Intermax Cloudsourcing B.V.

Netherlands · www.intermax.nl · 19 vendors

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 1 category; runs on 19 sub-vendors.

Insights

Last updated 2026-05-24 · revision 1

19 direct vendors, 265 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 10/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Intermax Cloudsourcing B.V. exhibits exceptionally high migration readiness. This is primarily driven by its highly modern, cloud-native, and containerized internal tech stack, which prominently includes Kubernetes and Microsoft Azure. Their product offerings, such as 'Hybrid Cloud' and 'Public Cloud (Azure Managed)', demonstrate deep expertise in managing, integrating, and migrating workloads across diverse cloud environments. The company's strong adherence to regulatory compliance (ISO 27001, NEN 7510, ISAE 3402 Type II / SOC 2) and explicit focus on data residency requirements, particularly with their 'Nederlandse Private Cloud' designed for data sovereignty, ensures they possess the necessary frameworks and understanding to navigate complex compliance during migration projects. Their 'Managed Kubernetes' and 'Platformdiensten' offerings further underscore their proficiency in modern, portable infrastructure. A primary challenge is the absence of data concerning Intermax's own financial stability, which makes it difficult to assess their internal capacity to fund large-scale migration initiatives. While the 'Total Vendors: 0' data point is contradictory, their strategic use of Microsoft Azure, combined with their own private and hybrid cloud solutions, suggests a proactive approach to managing vendor relationships and mitigating lock-in risks, offering flexibility for both their clients and likely their internal operations.

Compliance

5 in-scope frameworks identified; showing 3.

ISAE 3000 (source) — Compliant

Low risk as the company maintains ISAE 3402 Type II certification, which is the specific standard for service organizations (more specific than ISAE 3000). This demonstrates compliance with assurance standards for outsourced services. Risk is low given active certification and annual audit processes.

Evidence: https://www.intermax.nl/over-intermax/intermax-certificeringen/

ISO 27001 (source) — Compliant

Low risk as the company maintains active ISO 27001 certification for information security management. This is critical for their business serving vital infrastructure and government clients. Risk is low due to existing certification and regular audit processes, though ongoing maintenance and continuous improvement are required.

Evidence: https://www.intermax.nl/over-intermax/intermax-certificeringen/

NIS2 (source) — Assessment Required

Very high risk due to the company's direct involvement with Essential and Important Entities under NIS2. They serve vital infrastructure (energy, water, transport), healthcare, and government sectors - all covered by NIS2. As a critical ICT service provider to these sectors, they likely fall under NIS2 scope themselves. Non-compliance could result in significant fines (up to €10M or 2% of annual turnover) and business restrictions. The company's client base in critical infrastructure makes this a priority compliance area.

Evidence: https://www.intermax.nl/sectoren/fysieke-vitale-infrastructuur/, https://www.intermax.nl/sectoren/zorg/, https://www.intermax.nl/sectoren/digitale-overheid/

Financials

Financial Resilience Score: 6/10

Intermax Cloudsourcing B.V. demonstrates qualitative financial resilience through its strategic positioning in regulated, mission-critical sectors including healthcare (with flagship Managed HiX services for Chipsoft EPD hospitals), digital government, public order & safety, and vital physical infrastructure. These sectors typically generate sticky, multi-year managed services contracts providing recurring and predictable revenue streams. The company has an approximately 28-year operating history (founded circa 1997), suggesting it has weathered multiple IT cycles, and benefits from strong ISO certifications that act as barriers to entry in regulated markets. The company's 'Dutch sovereign cloud' positioning aligns with growing demand under NIS2, DORA, and Dutch government cloud-sovereignty policies, and its participation in the Open Cloud Alliantie (which presented a manifest to Dutch Parliament in April 2026) further strengthens its strategic relevance. The recent strategic combination with Avisi broadens its offering toward software and Data & AI capabilities, potentially improving scale and cross-sell potential. However, resilience is constrained by scale disadvantages versus hyperscalers (AWS/Azure/Google), which pressures gross margins and limits price competition. The people-intensive managed services model is exposed to Dutch IT wage inflation, while datacenter capex and refresh cycles strain cash flow for a private mid-cap. Customer concentration risk in healthcare and government creates lumpy revenue dynamics, and M&A integration risk relates to the Avisi combination. As a private B.V. likely filing under small/medium regime, limited P&L disclosure reduces transparency. The score of 6 reflects solid strategic positioning offset by scale limitations and unverified financial metrics.

Key strengths: Sticky, regulated customer base with multi-year managed services contracts, Dutch sovereign cloud positioning aligned with NIS2/DORA tailwinds, Strong ISO certifications creating barriers to entry, ~28-year operating history (founded circa 1997), Strategic combination with Avisi broadening Data & AI offering, Member of Open Cloud Alliantie advocating Dutch cloud sovereignty

Risk factors: Scale disadvantage versus hyperscalers (AWS/Azure/Google), Customer concentration in healthcare and public sector creates lumpy revenue, Dutch IT labor market wage inflation pressuring margins, Capex and datacenter refresh cycles straining cash flow, M&A integration risk from Avisi combination, Limited public financial disclosure as small/medium private B.V.

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report