Open-Xchange AG Due Diligence
Run due diligence on Open-Xchange AG: check compliance and get alerts when suppliers or ownership change.
Germany · owned by Independent (Germany) · www.open-xchange.com · 11 vendors
Open-Xchange (OX) is a German software company and self-described world's leading independent email provider, offering open-source-based email and collaboration solutions for telcos, hosting providers, and the public sector via its flagship OX App Suite platform. The company also develops and maintains Dovecot Pro, a carrier-grade IMAP email server, and PowerDNS, a high-performance DNS solution for mission-critical networks. Hundreds of millions of users worldwide rely on OX-powered services daily.
Resilience scores
- Digital Sovereignty: 18
- Digital Resilience: 9
- Financial Resilience: 6
Technology vendors
- easyDNS Technologies, Inc. — Technology — Canada
- Fonticons, Inc. — Technology — United States
- Mistral AI — Technology — France
- and 8 more
Services catalogue
7 services in catalogue across 4 categories; runs on 11 sub-vendors.
- Bidstream Integration
- Open-Xchange
- Collaboration Software
Insights
Last updated 2026-08-16 · revision 9
11 direct vendors, 186 subvendors
Direct vendors by controlling owner country (sample)
- Australia: 1
- Canada: 1
- Germany: 1
Subvendors by controlling owner country (sample)
- Netherlands: 4
- India: 2
- Czech Republic: 1
Compliance
8 in-scope frameworks identified; showing 3.
SOC 2 (source) — No public evidence
Evidence: https://www.open-xchange.com/about-ox/why-open-xchange/ox-trust-center/?hsLang=en, https://trust.upguard.com/cc14e9ce-d3c5-41ed-b17f-2c3c13f89350, https://ox.io/hubfs/0010_Main_EN_27001_2026.pdf
ISO 27001 (source) — Evidence found
Evidence: https://www.open-xchange.com/about-ox/why-open-xchange/ox-trust-center/?hsLang=en, https://ox.io/hubfs/0010_Main_EN_27001_2026.pdf
GDPR (source) — Evidence found
Evidence: https://www.open-xchange.com/about-ox/why-open-xchange/ox-trust-center/?hsLang=en, https://ox.io/hubfs/Imported%20files/TOMs_TrustCenter.pdf, https://ox.io/hubfs/Data_Processing_Trust_Center_03.pdf, https://ox.io/privacy, https://www.open-xchange.com/ethics-compliance?hsLang=en
Financials
Three-year financials
- 2024:
- 2023:
- 2022:
Financial Resilience Score: 6/10
Open-Xchange AG demonstrates moderate financial resilience derived largely from qualitative and structural factors rather than disclosed financial performance. The company benefits from a sticky, embedded customer base of large telcos, ISPs and hosting providers (IONOS, KPN, Swisscom, Rackspace, TalkTalk, Deutsche Telekom heritage) where email/DNS infrastructure switching costs are extremely high, producing recurring multi-year revenue. Its carrier-grade positioning and role in Europe's digital-sovereignty push (e.g., Schleswig-Holstein migration in 2024) provide a structural tailwind and diversified product mix across OX App Suite, Dovecot Pro, and PowerDNS. However, the resilience score is tempered by significant risks and limited transparency. Customer concentration is likely high, with a handful of large telcos/hosters dominating revenue. The company faces intense competition from hyperscalers (Google Workspace, Microsoft 365) and must monetize open-source products against free community editions. As a privately held AG backed by long-standing VC investors (eCAPITAL, Iris Capital), there is inherent exit/ownership-change risk, and the lack of published quantitative financials (revenue, EBIT, equity) makes credit and counterparty due diligence difficult. Historical press coverage placed revenues at €30–40M annually in the late 2010s, but current figures are unverified.
Key strengths: Sticky, embedded customer base with high switching costs among telcos/ISPs, Carrier-grade positioning serving large-scale service providers, European digital-sovereignty tailwind (public-sector demand for non-US alternatives), Diversified product mix across App Suite, Dovecot Pro, and PowerDNS, Experienced ownership and leadership (eCAPITAL, Iris Capital, ex-1&1 CEO Andreas Gauger), Recurring, multi-year revenue model from per-mailbox/per-user licensing
Risk factors: Customer concentration risk with a few large telcos/hosters (IONOS, Deutsche Telekom, KPN), Hyperscaler competition from Google Workspace and Microsoft 365, Open-source monetization challenge (free community editions of Dovecot, PowerDNS), Limited financial disclosure/transparency as a private AG, VC ownership creates potential exit/consolidation event risk, FX exposure from USD-denominated North American revenue
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.