Oaky
Netherlands · www.oaky.com · 43 vendors
Oaky provides a hyper-personalized and automated upselling software solution for the hospitality industry. Its platform integrates with hotel property management systems to enable hotels to generate additional revenue by offering tailored upsell opportunities and services to guests. This helps hotels maximize ancillary revenue and enhance guest experiences.
Resilience scores
- Digital Sovereignty: 5
- Digital Resilience: 7
Disruption prediction
Oaky has an estimated 11% probability of disruption in the next 6 months.
21 of Oaky's 43 vendors monitored for disruptions.
Technology vendors
- Duetto — Technology — United States
- Stripe, Inc. — Financial Services — United States
- Usercentrics GmbH — Technology — Germany
- and 40 more
Services catalogue
1 service in catalogue across 1 category; runs on 43 sub-vendors.
- Upselling Platform
Insights
Last updated 2026-03-02 · revision 8
43 direct vendors, 340 subvendors
Direct vendors by controlling owner country (sample)
- Singapore: 1
- Spain: 1
- China: 2
Subvendors by controlling owner country (sample)
- France: 11
- Unknown: 2
- Australia: 5
Migration Readiness: 6/10
Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.
Oaky's migration readiness is assessed at 55, placing it in the medium readiness category. The primary strength for migration is its existing 'SaaS / Cloud-based Platform' and modern internal tech stack (Svelte, REST API), which provides a solid foundation for further cloud optimization or migration efforts. However, the most significant challenges stem from the complex regulatory and data residency environment. As a Dutch company processing personal data for 2000+ hotels across 100+ countries, Oaky faces stringent GDPR requirements, including data residency within the EU/EEA or countries with adequacy decisions, necessitating robust Data Processing Agreements and safeguards for international data transfers. The acquisition by a Canadian company (Plusgrade) further complicates cross-border data transfer considerations, requiring updated mechanisms and privacy impact assessments. These regulatory and data residency complexities add substantial overhead, cost, and planning to any migration initiative. Financial stability (ability to fund migration) is unknown due to missing data. While 'Vendor Geographic Diversity' suggests a potentially lower lock-in risk if these are indeed Oaky's vendors, the 'Vendor Lock-in Risk' is explicitly stated as 'Unknown', making it a potential hurdle. The contradiction in 'Total Vendors: 0' versus the listed vendor geographic data also creates ambiguity in assessing vendor-related migration complexities.
Compliance
3 in-scope frameworks identified; showing 3.
GDPR (source) — Assessment Required
GDPR applies with HIGH confidence as Oaky is headquartered in the Netherlands (EU) and processes extensive personal data including guest information, hotel customer data, and employee data across 2000+ hotels in 100+ countries. Non-compliance could result in fines up to 4% of annual turnover or €20M. As a SaaS provider handling personal data of EU residents, GDPR compliance is mandatory and enforcement is active in the Netherlands.
Evidence: https://oaky.com/en/security?page=GDPR
SOC 2 (source) — Assessment Required
SOC2 is highly relevant for Oaky as a SaaS provider handling sensitive customer data for 2000+ hotels. While not legally mandatory, SOC2 compliance is often required by enterprise customers and is industry standard for SaaS providers. Risk level is medium as lack of SOC2 could impact customer acquisition and retention, though it won't result in regulatory fines.
Evidence: https://oaky.com/en/security?page=SOC2
ISO 27001 (source) — Assessment Required
ISO 27001 is relevant for Oaky as a SaaS provider handling sensitive customer data and integrating with multiple hotel systems. While not mandatory, it's increasingly expected by enterprise customers and supports GDPR compliance. Risk level is medium as lack of certification could impact competitive positioning and customer trust, particularly with large hotel chains.
Financials
Three-year financials
- 2022:
- 2021:
- 2020:
Financial Resilience Score: null/10
Oaky's financial resilience assessment is constrained by its status as a private company, meaning detailed financial statements such as revenue, EBIT/Operating Income, and equity are not publicly disclosed. Furthermore, its acquisition by Shiji Group in July 2023 means its financial reporting is now consolidated, making independent detailed figures even less likely for periods post-acquisition. Therefore, this analysis relies on publicly available data points like funding rounds, company announcements, and industry reports to infer its financial health prior to the acquisition. Despite the lack of granular data, several indicators suggest a strong growth trajectory and investor confidence before the acquisition. Oaky successfully closed a significant €9.5 million Series A funding round in March 2021, led by PeakSpan Capital, which is a strong signal of market validation and potential. This followed an earlier €950,000 seed round in 2017. The company also reported substantial operational growth, including doubling its revenue year-over-year in the period leading up to its Series A investment, and expanding its customer base to over 1,000 hotels across more than 90 countries by 2021/2022. While specific equity figures remain undisclosed, the Series A funding round in 2021 would have significantly bolstered the company's equity base. The consistent ability to attract substantial investment and demonstrate strong customer acquisition and revenue growth, even qualitatively, points to a robust business model and positive market reception prior to its integration into Shiji Group's operations.
Key strengths: Successful Series A funding (€9.5 million in 2021), Significant growth trajectory (doubled revenue year-over-year prior to Series A), Expanding customer base (over 1,000 hotels in 90+ countries by 2021/2022), Earlier Seed funding (€950,000 in 2017)
Risk factors: Private company status (lack of detailed financial disclosure), Acquisition by Shiji Group (financials consolidated, less independent data)
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.