Grant ApS Due Diligence

Run due diligence on Grant ApS: check compliance and get alerts when suppliers or ownership change.

Denmark · owned by Independent (Denmark) · grantone.dk · 11 vendors

Grant ApS is a Danish software company that develops and operates GrantOne, a cloud-based digital administration platform for grant-making foundations, public funding pools, and associations. The platform covers the full workflow from application intake and case processing to board meetings, reporting, and financial integrations. The company also offers AI-assisted case handling and integrations with banking, accounting, and public reporting systems.

Resilience scores

Technology vendors

Insights

Last updated 2026-10-15 · revision 9

11 direct vendors, 198 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Grant ApS demonstrates high migration readiness. The core GrantOne platform is built on a modern, cloud-based SaaS architecture with a modular and configurable workflow engine, which inherently facilitates easier migration. The company benefits from low vendor lock-in due to a diverse vendor base (11 vendors across 5 countries), providing flexibility in choosing new service providers. Consistent financial growth suggests the necessary resources are available to fund potential migration efforts. Furthermore, the upcoming EU Data Act, which mandates data portability and interoperability, aligns with and will likely drive further migration readiness. However, certain challenges exist. Existing gaps in public GDPR compliance documentation and the absence of a named Data Protection Officer could complicate migration planning and execution, as any new environment would need to demonstrate robust GDPR adherence. Data residency requirements dictate that personal data must remain within the EEA unless valid transfer mechanisms are in place, limiting options for migration to non-EEA cloud providers. The suite of integrations with specific Danish banks and public sector entities (SKAT, Danmarks Statistik) would require careful planning and potential re-implementation during a migration to ensure continuity of service.

Compliance

7 in-scope frameworks identified; showing 3.

NIS2 (source) — No public evidence

Applicability depends on whether Grant ApS is classified as a medium-sized entity operating in a sector covered by Annex I or II of the directive. Public information indicates 11 employees, which is below the 50-employee threshold for a medium-sized enterprise.

GDPR (source) — No public evidence

The company is established in Denmark, an EU member state, and its website indicates it processes data from customers, which would include personal data.

ISAE 3000 (source) — No public evidence

ISAE 3000 is an international standard for assurance engagements other than audits or reviews of historical financial information. It could be used for a report on controls at a service organization, similar to SOC 2.

Financials

Three-year financials

Financial Resilience Score: 8/10

Grant ApS demonstrates strong financial resilience for a small Danish SaaS vendor. The company shows very high solvency with equity funding approximately 81% of the balance sheet in FY2025, and a current ratio above 500%, leaving essentially no leverage risk. Four consecutive years of positive EBIT and net profit, combined with gross profit nearly quadrupling from DKK 2.86M in FY2022 to DKK 10.3M in FY2025 (CAGR ~53%), reflect a healthy and growing business. The company is bootstrapped with no external debt or VC overhang, and its recurring SaaS revenue from 75+ Danish foundations provides predictable renewals. However, the small absolute scale (balance sheet only ~DKK 7M) means customer concentration risk is material - losing one major customer could materially affect results. FY2025 showed the first signs of margin compression, with gross profit growing only ~5% while EBIT fell ~18% as the company invested in headcount. Equity remained essentially flat despite DKK 2.46M in net profit, implying significant dividend distribution that limits the capital buffer. Geographic concentration in Denmark only, key-person dependency on 3 founding partners, and sole-source hosting via Deutsche Telekom are additional risks, but overall the fundamentals remain robust.

Key strengths: Very high solvency ratio of ~81% in FY2025, Current ratio above 500% indicating strong liquidity, Four consecutive years of positive EBIT and net profit, Gross profit grew ~3.6x in three years (CAGR ~53%), Bootstrapped with no external debt or VC funding, Recurring SaaS revenue from 75+ Danish foundations, Gazelle 2025 high-growth award from Børsen, Fresh auditor appointment (Baker Tilly Denmark, Aug 2025)

Risk factors: Small absolute scale (balance sheet only ~DKK 7M), FY2025 margin compression: EBIT fell 18% while gross profit grew only 5%, Equity flat despite profit, implying ~DKK 2.5M dividend distribution, Geographic concentration: 100% Denmark, Key-person dependency on 3 founding partners, Single-vendor cloud hosting dependency on Deutsche Telekom, Single product line (GrantOne) with no diversification, Customer concentration risk given small customer base

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report