InMobile

Denmark · owned by Guldager Holding ApS (Denmark) · www.inmobile.com · 21 vendors

INMOBILE ApS provides a user-friendly communication platform that enables businesses to send messages via SMS, RCS, and email. The platform supports marketing campaigns, service notifications, and automated system messages, offering integration through its API.

Resilience scores

Technology vendors

Services catalogue

8 services in catalogue across 3 categories; runs on 21 sub-vendors.

Insights

Last updated 2026-09-13 · revision 7

21 direct vendors, 312 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

InMobile's migration readiness is assessed at 45, indicating a moderate-to-low level of readiness, primarily due to significant constraints and unknowns. A major challenge is the company's explicit and strict data residency requirement: 'host exclusively in EU data centers with European ownership to ensure data does not leave the EU.' This severely limits options for cloud providers and global deployment strategies, making migration to non-EU regions or certain global cloud platforms highly complex and potentially impossible without significant re-architecture and legal considerations. The internal tech stack, featuring PHP, C# (.NET) SDKs, and SMPP Protocol, suggests a more traditional application architecture rather than an explicitly cloud-native, containerized, or microservices-based environment. This implies that a migration would likely involve a more complex re-platforming or re-architecting effort rather than a straightforward lift-and-shift, increasing time, cost, and risk. While InMobile has strong GDPR compliance and ISAE 3000 certification, the 'Assessment Required' status for NIS2, SOC2, and ISO 27001 means that a migration project might need to simultaneously address these compliance gaps, adding scope and complexity to the undertaking. The 'Vendor Lock-in Risk' is unknown, and while 'Total Vendors: 0' is ambiguous, the presence of 30 services implies a potentially complex system with various dependencies. Without clarity on the number of vendors and the nature of their contracts, assessing the ease of decoupling from existing services is difficult. The geographic diversity of vendor HQs (4 countries) is a positive for potential vendor choice, but doesn't negate existing lock-in. On the positive side, InMobile's long operational history and implied financial stability suggest the company likely has the resources to fund a migration. The API-first approach for its products (SMS API, Transactional Email API) is also a positive, as it facilitates integration with new systems and services post-migration. However, these strengths are significantly outweighed by the strict data residency, the likely traditional architecture, and the pending compliance requirements, making a smooth and rapid migration challenging.

Compliance

7 in-scope frameworks identified; showing 3.

Danish Telecommunications Regulation — Assessment Required

InMobile operates an SMS gateway with direct connections to Danish mobile network operators (3, Telenor, Nuuday/TDC, Norlys). This positions InMobile as an electronic communications service provider or intermediary subject to Danish telecommunications regulation and the EU European Electronic Communications Code (EECC, Directive 2018/1972). The Danish Business Authority (Erhvervsstyrelsen) and the Danish Energy Agency (Energistyrelsen) oversee telecommunications regulation in Denmark. Risk is Medium because the regulatory requirements for SMS aggregators/gateway providers are evolving, particularly around sender ID registration, grey route prevention, and A2P (Application-to-Person) SMS regulations.

Evidence: https://www.inmobile.com, https://www.inmobile.com/sms-gateway, https://www.inmobile.com/en/data-security-compliance

NIS2 (source) — Assessment Required

InMobile operates as a digital communications platform (SMS gateway, RCS, transactional email) providing services to businesses across Denmark, Norway, and Sweden. NIS2 (EU Directive 2022/2555, transposed into Danish law) may classify InMobile as an 'Important Entity' under the category of 'digital providers' — specifically as a managed service provider or digital infrastructure provider. The company processes over 300 million SMS messages annually and provides critical communication infrastructure to a wide range of businesses including logistics (DHL), financial services (Dinero), and public-sector-adjacent organisations. However, the exact employee headcount is not publicly disclosed (the team page shows approximately 12-15 named employees, suggesting the company may be below the 50-employee threshold for NIS2 applicability). Risk is Medium because if the company meets the size threshold or is classified as a digital provider under NIS2, non-compliance could result in significant fines and operational requirements, but the size threshold uncertainty prevents a definitive determination.

Evidence: https://www.inmobile.com/om-os, https://www.inmobile.com/en/about, https://www.inmobile.com/en/data-security-compliance

ISO 27001 (source) — Assessment Required

InMobile is a cloud communications platform processing over 300 million SMS messages annually and acting as a data processor for a large number of businesses. ISO 27001 certification is increasingly expected by enterprise customers and public sector clients as a baseline information security assurance. The absence of publicly disclosed ISO 27001 certification represents a moderate risk, particularly as InMobile serves enterprise clients (DHL, Aarsleff, Dinero) who may require it in their supplier due diligence. However, the ISAE 3000 from Deloitte partially mitigates this risk by providing independent assurance on information security controls in the context of GDPR compliance.

Evidence: https://www.inmobile.com/en/data-security-compliance, https://www.inmobile.com/datasikkerhed-compliance

Financials

Three-year financials

Financial Resilience Score: 7/10

inMobile ApS demonstrates qualitative hallmarks of a resilient, mature business: 17+ years of continuous operation since its 2008 founding, sustained founder leadership, and a recurring/usage-based CPaaS revenue model that typically produces sticky, high-visibility revenue. The company's direct carrier interconnects with all major Danish operators (3, Telenor, Nuuday, Norlys), deep API integrations with customer CRM/e-commerce systems (Shopify, Magento, Klaviyo, HubSpot, ActiveCampaign), and strong compliance posture (ISAE 3000 by Deloitte, GDPR, EU-only hosting) create meaningful switching costs and moats in the Danish market. The longevity as a bootstrapped, owner-managed Danish ApS strongly suggests sustained profitability. However, resilience is constrained by scale and concentration risks. As a small private ApS, inMobile has limited external capital and self-financed growth, capping expansion speed relative to venture-backed peers like Twilio, Sinch, LINK Mobility, and Message. Revenue is concentrated in Denmark/Nordics, and the wholesale SMS market faces ongoing margin pressure from European A2P termination rate changes and anti-fraud rules. Competitive pressure from larger, better-capitalized rivals and the technology transition from SMS to RCS and OTT channels (WhatsApp Business, which inMobile does not offer) add strategic risk. Key-person dependence on founder/CEO Søren Guldager is also notable. Concrete financial figures (revenue, EBIT, equity) were not retrievable and would be needed for a definitive quantitative resilience assessment.

Key strengths: 17+ year operating history since 2008 with continuous founder leadership, Recurring/usage-based CPaaS revenue model with high customer stickiness, Direct carrier interconnects with all major Danish operators (3, Telenor, Nuuday, Norlys), Deep API integrations with CRM and e-commerce platforms create switching costs, Strong compliance credentials (ISAE 3000 by Deloitte, GDPR, EU-only hosting), 99.998% uptime over last 12 months, Handles 300+ million SMS annually, Product expansion into RCS and transactional email broadens ARPU

Risk factors: Small private ApS with limited external capital and self-financed growth, Revenue concentration in Denmark/Nordics region, Wholesale SMS margin pressure from European A2P termination rate changes, Competitive pressure from larger players (Twilio, Sinch, LINK Mobility, Message, GatewayAPI, Vonage), Technology transition risk from SMS to RCS and OTT channels like WhatsApp Business (not offered), Key-person risk concentrated in founder/CEO Søren Guldager, Limited financial disclosure typical of Danish ApS accounting class B

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report