Mouseflow ApS

Denmark · owned by Mouseflow Invest ApS (Denmark) · mouseflow.com · 16 vendors

Mouseflow is a website behavior analytics platform that provides session replay, heatmaps, friction detection, conversion funnels, form analytics, and user feedback tools. It empowers businesses to understand and improve user experience and conversion rates on their websites. The company operates with offices in Copenhagen, Denmark and Austin, Texas, USA, serving customers globally.

Resilience scores

Disruption prediction

Mouseflow ApS has an estimated 10% probability of disruption in the next 6 months.

7 of Mouseflow ApS's 16 vendors monitored for disruptions.

Technology vendors

Services catalogue

3 services in catalogue across 3 categories; runs on 16 sub-vendors.

Insights

Last updated 2026-09-13 · revision 2

16 direct vendors, 196 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Mouseflow exhibits high migration readiness due to its modern, cloud-native architecture. The core internal tech stack is built on Google Cloud Platform (GCP), utilizing services like Google Cloud Storage and Vertex AI, which are inherently designed for scalability, flexibility, and portability within the cloud ecosystem. The presence of a Model Context Protocol (MCP) server integration and REST APIs suggests a modular and API-driven architecture, making components easier to decouple and migrate. Furthermore, Mouseflow already supports multi-region data residency, allowing customers to choose data hosting in the EU or US. This existing capability demonstrates their operational maturity in handling geographically distributed data, which significantly simplifies potential migrations to different cloud regions or providers. While the company relies on GCP for its core infrastructure, its cloud-native approach means it is well-prepared for migration, even if it involves moving between cloud providers. The data indicates 19 services from entities in 5 different countries, implying a diverse set of underlying service providers rather than heavy reliance on a few, which generally reduces vendor lock-in complexity during migration. The main gaps in assessment are the lack of financial stability data to gauge funding capacity for a large migration project and the explicit vendor lock-in risk, which remains unknown.

Compliance

12 in-scope frameworks identified; showing 3.

NIS2 (source) — Assessment Required

NIS2 (EU Directive 2022/2555, transposed into Danish law via the Danish NIS2 Act effective October 2024) may apply to Mouseflow ApS depending on its classification as a digital provider. Mouseflow operates as a SaaS/cloud-based analytics platform serving 210,000+ customers globally, which could qualify it as an 'online marketplace,' 'online search engine,' or more likely a 'managed service provider' or 'digital service provider' under NIS2 Annex II (Important Entities). The company has operations in both Denmark (EU) and the United States. The key uncertainty is whether Mouseflow meets the size threshold (50+ employees or €10M+ annual turnover) — the company has not publicly disclosed headcount or revenue figures, though its scale (210,000+ customers, offices in Copenhagen and Austin, global brand recognition) suggests it likely exceeds these thresholds. If classified as an Important Entity under NIS2, Mouseflow would need to implement risk management measures, incident reporting obligations (within 24 hours for significant incidents), supply chain security, and register with the Danish Centre for Cyber Security (CFCS). Risk is Medium because: (1) the sector classification is plausible but not definitively confirmed; (2) size thresholds are likely met but unconfirmed; (3) NIS2 enforcement in Denmark began in 2024 and is actively being implemented; (4) non-compliance penalties can reach €10M or 2% of global annual turnover.

Evidence: https://mouseflow.com/legal/compliance/, https://mouseflow.com/about-us/, https://mouseflow.com/legal/data-security/

ePrivacy Directive — Compliant

The ePrivacy Directive (and its national implementations across EU Member States) is directly relevant to Mouseflow's core business: session replay and behavioral tracking technologies require consent under ePrivacy rules in most EU jurisdictions. Mouseflow's GDPR page explicitly addresses consent requirements, opt-out mechanisms, and cookie compliance. The risk level is Medium because: (1) ePrivacy compliance is a shared responsibility between Mouseflow and its customers (Mouseflow provides the tools; customers must implement consent mechanisms); (2) The ePrivacy Regulation (proposed replacement for the Directive) has been delayed but remains pending; (3) Enforcement of cookie consent requirements has intensified across EU Member States (France's CNIL, Germany's DSK, Italy's Garante); (4) Mouseflow's tracking script is subject to consent requirements under Danish and EU cookie rules; (5) Mouseflow provides opt-out mechanisms and Do-Not-Track support, demonstrating compliance awareness.

Evidence: https://mouseflow.com/legal/cookie-policy/, https://mouseflow.com/legal/gdpr/, https://mouseflow.com/opt-out/

LGPD — Compliant

Mouseflow explicitly states LGPD compliance on its About Us page ('Mouseflow is GDPR, CCPA, and LGPD compliant'). LGPD applies to any organization that processes personal data of individuals located in Brazil, regardless of where the organization is headquartered. Given Mouseflow's global customer base of 210,000+, processing of Brazilian user data is highly likely. Risk is Low because Mouseflow has proactively addressed LGPD compliance. LGPD penalties can reach R$50 million per violation (approximately €9M), making compliance important for global SaaS providers.

Evidence: https://mouseflow.com/about-us/, https://mouseflow.com/legal/privacy-policy/, https://mouseflow.com/legal/privacy/

Financials

Three-year financials

Financial Resilience Score: 6/10

Mouseflow ApS is an established Danish SaaS company founded around 2009 with over a decade of operating history in the website behavior analytics market. The company has a large, diversified customer base advertising 210,000+ users across multiple industries including retail, pharma, automotive, telecom, and finance, which reduces single-customer concentration risk. Its recurring subscription revenue model typically produces predictable ARR and strong gross margins (60-80% typical for SaaS peers), and its privacy/GDPR positioning provides a genuine competitive moat for European enterprise buyers versus U.S. competitors. However, the company faces intense competition and pricing pressure, particularly from Microsoft Clarity (free) and Hotjar (discounted for small users), which compresses the SMB tier, while Contentsquare and FullStory dominate the enterprise tier with much larger balance sheets. As a small private ApS filing abbreviated accounts, Mouseflow likely has limited cash cushion versus VC-backed U.S. rivals. FX exposure (USD/EUR revenues, partly DKK costs) and the need for heavy AI investment (Mina AI, MCP server) add further risk. Without verified financial figures from CVR filings, a definitive resilience score cannot be assigned, but qualitative factors suggest moderate resilience.

Key strengths: Established SaaS player since ~2009 with over a decade of operating history, Large diversified customer base of 210,000+ users across multiple industries, Recurring subscription revenue model with predictable ARR, Privacy/GDPR positioning as competitive moat for European enterprise buyers, Product breadth with seven-feature platform plus AI/MCP layer, Enterprise customers including Booking.com, Michelin, AstraZeneca, Shell, Ford, Sony

Risk factors: Intense competition from free (Microsoft Clarity) and discounted (Hotjar) alternatives compressing SMB tier, Enterprise tier dominated by larger competitors Contentsquare and FullStory, Small private-company scale with limited cash cushion versus VC-backed U.S. rivals, FX exposure with USD/EUR revenues and partly DKK costs, AI transition risk requiring heavy investment in Mina AI and MCP server, Unclear ownership/capital structure and potential debt or preference stack, Pricing pressure across SaaS behavior analytics category

Revenue by product/service

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report