Gubra

Spain · owned by Independent (Spain) · gubra.com · 14 vendors

Gubra is a family-owned motorcycle dealership founded in 1992 by Manuel Ortiz Bravo de Laguna, operating as the official dealer for Harley-Davidson, Triumph, KTM, MV Agusta, and Super73 in the Canary Islands, Spain. The company operates multiple showrooms and workshops across Tenerife and Las Palmas de Gran Canaria. In addition to new and used motorcycle sales, Gubra offers financing, insurance, official servicing, customization, and motorsport support services.

Resilience scores

Technology vendors

Insights

Last updated 2026-03-10 · revision 7

14 direct vendors, 222 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 3/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Gubra demonstrates low migration readiness, primarily due to significant vendor lock-in and a traditional tech stack. The company's core operations are deeply integrated with proprietary, brand-specific dealer platforms such as Room 58 (Harley-Davidson), 1000PS (Triumph), Harley-Davidson Digital Retail Tools, and Triumph AMP Online Service Booking. Migrating away from these specialized systems would be extremely complex, costly, and highly disruptive, as they manage critical functions like inventory, sales, service booking, and financing. This high degree of vendor lock-in is the most substantial barrier to migration. The current tech stack, which includes WordPress and these specialized dealer platforms, does not appear to be cloud-native, containerized, or microservices-based, indicating a more traditional and less agile architecture that would be challenging to migrate to modern cloud environments. Furthermore, the existing high risk of GDPR non-compliance and the need to adhere to EU data residency requirements add significant regulatory and compliance complexity to any potential migration project. While Gubra's consistent revenue growth suggests a positive financial capacity to fund a migration, this is heavily outweighed by the technical and vendor-related challenges. The diversity of vendor HQ countries, while a positive for supply chain, does not mitigate the lock-in associated with the critical, brand-mandated platforms.

Compliance

2 in-scope frameworks identified; showing 2.

GDPR (source) — Assessment Required

GDPR applies with HIGH risk level because: (1) Gubra is located in Spain (EU member state), making GDPR automatically applicable; (2) As a motorcycle dealership with 26 employees, they process significant personal data including customer information for sales, financing, insurance, and workshop services; (3) Their legal notice references outdated LOPD (Spanish data protection law from 1999) rather than GDPR, suggesting potential non-compliance; (4) GDPR fines can reach €20M or 4% of annual turnover; (5) Spanish data protection authority (AEPD) actively enforces GDPR with significant penalties.

Evidence: http://gubra.com/wp-content/uploads/2015/07/aviso_legal_gubra.pdf

ISO 27001 (source) — Assessment Required

ISO 27001 has MEDIUM risk level because: (1) While not legally mandatory, it represents best practice for information security management; (2) As a business processing customer financial data (financing, insurance), payment information, and personal data, they have moderate information security risks; (3) With 26 employees and multiple locations, they have sufficient complexity to benefit from structured information security management; (4) Non-compliance doesn't result in regulatory fines but could lead to data breaches, reputational damage, and loss of customer trust; (5) Implementation costs are moderate for a company of this size.

Financials

Three-year financials

Financial Resilience Score: 8/10

Gubra exhibits strong financial resilience based on the available data, particularly for a company operating in the R&D-intensive biotech sector. Consistent Revenue Growth: The sustained double-digit revenue growth (over 20% annually) indicates a healthy and expanding core business (CRO services), which provides a stable foundation. Profitability: Consistent positive and growing EBIT/Operating Income demonstrates that the company is not only growing its top line but also managing its operational costs effectively to generate profits. This is crucial for self-funding R&D initiatives in its proprietary programs. Strong Equity Base: The continuous increase in equity signifies a strengthening balance sheet and provides a buffer against potential future losses or significant R&D expenditures. A higher equity base reduces reliance on external debt, enhancing financial stability. Business Model Diversification: While not explicitly detailed in the numbers above, Gubra's dual business model (CRO services providing stable revenue, and proprietary programs offering long-term growth potential) inherently contributes to resilience. The CRO segment acts as a revenue generator, funding the higher-risk, higher-reward drug development activities. Cash Flow (Inferred): While specific cash flow data is not provided here, consistent operating income growth typically correlates with healthy operating cash flows, which are vital for funding ongoing operations and investments without excessive reliance on debt or equity dilution.

Key strengths: Consistent Revenue Growth, Profitability, Strong Equity Base, Business Model Diversification, Cash Flow (Inferred)

Risk factors: Capital-intensive nature of drug development

Revenue by geography

Revenue by product/service

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report