NeGSiS — Next Generation Signal Integration Systems
Denmark · owned by Independent (Denmark) · negsis.com · 4 vendors
NeGSiS is a Copenhagen-based defence and aerospace technology company specialising in AI-powered unsupervised training systems for cross-domain simulators. The company develops adaptive training platforms that integrate with existing simulator infrastructure, incorporating mixed reality (HoloLens/VR/AR), biometric data collection, and real-time performance analytics. Its solutions are purpose-built for military and aerospace applications, including pilot training, ground force simulators, helmet-mounted display systems, and night vision training environments.
Resilience scores
- Digital Sovereignty: 0
- Digital Resilience: 5
- Financial Resilience: 5
Technology vendors
- BambooHR — Technology — United States
- Google LLC — Technology — United States
- Microsoft Corporation — Technology — United States
- and 2 more
Insights
Last updated 2026-08-27 · revision 3
4 direct vendors, 81 subvendors
Direct vendors by controlling owner country (sample)
- United States: 3
- United Kingdom: 1
Subvendors by controlling owner country (sample)
- China: 1
- Sweden: 3
- United States: 66
Migration Readiness: 8/10
Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.
NeGSiS exhibits high migration readiness. A significant strength is its highly modern and cloud-native internal tech stack, which includes Microsoft Azure, Azure Serverless Functions, REST APIs, and an event-driven architecture. This indicates a microservices-oriented approach, which inherently enhances portability and flexibility for migration to other cloud platforms or within Azure. The use of standards like GeoJSON and token-based authentication further supports interoperability. However, several factors temper the readiness score. Critical information regarding data residency requirements and the specific regulatory environment is missing, which could introduce significant complexities, compliance challenges, and costs during a migration. The absence of financial stability data (revenue concentration, growth history) makes it difficult to assess the company's capacity to fund a major migration effort. Furthermore, while the tech stack is modern, the strong reliance on Microsoft Azure services could lead to vendor lock-in, particularly if highly proprietary Azure-specific implementations are used, potentially increasing the effort required to migrate away from the Azure ecosystem. The 'Unknown' vendor lock-in risk highlights this potential challenge.
Compliance
8 in-scope frameworks identified; showing 3.
GDPR (source) — Assessment Required
GDPR is unambiguously applicable: NeGSiS is headquartered in Copenhagen, Denmark — an EU member state — and therefore falls directly under GDPR jurisdiction. Critically, the company processes exceptionally sensitive categories of personal data: biometric data (physiological indicators, eye tracking, decision latency, cognitive load profiles) which is explicitly classified as 'special category data' under GDPR Article 9, requiring explicit consent or another specific legal basis. RavenNET additionally collects citizen location data, observation content, and timestamps from members of the public in near real-time. Both product lines involve high-risk processing activities that likely trigger mandatory Data Protection Impact Assessments (DPIAs) under Article 35. The risk level is HIGH because: (1) biometric and location data are among the most sensitive data types under GDPR; (2) defence/government clients add complexity around lawful basis and data sharing; (3) no public privacy policy, DPO appointment, or GDPR compliance documentation was found on the company website; (4) fines can reach €20M or 4% of global annual turnover; (5) Denmark's Datatilsynet is an active enforcement authority.
Evidence: https://negsis.com, https://negsis.com/ravennet, https://gdpr-info.eu/art-9-gdpr/, https://gdpr-info.eu/art-35-gdpr/, https://www.datatilsynet.dk/english
Danish Defence & Security Procurement Regulations — Assessment Required
NeGSiS serves defence and government clients, making Danish and EU defence procurement regulations directly applicable. The Danish Defence Acquisition and Logistics Organisation (DALO/FMI) and the Transport, Building and Housing Authority (TBST) impose specific security, classification, and compliance requirements on defence suppliers. Risk is HIGH because: (1) non-compliance with defence procurement security requirements can result in contract termination and debarment; (2) handling of classified military training data may require NATO security clearances and accreditation; (3) the RavenNET platform for government situational awareness likely involves classified or sensitive government data; (4) EU Defence Procurement Directive (2009/81/EC) imposes specific obligations on defence suppliers.
Evidence: https://negsis.com, https://negsis.com/ravennet, https://www.fmi.dk/en/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32009L0081
CSRD (source) — Assessment Required
CSRD may apply to NeGSiS depending on company size. The directive applies to: large companies (250+ employees OR €40M+ turnover OR €20M+ balance sheet) from FY2024 (reporting in 2025); listed SMEs from FY2026. NeGSiS's size is not publicly disclosed — founded 2015 with 10+ years experience but no employee count or revenue figures available. Risk is LOW because: (1) NeGSiS appears to be a relatively small/medium company unlikely to meet the large company threshold; (2) even if applicable, CSRD is a reporting obligation rather than an operational compliance requirement; (3) enforcement is at early stages across EU member states.
Evidence: https://negsis.com, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2464
Financials
Financial Resilience Score: 5/10
NeGSiS is a small Copenhagen-based defence/aerospace technology company founded in 2015, likely structured as a Danish ApS. No public financial figures (revenue, EBIT, equity, or headcount) could be confirmed from the sources available. The company would file an årsrapport with the Danish Business Authority (CVR/virk.dk), but this data was not retrievable in the research session, leaving the quantitative financial picture unknown. Qualitatively, the company benefits from strong tailwinds in European and Nordic defence spending since 2022, with AI-enabled training and simulation being a NATO priority capability area. Its business model as a software/licence layer on top of existing simulators suggests potentially sticky, high-margin revenue, and its EU-sovereign Azure North Europe architecture aligns well with government procurement requirements. The 10-year operating history reduces early-stage execution risk, and product diversification across NeGSiS Core (simulator AI) and RavenNET (citizen-observation SaaS) addresses different buyer groups. However, significant risks exist including concentration risk typical of small Danish defence-tech firms dependent on a handful of contracts, long and lumpy government sales cycles causing cash-flow volatility, capital intensity of continuous AI R&D against a likely limited equity base, and export-control exposure limiting the addressable market. Disclosure opacity as an assumed class-B ApS filer further limits external visibility. Without confirmed financials, a mid-range resilience score reflects the balance of positive sector tailwinds against small-company concentration and disclosure risks.
Key strengths: European and Nordic defence spending tailwinds since 2022, AI-enabled simulator training aligned with NATO priorities, Software/licence layer business model with low incremental delivery cost, Product diversification across NeGSiS Core and RavenNET, EU-sovereign serverless Azure North Europe architecture, 10-year operating history since 2015 founding, Copenhagen HQ with Danish defence ecosystem access
Risk factors: Small company concentration risk on a handful of defence contracts, Long and lumpy government procurement sales cycles, Cash-flow volatility and working capital strain, Capital intensity of ongoing AI R&D against limited equity base, Export-control and dual-use classification exposure, Limited financial disclosure as assumed Danish class-B ApS filer, Dependence on prime contractors (e.g. Terma, Systematic, Saab) or Danish MoD
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.