GoBasic

Denmark · gobasic.dk · 8 vendors

GoPublic A/S is a Danish company that develops and provides web solutions and digital communication tools, including a SaaS CMS platform named GoBasic. The company focuses on serving public sector organizations with features such as content management, analytics, search, email, and intranet solutions. Their offerings aim to enhance effective public communication and web accessibility.

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 8 sub-vendors.

Insights

Last updated 2026-05-02 · revision 2

8 direct vendors, 117 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

GoBasic exhibits a good foundation for migration readiness, scoring 65, primarily due to its modern architectural principles, but faces challenges related to its current infrastructure deployment and strict regulatory environment. Strengths include a modern architecture with Headless CMS, Composable Architecture, RESTful API, and Microsoft .NET 8, which are highly aligned with cloud-native principles and facilitate easier refactoring for cloud environments. The SaaS multi-tenant platform and Virtualized High-Availability Server Environment also provide a good base for cloud adoption. Challenges and opportunities for improvement include the current infrastructure's reliance on 'Hetzner (dedicated physical server hosting)', which implies a more involved migration than from an existing cloud environment, potentially requiring an initial 'lift-and-shift' to cloud IaaS. The strict regulatory environment, particularly GDPR compliance and focus on the Danish public sector, necessitates meticulous planning for data residency (likely EU/Denmark) and continued compliance during migration. The 'Data Residency Requirements: Not specified' is a critical information gap. Custom development through 'GoPublic Extensions' could introduce bespoke integrations that require specific refactoring. Lastly, the absence of financial data makes it difficult to assess the company's capacity to fund a significant migration project, and the 'Vendor Lock-in Risk: Unknown' suggests potential infrastructure lock-in with the current hosting provider.

Compliance

5 in-scope frameworks identified; showing 3.

ISAE 3000 (source) — Compliant

Company undergoes annual ISAE 3000 audits by independent auditors specifically for GDPR compliance and information security. Multiple years of audit reports available (2020-2025). Low risk due to established audit program and consistent compliance demonstration.

Evidence: https://www.gopublic.dk/isae-3000-erklaering

ISO 27001 (source) — Partially Compliant

Company does not have direct ISO 27001 certification but their hosting partner Hetzner has ISO 27001 certification. Company implements security controls and undergoes ISAE 3000 audits, but lacks direct certification. Medium risk due to indirect compliance through hosting partner but no direct organizational certification.

Evidence: https://www.gopublic.dk/platformen/it-sikkerhed-og-gdpr

GDPR (source) — Compliant

Company is headquartered in Denmark (EU member state) and processes personal data of EU residents through their CMS platform serving Danish public sector organizations. They have established data processing agreements based on official Danish Data Protection Agency templates, ensure no data leaves EU, and undergo annual ISAE 3000 audits specifically for GDPR compliance. Low risk due to proactive compliance measures and regular auditing.

Evidence: https://www.gopublic.dk/platformen/it-sikkerhed-og-gdpr, https://www.gopublic.dk/isae-3000-erklaering

Financials

Three-year financials

Financial Resilience Score: 6/10

GoBasic/GoPublic (Berú ApS) operates a recurring SaaS subscription model targeting the Danish public sector, which is inherently a low-churn, high-stability customer segment. With 350+ organisations on the platform — including prominent state agencies such as Digitaliseringsstyrelsen and Finanstilsynet — the company demonstrates meaningful market penetration and contract credibility. The public sector customer base provides predictable revenue streams and low default risk, which are hallmarks of financial resilience in SaaS businesses. The company also holds an ISAE 3000 certification, indicating operational and security maturity that supports continued public sector procurement eligibility. The company's 11-year operating history and successful pivot from a digital agency model to a product-led SaaS platform suggest strategic adaptability and a degree of financial sustainability. The ongoing investment in AI features and product differentiation (governance tools, intranet modules, GEO capabilities) indicates that R&D spending continues, which is consistent with a company generating sufficient cash flow to fund development. The rebrand from GoBasic to GoPublic further signals confidence in the platform's maturity and commercial positioning. However, significant limitations constrain the resilience score. No verified financial data — revenue, EBIT, equity, or balance sheet totals — is publicly available or was retrievable during this research session. The company is a small private Danish ApS filing abbreviated (klasse B) accounts, meaning even its filed documents may omit revenue disclosure. This opacity makes it impossible to assess leverage, profitability trends, cash burn, or margin structure with any confidence. Additional structural risks include near-total geographic concentration in Denmark, a finite public sector addressable market, potential customer concentration among a small number of large contracts, and founder/key-person dependency typical of small ApS entities. Competitive pressure from larger international CMS vendors and rebrand execution risk add further uncertainty. The resilience score of 6 reflects a qualitatively sound business model offset by complete financial data unavailability and the inherent vulnerabilities of a small, geographically concentrated private company.

Key strengths: Recurring SaaS subscription revenue model providing predictable ARR/MRR, 350+ public sector clients including major Danish state agencies and municipalities, Low-churn public sector customer base with multi-year contract norms, 11-year operating history with successful agency-to-SaaS business model transition, ISAE 3000 certification supporting continued public sector procurement eligibility, Deep niche positioning with Danish regulatory compliance (WCAG 2.1, GDPR, Digitaliseringsstyrelsen standards) creating switching costs, Ongoing AI and product investment indicating sufficient cash flow for R&D

Risk factors: No verified financial data available — revenue, EBIT, equity all unknown, Small private ApS with limited financial transparency (klasse B abbreviated accounts), Near-total geographic concentration in Denmark with no international revenue, Finite Danish public sector addressable market limiting long-term growth optionality, Potential customer revenue concentration among a small number of large contracts, Competitive pressure from larger international CMS vendors (Umbraco, Sitecore, Optimizely), Dependency on Danish municipal and state IT budget cycles subject to political constraints, Rebrand execution risk (Berú/GoBasic to GoPublic) carrying short-term customer confusion and marketing costs, Likely founder/key-person dependency with no public information on ownership or succession planning

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report