Molio

Denmark · owned by Independent (Denmark) · molio.dk · 16 vendors

Molio is a Danish independent foundation (CVR 63035017) headquartered in Herlev that serves as the construction industry's shared knowledge and digitalisation platform. It develops and provides digital tools, industry standards, courses, certifications, and technical publications to support professionals across the entire building and construction value chain. Operating with no profit-distributing owners, Molio works in the long-term interest of a more competitive and sustainable Danish construction sector.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-13 · revision 3

16 direct vendors, 211 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Molio exhibits medium migration readiness. Key challenges include strict data residency requirements (data processed within the EU), which limit cloud provider and region options. Compliance with GDPR and the likely applicability of NIS2 adds significant regulatory complexity and overhead to any migration, demanding meticulous planning for data protection and security. The financial capacity to fund a substantial migration is unknown due to missing revenue and growth data. Vendor lock-in risk is 'Unknown,' but the use of LockLizard for DRM indicates a specific vendor dependency that could complicate the migration of digital content. The presence of 19 services and vendors from 6 different countries suggests a potentially complex vendor landscape to manage during a transition. While Molio has adopted modern elements like AI (ByggeGPT), its core tech stack, including Umbraco CMS, may not be fully cloud-native, potentially requiring refactoring efforts. Opportunities lie in their willingness to embrace modern technologies, which could facilitate a strategic shift to cloud-native architectures if refactoring is undertaken.

Compliance

7 in-scope frameworks identified; showing 3.

GDPR (source) — Partially Compliant

Molio is a Danish EU-based foundation that processes substantial volumes of personal data including customer/subscriber data, course participant data, employee data, marketing data, and video surveillance footage. They have published a detailed and well-structured privacy policy (Version 1.1, August 2026) demonstrating active GDPR compliance efforts, including lawful basis documentation, data subject rights, third-country transfer mechanisms (SCCs, EU-U.S. Data Privacy Framework), and data retention schedules. Risk is rated Medium rather than Low because: (1) no publicly evidenced DPO appointment has been found, which may be required given the scale of processing; (2) use of multiple US-based third-party processors (Google Analytics, Google Ads, Meta/Facebook, LinkedIn) introduces ongoing Schrems II compliance risk; (3) no independent GDPR audit or certification has been publicly disclosed; (4) the Danish Data Protection Authority (Datatilsynet) actively enforces GDPR and has issued fines to Danish organisations. The risk is not High because the privacy policy is substantive and demonstrates genuine compliance intent.

Evidence: https://molio.dk/support/information/persondata-og-cookiepolitik/, https://molio.dk/, https://www.datatilsynet.dk/english

ISO 27001 (source) — Assessment Required

Molio operates cloud-based digital tools and platforms that process personal data and proprietary construction industry data for a broad subscriber base. ISO 27001 certification is increasingly expected of digital service providers in the EU, particularly those serving enterprise and public sector clients. Risk is Medium because: (1) Molio's privacy policy references 'appropriate technical and organisational security measures' but no ISO 27001 certification has been found; (2) Molio serves public sector construction projects (e.g., tools for public building regulations BR18) where security certification may be required by procurement rules; (3) the absence of ISO 27001 may be a competitive disadvantage and a gap in demonstrable security assurance; (4) Danish public procurement increasingly requires evidence of information security management. Risk is not High because Molio is not in a critical infrastructure sector and its data processing, while significant, does not involve highly sensitive categories of personal data at scale.

Evidence: https://molio.dk/support/information/persondata-og-cookiepolitik/, https://molio.dk/produkter/digitale-vaerktojer/

SOC 2 (source) — Assessment Required

Molio provides multiple cloud-based/SaaS digital tools (Prisdata, Beskrivelsesværktøjet 2.0, Byggedata, Branddata, Teknikdata, Molio BR18 with ByggeGPT, CAD og bygningsmodel, Aftale og kommunikation, LeksiCON, BIM International) that are accessed via subscription by construction professionals across Denmark and potentially internationally. These tools involve user authentication, personal data processing, and subscription management. Customers and enterprise subscribers may increasingly require SOC 2 Type II reports as part of vendor due diligence. Risk is Medium because: (1) Molio processes customer data in cloud-hosted digital platforms; (2) no SOC 2 report has been publicly disclosed; (3) as a B2B digital tools provider, enterprise customers may require evidence of security controls; (4) the absence of a SOC 2 report is a gap relative to industry expectations for SaaS providers. Risk is not High because Molio primarily serves the Danish construction market where SOC 2 is less commonly mandated than in US markets.

Evidence: https://molio.dk/produkter/digitale-vaerktojer/, https://molio.dk/support/information/persondata-og-cookiepolitik/

Financials

Three-year financials

Financial Resilience Score: 7/10

Molio demonstrates strong balance sheet resilience with a solvency ratio of 50% in 2024, up from 44% in 2020, and equity of DKK 45.6M against total assets of DKK 90.9M. As an 'erhvervsdrivende fond' (commercial foundation), all profits are reinvested rather than distributed, which structurally supports capital accumulation over time. The company also maintains a liquid securities portfolio of DKK 19.2M and owns property assets (mainly HUSET Middelfart) with modest mortgage debt of just DKK 4.4M, providing a substantial asset buffer. However, operational profitability is under significant pressure. EBIT has fallen 82% over two years from DKK 4.16M (2022) to DKK 0.77M (2024), driven by personnel costs rising 27% while revenue only grew 9%. Cash on hand has weakened from DKK 10.99M (2022) to DKK 2.39M (2024) following heavy investment in a new ERP system and digital products. Revenue growth decelerated sharply from +8.2% in 2023 to just +1.1% in 2024, and management's 2025 guidance points to flat revenue and only DKK 0.7M in net profit. Historical volatility is a further concern: 2019 saw a DKK -18.3M EBIT loss and DKK -12.9M net loss, and equity has still not returned to 2018 levels (DKK 49.4M). Small absolute scale (~DKK 118M revenue) and heavy exposure to Danish construction cyclicality limit the buffer against demand shocks. On balance, the strong equity base and foundation structure justify a resilience score of 7, but declining margins and cash compression prevent a higher rating.

Key strengths: Solvency ratio of 50% in 2024, improving from 44% in 2020, Foundation structure means no dividend outflows - all profits reinvested, Equity of DKK 45.6M with modest mortgage debt of DKK 4.4M, Liquid securities portfolio of DKK 19.2M provides additional buffer, Recurring/subscription-like revenue from digital tools and standards, Diversified innovation funding secured (ConTech Lab 4-year renewal), Positive operating cash flow every year 2022-2024

Risk factors: EBIT declined 82% over two years (DKK 4.16M to DKK 0.77M), Personnel costs up 27% while revenue only grew 9% over 2022-2024, Cash position weakened from DKK 10.99M (2022) to DKK 2.39M (2024), Revenue growth decelerated to just +1.1% in 2024, 2025 guidance points to flat revenue and only DKK 0.7M net profit, Cyclical exposure to Danish construction sector, Small absolute scale (~DKK 118M revenue) limits buffer against shocks, Historical volatility: DKK -18.3M EBIT loss in 2019

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report