kleen hub ApS

Denmark · owned by Axe Capital Holding ApS (Denmark) · kleenhub.com · 27 vendors

Kleen hub ApS is a Danish company offering a reusable packaging system called TAP&REUSE™, designed to replace single-use coffee cups and food containers in cafes, restaurants, universities, and corporate settings. Customers tap a payment card to borrow reusable packaging without needing an app or deposit, and are only charged if the packaging is not returned. The company manufactures RFID-chipped, fully recyclable containers in Denmark and serves clients including ISS, Roskilde Festival, Wolt, DTU, and CBS.

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 27 sub-vendors.

Insights

Last updated 2026-09-13 · revision 11

27 direct vendors, 336 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Kleen hub ApS demonstrates medium migration readiness (Score: 45). The current internal tech stack, while functional, does not explicitly indicate cloud-native, containerized, or microservices architectures, which are typically hallmarks of high migration readiness. The reliance on Wix.com for its website suggests a degree of platform lock-in, and migrating off this platform could require significant effort. Integrations with RFID, QR code infrastructure, and secure payment processors (Apple Pay, Google Pay) might also present complexities during a migration due to their specialized nature and potential vendor-specific APIs or hardware dependencies. From a regulatory perspective, while GDPR compliant, the medium confidence assessment of NIS2 applicability could introduce additional compliance requirements and complexities for any migration involving critical systems or data. A positive factor is the absence of specified data residency requirements, which provides flexibility in choosing cloud regions during a migration. Financial stability, crucial for funding a migration, cannot be assessed due to the lack of data on revenue concentration or growth history. This unknown financial capacity poses a risk to the ability to undertake a significant migration project. Vendor relationships present both opportunities and challenges. While "Vendor Geographic Diversity: 5 unique countries" might offer some flexibility in choosing alternative providers, the "Vendor Lock-in Risk: Unknown" is a significant concern. Without understanding the extent of vendor lock-in for the 49 services utilized, the company faces potential hurdles in transitioning away from existing solutions. The contradictory "Total Vendors: 0" also makes a precise assessment of vendor concentration and its impact on migration difficult.

Compliance

11 in-scope frameworks identified; showing 3.

PCI DSS (source) — Assessment Required

Kleen Hub explicitly collects payment card information ('credit card number, expiration date') through its mobile application for charging users for unreturned reusable packaging. PCI DSS applies to any organisation that stores, processes, or transmits cardholder data. Risk is High because: (1) payment card data is among the most sensitive personal data; (2) PCI DSS non-compliance can result in card scheme fines (Visa/Mastercard), loss of ability to accept card payments, and significant reputational damage; (3) the Privacy Policy mentions 'secure payment processors' but does not confirm PCI DSS compliance of those processors or Kleen Hub's own compliance scope; (4) mobile app payment processing introduces specific security requirements (PCI DSS v4.0 mobile payment guidance).

Evidence: https://www.kleenhub.com/privacy, https://www.pcisecuritystandards.org/, https://kleenhub.com

SOC 2 (source) — Assessment Required

Kleen Hub operates a mobile application and digital platform that processes customer personal data (registration, payment, usage data) and relies on third-party cloud infrastructure (Wix.com, payment processors, app developers). While SOC 2 is not a legal requirement, it is increasingly expected by enterprise B2B customers and partners (e.g., partner cafes and restaurants) as evidence of data security controls. The risk is Medium because: (1) the company processes sensitive payment data and personal information; (2) B2B partners may contractually require SOC 2 reports; (3) absence of SOC 2 could limit enterprise sales opportunities; (4) the company relies on third-party processors whose own SOC 2 status is unconfirmed. Risk is not High because SOC 2 is voluntary and the company appears to be an SME with limited enterprise B2B exposure currently.

Evidence: https://kleenhub.com, https://www.kleenhub.com/privacy, https://www.aicpa-cima.com/resources/landing/system-and-organization-controls-soc-suite-of-services

CSRD (source) — Assessment Required

CSRD requires large companies and listed SMEs to report on sustainability matters. Kleen Hub ApS appears to be a small startup and would currently be below CSRD thresholds (large company: >250 employees, >€40M turnover, >€20M balance sheet). Risk is Low currently but may increase as the company grows. The company's circular economy/sustainability mission makes CSRD reporting strategically relevant even if not yet legally required.

Evidence: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2464, https://www.erhvervsstyrelsen.dk/csrd, https://kleenhub.com

Financials

Three-year financials

Financial Resilience Score: 4/10

kleen hub ApS is a small Danish private limited company (ApS) operating in the reusable packaging space, headquartered in Copenhagen. No verified financial statements were accessible in this research session, as Danish CVR/Virk.dk filings could not be retrieved. The assessment is therefore qualitative and based on the business model and market context rather than reported figures. The company benefits from strong regulatory tailwinds, including the EU Single-Use Plastics Directive, the EU Packaging and Packaging Waste Regulation (PPWR), and Danish producer-responsibility rules, all of which drive demand toward reuse systems. Its B2B recurring-revenue model (deposit + service fees) targeting cafés, canteens, and event operators can create sticky contracts, and its Copenhagen base places it in a market with supportive municipal sustainability procurement. However, as a small ApS in a capital-intensive reuse-system business, kleen hub likely faces meaningful financial constraints. Reusable cups, trays, RFID/tracking hardware, and washing logistics require significant up-front investment before break-even. Small ApS structures typically have limited equity buffers and often rely on funding rounds or shareholder loans. The Nordic reuse market is also competitive, with players like TOMRA reuse, CupClub, Kleen Loop, and Vytal competing for network-effect dominance. Regulatory timing uncertainty (PPWR reuse quotas slipped in final trilogue) and potential client concentration among a few large venue/event contracts add further risk.

Key strengths: Regulatory tailwinds from EU SUP Directive and PPWR, B2B recurring-revenue model with deposit + service fees, Copenhagen HQ in a market with strong sustainability procurement, Sticky contracts with cafés, canteens, and event operators

Risk factors: Capital-intensive business requiring up-front investment in cups, trays, RFID and washing logistics, Small ApS structure with limited equity buffer, Competitive Nordic reuse market with network-effect dynamics, Regulatory timing uncertainty on PPWR reuse quotas, Potential client concentration risk from large venue/event contracts, Financial statements not verifiable in this session

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report