Kaluza

United Kingdom · www.kaluza.com · 31 vendors

Kaluza is an energy software company that provides an intelligent platform to help energy companies manage operations and accelerate the transition to a zero-carbon world. Its platform offers end-to-end capabilities, including billing, payments, customer support, and real-time energy optimization. This enables energy suppliers to drive decarbonization with smart, low-carbon technologies and enhance customer engagement.

Resilience scores

Technology vendors

Services catalogue

3 services in catalogue across 2 categories; runs on 31 sub-vendors.

Insights

Last updated 2026-07-25 · revision 11

31 direct vendors, 323 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Kaluza demonstrates high migration readiness primarily due to its highly modern and agile technology stack. Being built on Amazon Web Services (AWS) with a microservices architecture, event-driven data streaming, and technologies like Apache Kafka and GraphQL, the company is already operating in a cloud-native paradigm. This architecture inherently supports portability, scalability, and ease of re-platforming or re-hosting components, significantly reducing the technical hurdles typically associated with migration. The ambiguous "Total Vendors: 0" could imply minimal vendor lock-in, which would be a strong advantage for migration flexibility. The primary challenges to migration readiness stem from the complex regulatory and data residency environments. Unaddressed compliance requirements for GDPR, NIS2, SOC2, and ISO 27001 mean that any migration efforts would need to meticulously ensure adherence to these standards, adding significant planning and execution overhead. Similarly, varying data residency requirements across their international operations (EU, UK, Australia, Japan, California) necessitate careful data governance and infrastructure design during any migration, potentially limiting options for data placement and increasing complexity. The lack of financial data prevents an assessment of their capacity to fund large-scale migration initiatives.

Compliance

11 in-scope frameworks identified; showing 3.

Japan Act on the Protection of Personal Information — Assessment Required

Kaluza has confirmed operations in Japan through its partnership with Mitsubishi Corporation. The Act on the Protection of Personal Information (APPI), enforced by the Personal Information Protection Commission (PPC), applies to businesses handling personal information of Japanese individuals. The APPI was significantly amended in 2022, introducing stricter requirements for cross-border data transfers, data breach notification (within 3-5 days to PPC), and individual rights. Risk is Medium because: Kaluza's Japan operations appear to be in early/partnership stage (Mitsubishi Corporation partnership announced); the scale of personal data processing in Japan may be limited initially; but the APPI's cross-border transfer restrictions are particularly relevant given Kaluza's UK-based data infrastructure.

Evidence: https://www.kaluza.com, https://www.ppc.go.jp/en/, https://www.meti.go.jp/english/press/2022/0401_001.html

ISO 27001 (source) — Assessment Required

ISO 27001 is the internationally recognised standard for information security management systems (ISMS). For a company of Kaluza's profile — a cloud-based energy intelligence platform processing sensitive energy consumption data, EV telematics, and customer personal data for major global energy providers — ISO 27001 certification is strongly expected by enterprise clients and is often a contractual requirement. The risk level is Medium because: ISO 27001 is not legally mandated but is a strong market expectation; its absence could affect Kaluza's ability to win and retain enterprise contracts; and it provides the foundational security framework that underpins NIS2 compliance. No public evidence of ISO 27001 certification has been found, though this is common for companies that hold certifications but do not prominently advertise them.

Evidence: https://www.kaluza.com/policies, https://www.kaluza.com/about, https://www.iso.org/standard/27001, https://www.ukas.com/find-an-organisation/

ISAE 3000 (source) — Assessment Required

ISAE 3000 (Revised) is an international standard for assurance engagements other than audits or reviews of historical financial information, issued by the IAASB. It is most commonly used for sustainability/ESG reporting assurance, non-financial reporting, and certain regulatory compliance attestations. Kaluza has a stated sustainability mission and publishes sustainability content, which could in future require ISAE 3000 assurance as ESG reporting requirements expand (e.g., under the EU Corporate Sustainability Reporting Directive (CSRD) or UK equivalent). The risk level is Low currently because Kaluza is not yet subject to mandatory CSRD reporting (as a UK-based company, though this may change if EU operations grow), and ISAE 3000 is not a primary regulatory requirement for energy software providers. However, as Kaluza grows and its EU client base expands, ISAE 3000 assurance on sustainability disclosures may become relevant.

Evidence: https://www.kaluza.com/sustainability, https://www.kaluza.com/policies, https://www.iaasb.org/publications/international-standard-assurance-engagements-isae-3000-revised-assurance-engagements-other-audits

Financials

Three-year financials

Financial Resilience Score: 6/10

Kaluza is a private, growth-stage UK energy SaaS company that has historically been loss-making and reliant on shareholder funding from OVO and, more recently, AGL Energy. In June 2024, AGL invested US$100m for approximately 20% of the company, implying a valuation of roughly US$500m and materially strengthening the equity base. This capital injection, combined with a strategic minority ownership structure (OVO founders + AGL), provides both financial runway and anchor customers. The company benefits from a recurring SaaS revenue model with multi-year enterprise contracts and high switching costs, plus a blue-chip customer roster including OVO, AGL, ENGIE, Mercury, Mitsubishi Corp, and multiple automotive OEMs (BMW, Volvo, VW, Stellantis, Honda). The September 2025 global ENGIE agreement is reported to double Kaluza's customer base, indicating strong revenue growth momentum. However, resilience is constrained by continued cash burn, high historic customer concentration on OVO Energy, related-party exposure to a UK energy retailer under margin/regulatory pressure, execution risk in large tier-1 utility migrations, FX exposure across GBP, AUD, JPY, USD and EUR, and intense competition from Octopus's Kraken platform, Oracle Opower and SAP. Recent CEO churn (Melissa Gander appointed May 2024; founder Stephen Fitzpatrick reportedly returning in 2026) signals a strategic reset. Overall the company has adequate but not strong resilience, dependent on continued strategic shareholder support until profitability is reached.

Key strengths: US$100m AGL equity investment in June 2024 at ~US$500m valuation, Strategic minority ownership by OVO founders and AGL Energy, Recurring SaaS revenue model with multi-year enterprise contracts, Blue-chip global customer base (OVO, AGL, ENGIE, Mitsubishi, BMW, Volvo, VW, Stellantis, Honda), ENGIE global agreement (Sep 2025) reportedly doubles customer base, Beige Technologies acquisition (May 2025) expanding Australia footprint, #1 in Frost Radar Innovation Index 2025; B Corp certified, High switching costs on platform migrations

Risk factors: Loss-making and cash-burning growth stage reliant on shareholder funding, Historic high customer concentration on OVO Energy, Related-party exposure to OVO Group in pressured UK retail energy market, Execution risk in complex tier-1 utility platform migrations, FX exposure across AUD, JPY, USD, EUR versus GBP cost base, Intense competition from Octopus Kraken, Oracle Opower and SAP, Leadership churn with multiple CEO changes 2024-2026, Limited public financial disclosure as a private company

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report