Kilkaya

Denmark · kilkaya.com · 7 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 7 sub-vendors.

Insights

Last updated 2026-05-10 · revision 2

7 direct vendors, 154 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Kilkaya's migration readiness is assessed as moderate (55/100). A significant strength lies in its 'Key Technologies,' which include real-time analytics, AI/ML-driven personalization, recommendation algorithms, and the use of Content Management APIs. These indicate a modern, likely modular and API-driven architecture, which is generally well-suited for cloud migration and adoption of containerization or microservices. However, several critical factors remain unknown, posing potential challenges. There is no available data on specific regulatory environments or data residency requirements, which are crucial considerations for any migration strategy and can significantly impact complexity and cost. Similarly, the absence of financial stability data makes it difficult to assess Kilkaya's capacity to fund a substantial migration effort. The vendor landscape also presents a mixed picture; while there is geographic diversity in vendor HQs (United States, Germany), the actual number of unique vendors for the 13 services is unclear, and the 'Total Vendors: 0' data point is contradictory. A dependency on 'Base44' for media/image hosting is noted, which represents a specific vendor relationship that would need careful management during a migration to avoid lock-in or ensure compatibility. The unknown vendor lock-in risk for other services could also complicate migration efforts.

Compliance

4 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Assessment Required

As a technology company handling sensitive reader data and serving enterprise clients, ISO 27001 certification would demonstrate robust information security management. Medium risk due to potential client requirements and competitive positioning, though not legally mandated.

Evidence: https://kilkaya.com

NIS2 (source) — Assessment Required

NIS2 applicability depends on whether Kilkaya qualifies as a 'digital service provider' under Important Entities category and meets size thresholds (50+ employees or €10M+ turnover). As a tech company providing digital services to critical media infrastructure, they may fall under NIS2 scope. Medium risk due to potential operational requirements and incident reporting obligations, though penalties are less severe than GDPR.

Evidence: https://kilkaya.com

SOC 2 (source) — Assessment Required

As a SaaS provider handling customer data through analytics and personalization services, SOC2 compliance would be expected by enterprise clients (major news publishers). Medium risk due to potential client requirements and competitive disadvantage if not compliant, though not legally mandated.

Evidence: https://kilkaya.com

Financials

Financial Resilience Score: 5/10

Kilkaya appears to be a credible vertical-SaaS vendor with a defensible niche in analytics and homepage personalization for news publishers. The company has secured tier-1 enterprise reference customers such as Axel Springer and Tagesspiegel, which typically imply multi-year recurring revenue contracts and lend credibility for further enterprise sales. Its product breadth (analytics, A/B testing, personalization, video, newsletters, campaign management) suggests potential for ARR expansion through cross-sell within existing accounts. However, financial resilience cannot be verified because no årsrapport data (revenue, EBIT, equity) was retrievable in this research session. As a small Danish ApS, Kilkaya likely files abbreviated accounts, limiting transparency. End-market pressure on news publishers (declining ad revenue, search traffic decline, budget tightening) compresses pricing power, and the company faces competition from Chartbeat, Parse.ly (Automattic), Piano, and in-house stacks built on Google/Adobe. Customer concentration risk is likely material given the small enterprise customer base typical for niche vertical SaaS. Without verified balance-sheet and runway data, a mid-range score reflects the qualitative strengths offset by unverified financials and structural end-market headwinds.

Key strengths: Vertical SaaS focus on news publishers with high switching costs, Tier-1 reference customers (Axel Springer, Tagesspiegel) implying multi-year enterprise contracts, Product breadth enabling cross-sell and ARR expansion per account, Denmark HQ with access to Nordic engineering talent and low FX risk (EUR-pegged)

Risk factors: Customer concentration — small number of large publishers likely drives majority of revenue, End-market pressure on news publishers (declining ad revenue, search traffic decline, budget tightening), Competition from Chartbeat, Parse.ly (Automattic), Piano, and in-house Google/Adobe stacks, Small-scale balance sheet with runway dependent on unverified equity funding, Disclosure opacity as a likely small ApS filing abbreviated accounts

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report