OS2 - Offentligt digitaliseringsfællesskab Due Diligence

Run due diligence on OS2 - Offentligt digitaliseringsfællesskab: check compliance and get alerts when suppliers or ownership change.

Denmark · owned by Independent (Denmark) · www.os2.eu · 9 vendors

OS2 (Offentligt Samarbejde og Open Source) is a Danish inter-municipal and inter-governmental digitalization community where public authorities jointly develop, own, and manage open source IT solutions. With 91 public members including municipalities, regions, and other public bodies, OS2 creates shared digital products and projects to enable sustainable and efficient public sector IT. The secretariat is based in Aarhus, Denmark, hosted by Aarhus Municipality's ITK department.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 9 sub-vendors.

Insights

Last updated 2026-10-19 · revision 3

9 direct vendors, 125 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

OS2 exhibits a high level of migration readiness, largely due to its highly modern and cloud-native oriented technology stack. The extensive use of Docker, Kubernetes, Python, React, GraphQL, and REST APIs positions OS2 well for migration to cloud environments and adoption of microservices architectures. The strong commitment to open-source software for its core products significantly reduces proprietary vendor lock-in for its own offerings, providing substantial flexibility for re-platforming or re-hosting. This open-source approach also fosters a culture of adaptability. However, there are factors that could introduce complexity: a 'Medium' vendor lock-in risk for external vendors will require careful management during migration. The public sector context implies strict regulatory compliance (e.g., GDPR, potential NIS2 directive) and potentially stringent data residency requirements, which, while not fully assessed due to missing data, could add significant overhead and specific architectural constraints to any migration effort. The absence of financial stability data also prevents an assessment of the company's capacity to fund a large-scale migration project.

Compliance

10 in-scope frameworks identified; showing 3.

ISAE 3000 (source) — No public evidence

An ISAE 3000 assurance report could be used to provide independent assurance on various aspects of OS2's operations, such as its data processing activities in relation to GDPR.

Public Procurement Law — No public evidence

OS2 itself is a non-profit association. However, its public authority members are bound by public procurement law when acquiring IT solutions, including those developed through the OS2 community.

Danish Digitalisation Strategy — Evidence found

OS2's core mission is to strengthen public digitalization in Denmark, directly aligning with the goals of the national strategy. It is a key actor in the implementation of this strategy.

Evidence: https://www.os2.eu/os2s-vision-og-mission, https://library.bussola-tech.co/p/digital-ready-legislation-the-danish, https://digital-skills-jobs.europa.eu/en/initiatives/national-strategies/denmark-common-public-digitalisation-strategy-2026-2029

Financials

Financial Resilience Score: 6/10

OS2 is a Danish membership-based public-sector digitalisation association (forening) rather than a commercial company, which fundamentally shapes its financial resilience profile. The organisation benefits from a stable, recurring funding base derived from annual membership contingents paid by Danish public authorities, with 91 public members representing approximately 84% of Danish municipalities as of 2026. This high market penetration in the Danish municipal segment, combined with a two-tier funding model (central membership fees plus product-specific connection fees), provides predictable revenue streams and separates core overhead from product-specific costs. The association operates with a low fixed-cost base through its hosting arrangement with Aarhus Kommune (c/o ITK at Dokk1), reducing property and overhead exposure. Its risk-sharing model, where development costs are shared across participating municipalities based on population size, creates economies of scale as more municipalities join. However, resilience is constrained by essentially 100% exposure to the Danish public sector, the inability to raise external capital as a forening without equity shareholders, and dependency on continued municipal appetite for open-source collaboration against competition from large commercial vendors (KMD, Netcompany) and the national municipalities' association KL. The lack of public financial transparency makes external credit/counterparty analysis difficult, though this is by design for the legal form.

Key strengths: Stable recurring public-sector funding from 91 member authorities, 84% penetration of Danish municipalities, Two-tier funding model separating overhead from product costs, Low fixed-cost base via Aarhus Kommune hosting arrangement, Risk-sharing model with cost allocation by municipal population size, 26-product portfolio supported by 64 private suppliers, Member growth from ~82 (2024) to 91 (2026)

Risk factors: 100% geographic concentration in Denmark, 100% sector concentration in public sector, No ability to raise external capital as a forening, Competition from commercial vendors (KMD, Netcompany) and KL, Dependency on continued municipal appetite for open-source collaboration, Minimal public financial transparency limits counterparty analysis, No filed statutory accounts available in CVR

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report