LIFA Digital
Denmark · owned by Geomatikk Group (Norway) · lifadigital.dk · 25 vendors
LIFA Digital is a Danish technology company headquartered in Odense, Denmark, that provides data-driven solutions, software, and consulting services to municipalities, regions, utility companies, and land surveyors. With approximately 45 employees, the company offers a range of products including population forecasting tools, GIS/CAD software, data distribution platforms, and utility network management systems. It has served the Danish public sector since 1988, helping clients leverage geospatial and register data for informed planning and operations.
Resilience scores
- Digital Sovereignty: 0
- Digital Resilience: 4
- Financial Resilience: 7
Disruption prediction
LIFA Digital has an estimated 17% probability of disruption in the next 6 months.
15 of LIFA Digital's 25 vendors monitored for disruptions.
Technology vendors
- Adobe Inc. — Technology — United States
- Cookiebot (Cybot A/S) — Technology — Denmark
- Usercentrics GmbH — Technology — Germany
- and 23 more
Insights
Last updated 2026-09-13 · revision 15
25 direct vendors, 328 subvendors
Direct vendors by controlling owner country (sample)
- Denmark: 2
- Australia: 2
- Sweden: 2
Subvendors by controlling owner country (sample)
- Portugal: 2
- Moldova: 1
- Poland: 2
Migration Readiness: 4/10
Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.
LIFA Digital demonstrates medium-low migration readiness. A primary challenge is the significant vendor lock-in associated with core product lines; LIFA Digital is an exclusive Danish reseller for Keypro (LIFA KeyAqua) and an authorized Bentley Gold Channel Partner for CAD solutions. Migrating away from these deeply integrated platforms would be complex, costly, and time-consuming. The regulatory environment poses substantial hurdles, with mandatory GDPR compliance and potential NIS2 requirements demanding meticulous data handling and cybersecurity during any migration. Furthermore, strict data residency requirements for Danish public sector data (likely requiring data to remain within Denmark or the EU) severely limit options for cloud providers and data center locations, increasing complexity and cost. The company's deep integration with Danish national registers (BBR, CPR, CVR, PLANDK) means any migration must carefully manage these complex data pipelines. While there are challenges, LIFA Digital shows some readiness through its existing 'cloud-based SaaS architecture' and cloud-based products (LIFA KeyAqua), indicating experience with modern cloud environments. The ongoing strategic platform migration from the legacy Cognito platform to the new LOIS system also demonstrates an internal capability and willingness to undertake significant modernization efforts. However, the combined impact of vendor lock-in and stringent regulatory/data residency requirements significantly lowers the overall migration readiness.
Compliance
9 in-scope frameworks identified; showing 3.
ISO 27001 (source) — Assessment Required
ISO 27001 risk is MEDIUM because: (1) LIFA Digital processes sensitive national register data (CPR personal IDs, BBR property data, CVR company data) and provides cloud-based platforms to public sector clients; (2) Danish public sector procurement rules (including the Danish Agency for Digitisation guidelines) increasingly require or strongly recommend ISO 27001 or equivalent for IT suppliers; (3) without ISO 27001 certification, LIFA Digital may face procurement barriers or be required to provide alternative security assurance; (4) their parent company Geomatikk Group, which describes itself as protecting 'critical infrastructure,' would be expected to maintain group-level security standards; (5) the consequence of a security incident without ISO 27001 controls could be significant given the sensitivity of data handled and the public sector client base.
Evidence: https://lifadigital.dk, https://geomatikk.com, https://www.iso.org/isoiec-27001-information-security.html, https://www.digst.dk/styring/standarder-og-arkitektur/standarder/iso-27001/
SOC 2 (source) — Assessment Required
SOC 2 risk is MEDIUM because: (1) LIFA Digital provides cloud-based SaaS solutions (LIFA KeyAqua is explicitly described as 'cloud- og browserbaseret'; LOIS, Census, and other platforms are hosted services) to public sector clients; (2) their customers — municipalities, regions, and utility companies — increasingly require evidence of security controls from their technology vendors, particularly for cloud services handling sensitive data; (3) without SOC 2 certification, LIFA Digital may face competitive disadvantage or procurement barriers when bidding for public sector contracts; (4) Danish public sector procurement increasingly requires evidence of information security controls; (5) however, SOC 2 is a US-origin framework and European companies more commonly pursue ISO 27001 — the risk of regulatory non-compliance per se is lower, but the business risk of lacking a recognized security certification is medium.
