct vendors, 230 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

11 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Evidence found

As a security company, customers expect adherence to internationally recognized information security standards. ISO 27001 is a key certification for demonstrating a robust Information Security Management System (ISMS).

ISAE 3000 (source) — No public evidence

ISAE 3000 is a standard for assurance over non-financial information and could be used to provide assurance over their security controls, similar to a SOC 2 report, particularly for a European audience.

PSD2 — Evidence found

GMO GlobalSign provides Qualified Website Authentication Certificates (QWACs) and Qualified Electronic Seal Certificates (QSeals) that are compliant with the Payment Services Directive 2 (PSD2) for use by financial institutions in the EU.

Evidence: https://nhimg.org/community/identity-beyond-iam/qualified-electronic-signatures-and-eidas-what-practitioners-should-recheck/, https://utimaco.com/service/knowledge-base/digital-signing/what-qualified-trust-service-provider-qtsp

Financials

Financial Resilience Score: 8/10

GMO GlobalSign K.K. demonstrates strong qualitative financial resilience despite the absence of standalone published financials. As a wholly-owned operating subsidiary of GMO Internet Group (TSE: 9449), a diversified and cash-generative Japanese internet infrastructure group, the company benefits from parent capital backing and cross-selling opportunities across domains, hosting, payments, and IoT services. Its core business model—issuance and renewal of digital certificates—is subscription/annuity-like, providing high revenue visibility through mandatory 1-year (and increasingly shorter) renewal cycles. The company holds a defensible moat as one of only a handful of publicly-trusted Certificate Authorities embedded in Microsoft, Apple, Mozilla, and Adobe trust stores, with #1 paid-SSL market share in Japan and approximately 275,000 active reseller/customer accounts globally. Diversified end-markets (SSL/TLS, code signing, S/MIME, IoT device identity, document e-signing via GMO Sign, and eKYC) reduce single-product dependency. Regulatory tailwinds (eIDAS, PSD2, Japan's electronic signature law, BIMI/VMC adoption) and industry shifts toward shorter certificate lifetimes (47/90/200 days) increase renewal frequency. Key risks include pricing pressure from free CAs (Let's Encrypt, Google Trust Services) compressing the low-end SSL market, CA/Browser Forum compliance risk where a single mis-issuance could trigger browser distrust, scale competition from larger global players (DigiCert, Sectigo, Entrust), FX exposure across EU/US/APAC revenues versus JPY reporting, and margin pressure from shorter certificate lifetimes reducing per-unit ASPs.

Key strengths: Recurring subscription/renewal revenue model with high visibility, Trust-store embedding creates high barrier to entry (only handful of publicly-trusted CAs worldwide), Backing of large, profitable listed parent GMO Internet Group (TSE: 9449), Diversified product portfolio across SSL/TLS, code signing, IoT, e-signing, and eKYC, #1 paid-SSL market share in Japan (per Netcraft July 2026), ~275,000 active reseller/customer accounts globally, Regulatory tailwinds from eIDAS, PSD2, Japan's electronic signature law, BIMI/VMC, Shorter certificate lifetimes drive higher renewal frequency

Risk factors: Pricing pressure from free CAs (Let's Encrypt, Google Trust Services) at low end of SSL market, CA/Browser Forum compliance risk—single mis-issuance could trigger browser distrust (existential risk), Shorter certificate lifetimes reduce per-unit ASPs, Scale competition from DigiCert, Sectigo, Entrust globally, FX exposure between non-JPY revenue and JPY reporting, Strategic and capital structure concentration on parent group

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report