Human Risks Due Diligence

Run due diligence on Human Risks: check compliance and get alerts when suppliers or ownership change.

Denmark · owned by MM 18 Holding ApS (Denmark) · humanrisks.com · 10 vendors

Human Risks is a Danish SaaS company that provides an all-in-one security risk management platform for enterprise organizations. The platform covers risk assessments, incident reporting, business continuity planning, mass communications, and compliance management in a single unified tool. It serves clients across industries including banking, pharmaceuticals, manufacturing, and retail, with customers such as IKEA, HSBC, and GSK.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-13 · revision 3

10 direct vendors, 157 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

4 in-scope frameworks identified; showing 3.

NIS2 (source) — No public evidence

Evidence: https://humanrisks.com

SOC 2 (source) — No public evidence

Evidence: https://humanrisks.com/wp-content/uploads/2024/04/Security-White-Paper_V1.9_2024.04.29_HumanRisks1.pdf

GDPR (source) — Evidence found

Evidence: https://humanrisks.com/information/privacy/, https://humanrisks.com/wp-content/uploads/2024/04/Security-White-Paper_V1.9_2024.04.29_HumanRisks1.pdf

Financials

Three-year financials

Financial Resilience Score: 5/10

Human Risks is a private Danish SaaS company in the enterprise security risk management (ESRM) space with no publicly verifiable financial data accessible in this research session. The company shows strong qualitative indicators of resilience, including a high-profile enterprise customer base (IKEA, GSK, HSBC, Maersk, Energinet, Crane, Yondr) that typically delivers multi-year SaaS contracts with strong gross margins. A stated 96% retention rate, if accurate, suggests low churn and stable recurring revenue—a positive signal for SaaS unit economics. Regulatory tailwinds from EU directives (NIS2, CER, DORA) drive demand among critical-infrastructure and regulated enterprises, which is Human Risks' core ICP. However, the company faces meaningful risks. It operates in a highly competitive GRC/ESRM market against far larger and better-capitalized incumbents like Resolver, Riskonnect, LogicGate, OneTrust, ServiceNow GRC, Archer, and Diligent. As a likely VC- or growth-funded ApS at scale-up stage, the company is probably still investing heavily in growth and may be loss-making, with funding dependence and runway being critical concerns. Customer concentration risk is notable given a handful of marquee logos likely dominate ARR, and international customers create FX exposure (GBP/SEK/EUR vs DKK). A midpoint score reflects the balance between strong qualitative signals and the absence of verifiable financial data.

Key strengths: High-profile enterprise customer base (IKEA, GSK, HSBC, Maersk, Energinet, Crane, Yondr), Stated 96% customer retention rate indicating low churn, Regulatory tailwinds from EU NIS2, CER Directive, and DORA, Vertical breadth across banking, pharma, manufacturing, professional services, data centres, Integrated SaaS platform with 8 modules aligned with ISO 31000

Risk factors: Highly competitive market with larger, better-capitalized competitors (Resolver, Riskonnect, OneTrust, ServiceNow GRC), Likely still scaling and potentially loss-making as a growth-stage SaaS, Funding dependence and runway risk as a VC/growth-funded ApS, Customer concentration risk—loss of one or two marquee logos could materially affect revenue, FX exposure to GBP/SEK/EUR against DKK reporting currency, Small private company with limited public financial transparency

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report