Evidence: https://lifadigital.dk/lifa-keyaqua/, https://lifadigital.dk/datadistribution/, https://www.aicpa-cima.com/resources/landing/soc-2-reporting-on-an-examination-of-controls-at-a-service-organization-relevant-to-security-availability-processing-integrity-confidentiality-or-privacy
Danish Data Protection Act — Assessment Required
Risk is HIGH because: (1) the Danish Data Protection Act supplements GDPR with stricter national rules, particularly for CPR numbers (Danish personal identification numbers) — LIFA Digital explicitly distributes CPR data via their LOIS platform; (2) CPR numbers have special protection under Danish law (§ 11 of Databeskyttelsesloven) requiring explicit legal basis; (3) LIFA Digital serves public authorities (municipalities, regions) which are subject to heightened data protection obligations; (4) Datatilsynet (Danish DPA) actively enforces both GDPR and the national act; (5) violations involving CPR numbers have historically attracted significant regulatory attention in Denmark.
Evidence: https://lifadigital.dk/datadistribution/, https://datamodel.lifa.dk/, https://www.datatilsynet.dk/english, https://www.retsinformation.dk/eli/lta/2018/502
Financials
Three-year financials
- 2025: gross profit DKK 39.3M, EBIT DKK -9.91M, equity DKK 92.1M
Financial Resilience Score: 7/10
LIFA Digital ApS demonstrates strong balance-sheet resilience despite being in its first year of independent operations. Equity of DKK 92.1M against total assets of DKK 168.9M yields a solidity ratio of approximately 55%, which Proff.dk classifies as 'Very Good.' This robust capital position was established through a DKK 100M cash capital injection from Norwegian parent Geomatikk Group in January 2025, which also converted most short-term related-party debt (from DKK 106.7M to DKK 11.0M) into equity. Cash on hand grew from DKK 40k to DKK 26.8M during 2025, providing ample liquidity for planned activities. The company benefits from a well-capitalised international owner (Geomatikk Group, ultimately owned by Axcel PE), a stable Danish public-sector customer base with long procurement cycles, and recent consolidation of market position through the April 2025 acquisition of KMD's Cognito platform. However, first-year operations produced an EBIT loss of DKK -9.9M and net loss of DKK -7.97M, driven by carve-out costs, DKK 14.6M of depreciation (largely goodwill amortisation), and Cognito integration. Goodwill of DKK 126.0M represents approximately 75% of total assets, creating significant impairment risk. Concentration in a single geography (Denmark) and customer type (public sector/utilities), along with a mid-2025 leadership transition, temper the overall assessment.
Key strengths: Strong equity base of DKK 92.1M with ~55% solidity ratio, DKK 100M cash capital injection from Geomatikk Group in January 2025, Cash position increased from DKK 40k to DKK 26.8M during 2025, Backed by well-capitalised Nordic parent (Geomatikk Group, owned by Axcel PE), Stable public-sector customer base (municipalities, regions, utilities), Strengthened market position via KMD Cognito acquisition (April 2025), Legacy business dating back to 1988 under LIFA A/S Landinspektører
Risk factors: First-year operating loss: EBIT of DKK -9.9M and net loss of DKK -7.97M, Goodwill of DKK 126.0M represents ~75% of total assets - impairment risk, 100% revenue concentration in Denmark, Customer concentration in public sector/utilities, Related-party funding dependence on Geomatikk parent, Leadership transition - new MD Morten Lennert appointed mid-2025, Unproven profitability as stand-alone entity
Revenue by geography
- Denmark: 100%
Workforce by country
- Denmark: 42
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.