MarketingPlatform ApS

Denmark · marketingplatform.com · 24 vendors

MarketingPlatform ApS is a Danish SaaS company that provides a user-friendly and advanced email and SMS marketing automation solution. Their platform includes an omnichannel customer data platform, enabling businesses to engage in dialogue with customers and streamline marketing processes. The company became part of LINK Mobility Group in 2021.

Resilience scores

Technology vendors

Services catalogue

10 services in catalogue across 3 categories; runs on 24 sub-vendors.

Insights

Last updated 2026-08-06 · revision 12

24 direct vendors, 302 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

MarketingPlatform ApS exhibits a moderate level of migration readiness, scoring 55 out of 100. The most significant challenges for migration stem from its strict regulatory environment and data residency requirements. As a Danish company processing personal data, full GDPR compliance and maintaining EU data residency (Netherlands for GCP, Denmark for email infrastructure) are mandatory. Any migration strategy would need to rigorously adhere to these constraints, potentially limiting choices for cloud providers and regions, and adding complexity and cost to the process. The unknown financial stability (due to missing revenue and growth data) also poses a risk, as a major migration project requires substantial funding and resources. The internal tech stack includes PHP and C#/.NET with a mention of a 'legacy API layer,' which could indicate older components that might be more challenging to re-platform or refactor for a modern cloud-native environment. While the 'Vendor Lock-in Risk: Unknown' is stated, the presence of 'Total Services: 37' from diverse vendor HQ countries suggests a complex ecosystem of dependencies that would need careful assessment and management during a migration. On the positive side, the availability of a REST API (v2) and SDKs for PHP and C# provides good programmatic access, which can facilitate data extraction, integration, and re-platforming efforts. The existing use of Google Cloud Platform for data storage also indicates some familiarity with cloud environments, which could ease a transition to other cloud services or regions within the EU.

Compliance

7 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Assessment Required

ISO 27001 is the internationally recognised standard for Information Security Management Systems (ISMS). As a SaaS provider processing personal data for 50,000+ customers, ISO 27001 certification would be a strong signal of security maturity. The risk level is Medium because: (1) No ISO 27001 certificate has been publicly disclosed for MarketingPlatform ApS; (2) The company describes security measures (firewalls, daily vulnerability scanning, disk encryption, pseudonymisation) consistent with ISO 27001 controls, but without formal certification these cannot be independently verified; (3) The parent company LINK Mobility Group may hold ISO 27001 at the group level, but this is not confirmed; (4) Enterprise and public sector clients (e.g., Danske Regioner, Novo Nordisk – both referenced as customers) typically require ISO 27001 or equivalent from their SaaS vendors; (5) The absence of certification is a commercial and reputational risk, particularly for regulated-sector clients. The risk is not 'High' because ISO 27001 is voluntary (not legally mandated in Denmark/EU for this sector) and the company demonstrates substantive security practices.

Evidence: https://marketingplatform.com/how-emailplatform-complies-with-gdpr/, https://marketingplatform.com/, https://cloud.google.com/security/encryption-at-rest

NIS2 (source) — Assessment Required

NIS2 applies to entities in specific sectors (Essential and Important Entities) that meet size thresholds (50+ employees or €10M+ annual turnover). MarketingPlatform ApS operates in the Media & Marketing / SaaS sector. The NIS2 Directive's 'Important Entity' categories include 'digital providers' (online marketplaces, online search engines, social networking platforms) and potentially 'ICT service management' (managed service providers). As a SaaS-based marketing automation and Customer Data Platform provider, MarketingPlatform could potentially fall under the 'digital providers' or 'managed service providers' category, but this is not a clear-cut classification. The company is part of LINK Mobility Group (700+ employees, 22 countries, publicly listed), which almost certainly exceeds NIS2 size thresholds at the group level. However, MarketingPlatform ApS as a standalone Danish entity may be assessed separately. The risk level is Low because: (a) the Media & Marketing sector is not a primary NIS2 target sector; (b) the company is not in energy, transport, banking, health, or other Essential Entity sectors; (c) even if classified as an Important Entity, NIS2 penalties (up to €7M or 1.4% of global turnover for Important Entities) are lower than GDPR; (d) Denmark's NIS2 transposition (via the 'Lov om sikkerhed i net- og informationssystemer') is still being implemented. An assessment is required to determine if the company qualifies as a 'digital provider' or 'managed service provider' under NIS2 Annex II.

