Palette Software

Sweden · www.palettesoftware.com · 19 vendors

Palette Software AB, now known as Rillion, is a provider of AI-powered automation software for accounts payable processes. Its solutions include invoice capture, matching, approval workflows, multi-entity management, analytics, reporting, and payment automation. The software integrates with various enterprise resource planning systems.

Resilience scores

Disruption prediction

Palette Software has an estimated 11% probability of disruption in the next 6 months.

8 of Palette Software's 19 vendors monitored for disruptions.

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 19 sub-vendors.

Insights

Last updated 2026-07-30 · revision 2

19 direct vendors, 255 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Palette Software exhibits high migration readiness, primarily driven by its highly modern and cloud-native SaaS architecture. The extensive use of AI, ML, LLMs, and a scalable cloud data platform, coupled with REST APIs for ERP integration, indicates a modular, flexible, and adaptable system that would facilitate migration to new environments. The company's established compliance with SOC 1 / SOC 2 Type II, GDPR, and HIPAA suggests mature processes for data governance and security, which are crucial for a smooth migration. The geographic diversity of vendor origins across seven countries implies a reduced reliance on a single vendor ecosystem, potentially easing the transition away from specific vendor technologies. However, key challenges and unknowns include the unspecified data residency requirements, which could introduce significant complexity if strict rules apply. The financial stability data (revenue concentration, growth history) is also missing, making it impossible to assess the company's capacity to fund a major migration initiative. Furthermore, the explicit 'Vendor Lock-in Risk: Unknown' and the confusing 'Total Vendors: 0' data point mean that the actual contractual lock-in with service providers cannot be fully assessed.

Compliance

8 in-scope frameworks identified; showing 3.

HIPAA (source) — Compliant

Rillion explicitly lists HIPAA compliance on its Trust Center certifications page and markets its AP automation solution to the healthcare industry. As a business associate processing invoices and financial data for healthcare organizations in the US, HIPAA compliance is relevant. The company has self-certified HIPAA compliance. Risk is Low because the company has proactively obtained and publicly disclosed HIPAA compliance status, and its AP automation software processes financial/administrative data (not clinical PHI directly), reducing the scope of HIPAA obligations. However, as a business associate, ongoing BAA (Business Associate Agreement) management and technical safeguards remain important.

Evidence: https://www.rillion.com/trust-center/certifications/, https://www.rillion.com/industry/healthcare/

ISAE 3000 (source) — Assessment Required

ISAE 3000 is the international equivalent of SOC 2 (SSAE 18) and is commonly used in European markets for third-party assurance reporting. Rillion has obtained SOC 1 and SOC 2 reports under the US SSAE 18 standard. For EMEA customers, ISAE 3402 (the international equivalent of SOC 1) and ISAE 3000 (broader assurance) may be requested. The company's existing SOC reports provide substantial coverage, but European customers may specifically request ISAE-standard reports. Risk is Low because the company's SOC 2 Type II for the EMEA entity (Rillion AB) provides strong compensating assurance, and ISAE 3000 is not a mandatory regulatory requirement but rather a customer/market expectation in some European contexts.

Evidence: https://www.rillion.com/trust-center/certifications/, https://www.rillion.com/trust-center/

CCPA — Compliant

Rillion explicitly states on its Trust Center certifications page that 'All Rillion entities comply to CCPA.' The company has US operations (Rillion Inc) and serves US customers, making CCPA applicable for California residents' personal data. Risk is Low given the explicit self-certification and the company's B2B focus (CCPA has more limited applicability to B2B data than B2C). The primary CCPA obligations for a B2B SaaS company relate to employee data and website visitor data from California residents.

Evidence: https://www.rillion.com/trust-center/certifications/, https://www.rillion.com/privacy-policy/

Financials

Three-year financials

Financial Resilience Score: 7/10

Palette Software (now Rillion) demonstrates solid financial resilience anchored by a recurring SaaS revenue model in AP automation, which typically features multi-year subscription contracts with high renewal rates. The company benefits from a large installed base of 30,000+ organizations processing 40M+ invoices annually, indicating meaningful scale and revenue predictability. Its mission-critical product is deeply embedded in customer ERP workflows (Microsoft Dynamics, NetSuite, Sage, SAP B1), creating high switching costs and sticky customer relationships. Ownership by Altor Equity Partners since 2021 provides access to capital for growth, bolt-on M&A, and cash needs. Geographic diversification across the Nordics, UK, and US reduces single-market dependency. Prior to acquisition, Palette was reported to have annual revenues around SEK 250-300 million with ~200 employees and was profitable/growing. However, PE ownership typically implies acquisition debt at the group level, creating interest expense and refinancing risk. The AP-automation space is highly competitive with players like Basware, Medius, Tipalti, Bill.com, Coupa, and ERP-native modules from SAP/Oracle/Microsoft. AI-native entrants could commoditize OCR/data-capture capabilities that historically differentiated Palette. Additionally, the rebrand and integration of Palette with Rillion Inc. creates execution risk on culture, product roadmap, and go-to-market strategy.

Key strengths: Recurring SaaS revenue model with multi-year subscription contracts and high renewal rates, Large installed base of 30,000+ organizations processing 40M+ invoices annually, Strong PE sponsor (Altor Equity Partners) with capacity to support growth and M&A, Mission-critical product deeply embedded in ERP workflows creating high switching costs, Geographic diversification across Nordics, UK, and US, Regulatory tailwind from EU e-invoicing mandates (ViDA, Peppol)

Risk factors: Intense competition from Basware, Medius, Tipalti, Bill.com, Coupa, and ERP-native modules, AI-native entrants could commoditize OCR/data-capture differentiation, PE ownership implies acquisition debt and refinancing risk at group level, Rebrand and integration risk merging Palette (Nordic) with Rillion Inc. (US), Continual product investment required to keep up with e-invoicing compliance mandates

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report