JALI IT Due Diligence
Run due diligence on JALI IT: monitor compliance and get alerts when suppliers, ownership or leadership change.
Denmark · owned by Independent (Denmark) · Jali.dk · 5 vendors
JALI IT is an independent Danish IT consultancy specializing in digital transformation for manufacturing businesses. Founded and operated by Jan Larsen, the company provides expert guidance on AVEVA System Platform, MES, production databases, Industrial IoT, and PTC ThingWorx. With over 30 years of experience, JALI IT helps organisations bridge IT and OT to connect business systems with production operations.
Resilience scores
- Digital Sovereignty: 20
- Digital Resilience: 5
- Financial Resilience: 5
Technology vendors
- Automattic Inc. — Technology — United States
- Dandomain A/S — Technology — Denmark
- Hiper — Telecommunications — Denmark
- and 2 more
Insights
Last updated 2026-09-23 · revision 3
5 direct vendors, 79 subvendors
Direct vendors by controlling owner country (sample)
- United States: 3
- Belgium: 1
- United Kingdom: 1
Subvendors by controlling owner country (sample)
- United Kingdom: 3
- France: 2
- New Zealand: 1
Migration Readiness: 4/10
Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.
JALI IT demonstrates low-to-medium migration readiness. A primary challenge stems from its core business offerings, which are built around specialized industrial platforms such as AVEVA System Platform, PTC ThingWorx, MES, and SCADA. These technologies are often deeply integrated with Operational Technology (OT) environments and are not inherently cloud-native, containerized, or microservices-based, making a migration to modern cloud architectures complex, costly, and time-consuming. The applicability of the NIS2 Directive and the high probability of EU data residency requirements further complicate migration efforts, as strict compliance and data location constraints must be maintained throughout the process. The lack of specific information regarding JALI IT's growth history and revenue concentration makes it impossible to assess its financial capacity to fund a significant migration initiative. The provided vendor data is contradictory, stating 'Total Vendors: 0' while simultaneously listing 'Vendor HQ Countries', 'Vendor Owner Countries', and 'Total Services: 6'. Assuming the latter details are accurate and 'Total Vendors: 0' is a data anomaly, the geographic diversity of vendor HQs (United States, Denmark) and owner countries (United States, Belgium, United Kingdom) could offer some flexibility if vendor switching were required. However, the 'Vendor Lock-in Risk' is explicitly stated as 'Unknown'. More significantly, the reliance on proprietary industrial platforms inherently introduces a high degree of technological vendor lock-in, making migration away from these specific platforms a complex and potentially costly endeavor, regardless of the number of service providers. While the internal tech stack (WordPress) is relatively easy to migrate, it does not represent the core migration challenge.
Compliance
6 in-scope frameworks identified; showing 3.
SOC 2 (source) — Assessment Required
SOC 2 is an assurance framework particularly relevant for technology and cloud service providers to demonstrate the security of their systems and the data they process. It is often requested by customers.
Similar to ISO 27001, lacking a SOC 2 report can be a commercial disadvantage, especially with US-based clients. The risk is lower as it is less commonly mandated by European clients compared to ISO 27001.
ISO 27001 (source) — Assessment Required
This is an international standard for information security management. For an IT service provider, customers often require ISO 27001 certification as an assurance of security practices.
While voluntary, certification is a common client requirement in the IT services sector. Lacking it may result in a competitive disadvantage and loss of business opportunities, but does not carry direct regulatory fines.
NIS2 (source) — Assessment Required
JALI IT provides ICT services, including cloud and infrastructure management, which may fall under the 'ICT service management (B2B)' or 'digital providers' categories. Applicability depends on whether it meets the size threshold (50+ staff or EUR 10M+ turnover).
Non-compliance can result in substantial fines and direct liability for management. As an IT service provider, a security incident could have a significant impact on their clients, increasing the likelihood of regulatory scrutiny.
Financials
Three-year financials
- 2025:
- 2024:
- 2023:
Financial Resilience Score: 5/10
JALI IT is a Danish sole proprietorship (enkeltmandsvirksomhed) owned by Jan Bo Larsen, established in 2006 and continuously operating for approximately 20 years. As a sole proprietorship, it is not subject to the Danish Financial Statements Act (Årsregnskabsloven) and does not file public annual reports, meaning no revenue, EBIT, or equity data is publicly available. This structural opacity means financial resilience must be assessed qualitatively rather than quantitatively. Qualitative strengths include a 20-year operating history, blue-chip client base (Novonesis, Carlsberg, Chr. Hansen, Bode A/S, Spaniel Diaplay A/S, AB&CO), specialized and scarce expertise in AVEVA System Platform, MES, industrial databases, and PTC ThingWorx, and a low-fixed-cost single-operator model that provides margin flexibility. However, the business faces absolute key-person risk (it is effectively Jan Larsen personally), unlimited personal liability inherent to the sole-proprietorship form, plausible but unverifiable client-concentration risk, and dependence on AVEVA and PTC technology roadmaps. A mid-range score reflects the balance between demonstrated longevity and strong references on the positive side, and the complete absence of financial transparency plus structural key-person and liability risks on the negative side. Counterparties requiring financial verification would need to request figures directly from the owner.
Key strengths: 20-year continuous operating history since 1 January 2006, Blue-chip customer base including Novonesis, Carlsberg, Chr. Hansen, Bode A/S, Spaniel Diaplay A/S, AB&CO, Deep, scarce specialization in AVEVA System Platform, MES, industrial databases, and PTC ThingWorx, 30+ years of manufacturing-IT experience by the owner, Low fixed-cost single-operator model provides margin flexibility
Risk factors: Absolute key-person risk - business is effectively Jan Larsen personally, Unlimited personal liability under sole-proprietorship legal form, Zero public financial transparency - no annual reports filed, Plausible but unverifiable client concentration risk (typically 1-3 active clients), Technology vendor dependence on AVEVA and PTC roadmaps, No visible succession structure
Revenue by geography
- Denmark: 100%
Workforce by country
- Denmark: 1
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.