Peak Privacy ApS Due Diligence

Run due diligence on Peak Privacy ApS: check compliance and get alerts when suppliers or ownership change.

Denmark · owned by Brainweaver ApS (Denmark) · peakprivacy.eu · 7 vendors

Peak Privacy ApS is a Danish company specialising in mobile app privacy compliance testing and certification. It scans mobile apps to detect hidden data flows, tracker activity, and regulatory non-compliance across frameworks such as GDPR, ePrivacy, DORA, NIS2, CCPA, and PIPL. The company also provides audit documentation, compliance guidance, and attested consent tooling, and its scanning engine is used by Denmark's Agency for Digital Government (Digitaliseringsstyrelsen) for official app compliance enforcement.

Resilience scores

Technology vendors

Insights

Last updated 2026-11-04 · revision 2

7 direct vendors, 133 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

6 in-scope frameworks identified; showing 3.

SOC 2 (source) — Evidence found

SOC 2 is an assurance framework for service organizations, widely expected by customers in North America and increasingly elsewhere, to verify internal controls related to security, availability, processing integrity, confidentiality, or privacy.

Evidence: https://peakprivacy.eu/trust-center, https://peakprivacy.eu/

GDPR (source) — Evidence found

The company is established in Denmark, an EU member state, making it directly subject to the General Data Protection Regulation (GDPR) for all its personal data processing activities.

Evidence: https://peakprivacy.eu/privacy-policy

ISAE 3000 (source) — No public evidence

ISAE 3000 is an international standard for assurance engagements on non-financial information. It can be used to provide assurance over GDPR compliance or security controls, often for European customers who may request it instead of a SOC 2 report.

Financials

Financial Resilience Score: 3/10

Peak Privacy ApS is a very newly formed Danish company (founded 2025, CVR 45354059) with no publicly retrievable annual report as of the research date. Without any disclosed revenue, EBIT, or equity figures, financial resilience must be assessed qualitatively. As a typical Danish ApS, the company likely has only minimum share capital (DKK 20,000) plus any additional paid-in capital, meaning limited equity cushion and high dependence on founder/early investor cash. On the positive side, the company has a credible marquee reference customer in Digitaliseringsstyrelsen (the Danish Agency for Digital Government), a clear product niche in automated mobile app privacy/compliance scanning, and operates in a regulatory tailwind environment (GDPR, ePrivacy, NIS2, DORA, ISO 27001, SOC 2). The subscription/release-triggered model lends itself to recurring revenue once scaled. However, risks dominate at this stage: start-up stage with no track record, likely high customer concentration, a crowded competitive set (Didomi, Cybot/Cookiebot, Usercentrics, Osano, Ethyca, Enzuzo), regulatory dependency, and zero public financial transparency until the first årsrapport is filed. Overall resilience is low to moderate, reflecting early-stage status rather than operational weakness.

Key strengths: Marquee reference customer: Danish Agency for Digital Government (Digitaliseringsstyrelsen), Broad regulatory coverage (GDPR, ePrivacy, NIS2, DORA, ISO 27001, SOC 2, PIPL, CCPA), Clear technical niche in automated mobile app compliance scanning, Subscription/recurring revenue model potential, Regulatory tailwinds in EU privacy enforcement

Risk factors: Start-up stage with no public financial track record, Likely minimum ApS share capital (~DKK 20,000) and limited equity cushion, High customer concentration risk from single marquee reference, Crowded competitive set with well-funded international players, Regulatory dependency - demand tied to enforcement intensity, No published årsrapport available on CVR as of research date, Single-product concentration with no diversification

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report