group.one

Denmark · group.one · 24 vendors

group.one is a leading European provider of online presence, cloud hosting, and digital marketing services, empowering small and medium-sized businesses to succeed online. The company offers a range of digital solutions, including web hosting, domain name registration, website builders, e-commerce, and social media management. Headquartered in Sweden, group.one serves over 2 million customers across various countries.

Resilience scores

Technology vendors

Services catalogue

83 services in catalogue across 12 categories; runs on 24 sub-vendors.

Insights

Last updated 2026-09-12 · revision 7

24 direct vendors, 335 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

group.one exhibits high migration readiness, primarily driven by its highly modern and cloud-native oriented tech stack. The extensive use of Node.js, TypeScript, NestJS, PostgreSQL, Docker, Kubernetes, Microservices Architecture, Event-Driven Architecture, and CI/CD pipelines indicates a sophisticated, portable, and scalable infrastructure that is exceptionally well-suited for cloud migration. Their strong financial position, with €350M in revenue, provides ample resources to fund significant migration initiatives. The deep integration of AI/LLMs across their product suite also points to a tech-forward culture capable of adapting to new platforms. However, several factors present significant challenges. The complex regulatory landscape, with 'Assessment Required' statuses for GDPR, NIS2, SOC2, and ISO 27001, means any migration must meticulously ensure continued compliance, adding considerable planning and execution overhead. Strict EU data residency requirements under GDPR necessitate careful consideration of data storage locations and transfer mechanisms, potentially limiting cloud provider or region choices. Furthermore, while 'Total Vendors: 0' is stated, the presence of numerous specialized third-party products (e.g., SocialPilot, Rank Math, Termly) strongly suggests vendor relationships. The 'Vendor Lock-in Risk: Unknown' is a critical gap; if significant lock-in exists, migrating these integrated services could be complex and costly. Despite these challenges, the inherent flexibility and modernity of their core technology stack position them well for a successful migration.

Compliance

11 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Assessment Required

As a provider of technology services, including hosting and cloud infrastructure, customers and partners expect a high level of information security. ISO 27001 is the de facto international standard for information security management.

While not a legal requirement, ISO 27001 certification is a common customer expectation in the hosting and cloud services industry. The lack of certification could be a competitive disadvantage and may raise concerns about their security posture.

Evidence: https://www.one.com/en-gb/about/cyber-security/, https://www.one.com/en-us/about/cyber-security/

NIS2 (source) — Assessment Required

Group.one provides domain registration, cloud hosting, and data center services, which fall under the 'digital infrastructure' and 'ICT service management' sectors classified as 'Essential Entities' under NIS2. The company's size (1500+ employees) exceeds the threshold.

Non-compliance can result in significant fines and suspension of services. As a major provider of digital infrastructure, any service disruption would have a widespread impact, attracting regulatory scrutiny.

SOC 2 (source) — Assessment Required

Group.one provides cloud and hosting services and has operations in the USA. Customers, especially business clients, often require a SOC 2 report to assess the security of a service provider's controls.

Similar to ISO 27001, a SOC 2 report is frequently requested by customers, particularly in North America, to verify security, availability, and confidentiality controls. The absence of a report can be a barrier to sales and partnerships.

Financials

Three-year financials

Financial Resilience Score: 6/10

group.one demonstrates meaningful financial resilience through its scale (~EUR 350M pro-forma revenue), diversified pan-European footprint across 15+ countries, and a subscription-based recurring revenue model in web hosting, domains, and SaaS that is typically highly cash-generative with low churn. The group benefits from over 2 million customers, 4+ million domains under management, and a multi-brand localized strategy that creates defensible positions against US hyperscalers. Backing from private equity sponsor Cinven provides access to capital for continued M&A and platform investment. However, resilience is tempered by significant risks. The growth has been almost entirely inorganic (55+ acquisitions in ~5 years), which typically implies material goodwill, integration complexity, and a leveraged capital structure sensitive to interest rates. Public visibility into unit economics, churn, net debt, and segment profitability is limited as a privately held PE portfolio company. Competitive pressure from GoDaddy, IONOS, Hostinger, Squarespace, Wix, and Shopify remains intense, and AI-driven commoditization of website builders could pressure margins. FX exposure across multiple Nordic, CEE, and Western European currencies adds further variability.

Key strengths: ~EUR 350M pro-forma recurring revenue base, Diversified across 15+ countries and 20 local brands, Subscription-based hosting/domain model with low churn, 2M+ customers and 4M+ domains under management, Cinven PE backing providing M&A capital, Platform consolidation via oneCRM/oneHome/oneWebshop, AI product layer (Aida AI, Content AI) positioning

Risk factors: High goodwill and likely leveraged capital structure from 55+ acquisitions, Integration risk across 20 brands and multi-year ERP unification, Intense competition from GoDaddy, IONOS, Hostinger, Squarespace, Wix, Shopify, Margin compression from AI commoditization of website builders, FX exposure across EUR, SEK, DKK, NOK, CHF, CZK, PLN, HUF, Limited public disclosure of unit economics, churn, and net debt

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report