Virtio Due Diligence

Run due diligence on Virtio: monitor compliance and get alerts when suppliers, ownership or leadership change.

Denmark · owned by Independent (Denmark) · leern.io · 5 vendors

Leern, powered by Virtio, is a Danish streaming-inspired learning management platform that delivers video, audio, and e-learning (SCORM) content in a familiar streaming-service experience. It enables organisations to build internal academies for onboarding, compliance, product training, and communication, with features including analytics, quiz builders, certificate generation, and SSO integration. The platform is GDPR-compliant, hosted on European servers, and has been IT-security approved by enterprise clients such as Novo Nordisk.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-24 · revision 3

5 direct vendors, 100 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Virtio demonstrates a high level of migration readiness (75/100). Strengths include the company's existing adoption of EU/EEA Cloud Hosting, coupled with a tech stack featuring REST API/Webhooks and SSO (SAML/OAuth2), indicating a modern, modular, and integrated architecture well-suited for migration. Its strong commitment to GDPR compliance and current European server hosting simplifies potential migrations within the EU/EEA, as the necessary data governance and infrastructure are already in place. The geographic diversity of its service vendors (Denmark, US, Norway, Germany, UK) and the relatively low number of total services (5) suggest a manageable vendor landscape, potentially reducing complexity and lock-in during a migration effort. Weaknesses include the absence of explicit data residency requirements, although the current EU/EEA hosting strongly implies a European focus. Crucial financial data, including revenue concentration and growth history, is missing, which prevents an assessment of Virtio's financial capacity to fund a significant migration project. Additionally, specific vendor lock-in risk remains unknown, which could introduce unforeseen complexities depending on contract terms with the providers of the 5 services. While the tech stack is modern, the continued use of a SCORM Runtime Engine indicates some reliance on an older e-learning standard, which might require specific considerations during a platform migration.

Compliance

6 in-scope frameworks identified; showing 3.

Danish Marketing Practices Act — Assessment Required

As a company established and operating in Denmark, Virtio is subject to the Danish Marketing Practices Act ('Markedsføringsloven') for all its marketing and commercial activities.

Violations can lead to fines and injunctions. The rules on B2B marketing, especially via email, are strict, and non-compliance is a common pitfall for technology companies.

Evidence: https://www.hjulmandkaptain.dk/english/legal-services/marketing-law/, https://businessindenmark.virk.dk/guidance/consumer-and-competition/rules-on-marketing-practice/, https://aurionlearning.com/resources/what-is-the-european-accessibility-act-how-does-it-impact-digital-learning, https://www.iuno.law/en/iunoplus/corporate/legal-news/amendment-of-the-danish-marketing-practices-act-new-disclosure-requirements/

ISO 27001 (source) — Assessment Required

This is a voluntary assurance standard. For a B2B SaaS company handling client data, customers in the target market often contractually require ISO 27001 certification as a baseline for security.

While not legally mandatory, lacking this certification can be a significant commercial disadvantage, as enterprise customers often require it as proof of a mature information security management system (ISMS).

ISAE 3000 (source) — Assessment Required

This is a voluntary assurance standard. It is often used in Europe to provide assurance over non-financial statements, which can include reports on GDPR compliance or system security, similar to SOC 2.

The risk is primarily commercial. ISAE 3000 is less commonly requested than SOC 2 or ISO 27001 but may be required by specific European customers for assurance over non-financial information, such as GDPR compliance.

Financials

Three-year financials

Financial Resilience Score: 6/10

Virtio ApS demonstrates solid financial discipline for a small bootstrapped Danish agency. The company has produced positive net income every year since FY 2019/20, with equity more than tripling from DKK 218K (FY22/23) to DKK 725K (FY24/25) through earnings retention rather than dividend extraction. This bootstrapped funding model means no external capital pressure, and consistent profitability provides a modest but stable foundation. However, absolute scale is very small: gross profit of ~DKK 2.5M and equity under DKK 1M leave minimal buffer against client loss or a weak year. EBIT declined 13.7% in FY 2024/25 despite gross profit growth, indicating rising costs likely tied to investment in the Leern SaaS platform (version 2.0 in development). With only 3 average employees (5 registered), the business is highly dependent on its two founders. Revenue is undisclosed, limiting visibility into gross margin, customer concentration, and pricing power. The pivot to a SaaS learning platform is promising but unproven at scale in a highly competitive EdTech market.

Key strengths: Consistent profitability every year since FY 2019/20, Equity more than tripled from DKK 218K to DKK 725K in two years, Bootstrapped with no external funding pressure, Blue-chip Danish references (KL, HK trade union), Strategic diversification into SaaS via Leern platform, Earnings retained rather than distributed as dividends

Risk factors: Very small absolute scale (equity under DKK 1M), EBIT declined 13.7% in FY 2024/25 due to platform investment, Key-person risk with only 3-5 employees and two founders, Revenue not disclosed, limiting outside financial analysis, Geographic concentration in Denmark, Highly competitive EdTech/learning market, Single-client loss could materially impact operations

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report