Evidence: https://marketingplatform.com/about-us/, https://marketingplatform.com/, https://linkmobility.com/

GDPR (source) — Partially Compliant

MarketingPlatform ApS is headquartered in Denmark (EU), making GDPR universally applicable. The company acts as a data processor for its customers and processes large volumes of personal data (email addresses, behavioural data, purchase history, geolocation, etc.) on behalf of 50,000+ customers across multiple countries. The company demonstrates strong proactive GDPR measures: all data is stored within the EU (Netherlands-based Google Cloud Platform servers), a published Data Processing Agreement (DPA) is in place, a named Data Protection Officer (DPO – Jan Wieczorkiewicz) is publicly identified, right-to-erasure and data portability features are built into the platform, and the Danish Data Protection Authority ('Datatilsynet') has reportedly approved their deletion process. However, the status is 'Partially Compliant' rather than 'Compliant' because no independent third-party audit or certification of GDPR compliance has been publicly evidenced, and the DPA references a 2020 document (V1.34, 29 November 2020) which may not fully reflect post-Schrems II Standard Contractual Clauses (SCCs) updates or the 2021 revised SCCs. The risk level is Medium (not High) because the company has clearly invested in compliance infrastructure, has a DPO, and stores data within the EU, significantly reducing the likelihood of a major breach. Fines under GDPR can reach €20M or 4% of global annual turnover, which is a material risk for any data processor of this scale.

Evidence: https://marketingplatform.com/how-emailplatform-complies-with-gdpr/, https://marketingplatform.com/data-processing-agreement/, https://marketingplatform.com/cookie-and-privacy-policy/, https://marketingplatform.com/about-us/, https://marketingplatform.com/wp-content/uploads/2022/11/DPA-LINK-as-Processor-V1.34_29November2020_fixed.pdf

Financials

Financial Resilience Score: 7/10

MarketingPlatform ApS benefits significantly from being a subsidiary of LINK Mobility ASA, a publicly listed Norwegian CPaaS company with 700+ employees across 22 countries. This parent-company backing provides access to group liquidity, shared infrastructure, and cross-sell opportunities into LINK's SMS/CPaaS customer base. The company operates a recurring SaaS revenue model in email marketing, SMS marketing, marketing automation, and CDP, which typically produces predictable, high-margin recurring revenue. The company has strong blue-chip customer references including Novo Nordisk, Royal Unibrew, Verisure, Med24.dk, dao, and Danske Regioner, which reduces customer concentration risk and provides credibility in the Nordic mid-market. Its positioning as a GDPR-compliant Danish supplier serves as a differentiator against larger US-based competitors like Mailchimp, HubSpot, and Klaviyo. Product breadth across email, SMS, marketing automation, CDP, and integrations with major e-commerce and ERP platforms supports upsell and reduces churn. However, the company faces intense competition from global SaaS players with far larger R&D budgets, and integration risk within LINK Mobility could subordinate its product roadmap and go-to-market strategy to group priorities. Its focus on the Nordic mid-market SME segment exposes it to economic downturns and marketing budget cuts. Standalone financial disclosure is limited due to Danish class-B ApS exemptions, making independent resilience assessment difficult. Expansion into Spain and Peru introduces FX and localization risks.

Key strengths: Backed by listed parent LINK Mobility ASA with 700+ employees in 22 countries, Recurring SaaS revenue model with high gross margins, Blue-chip Nordic customer references (Novo Nordisk, Royal Unibrew, Verisure, Danske Regioner), GDPR-compliant Danish supplier positioning as competitive differentiator, Broad product portfolio: email, SMS, marketing automation, CDP with major platform integrations

Risk factors: Intense competition from global SaaS players (Mailchimp, HubSpot, Klaviyo, ActiveCampaign, Braze) with larger R&D budgets, Integration risk within LINK Mobility group may subordinate product roadmap and pricing, Nordic mid-market SME exposure sensitive to economic downturns and marketing budget cuts, Limited standalone financial disclosure as Danish class-B ApS subsidiary, FX and geographic expansion risk from Spanish and Peruvian operations

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report