Prewave GmbH

Austria · owned by Independent (Austria) · www.prewave.com · 10 vendors

Prewave is an AI-powered supply chain intelligence platform that helps enterprises identify, monitor, and respond to supply chain risks in real time. The platform covers over 200 risk categories, enables sustainability due diligence and regulatory compliance, and provides multi-tier supplier transparency. It is trusted by major industry leaders including Audi, Ferrari, Lufthansa, and Kärcher, and has been recognised as a Leader in the Gartner Magic Quadrant for Supplier Risk Management Solutions.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-02 · revision 2

10 direct vendors, 176 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Prewave GmbH exhibits high migration readiness, largely due to its advanced and cloud-native oriented technology stack. The inferred use of AWS or GCP, combined with Docker/Kubernetes for container orchestration, indicates an architecture designed for portability and scalability, significantly reducing technical barriers to migration. The core technologies, including Python, NLP, LLMs, and REST APIs, are highly adaptable and widely supported across various cloud environments. Prewave's existing strong regulatory compliance (GDPR, ISO 27001, NIS2) means that robust processes for data handling and security are already in place, which can be adapted to new environments, streamlining the compliance aspects of a migration. However, the strict data residency requirement to store and process all data within the EU (specifically Germany) imposes a clear constraint, limiting potential target regions for migration and adding a layer of complexity to ensure continued compliance. A significant challenge to assessing migration readiness is the complete absence of financial stability data (revenue concentration, growth history), which is critical for determining the company's ability to fund and execute a large-scale migration project. The vendor relationship data is contradictory, stating 'Total Vendors: 0' but also 'Total Services: 36' from vendors in three countries. Assuming Prewave utilizes these 36 services from a moderate number of vendors across 3 countries, this suggests some level of vendor dependency. However, the modern, containerized, and API-driven tech stack inherently reduces infrastructure-level vendor lock-in, providing flexibility in choosing new service providers or migrating existing ones. The 'Unknown' vendor lock-in risk means that potential contractual complexities or dependencies could emerge during a migration.

Compliance

10 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Assessment Required

ISO 27001 certification is highly relevant for Prewave as an AI-powered SaaS platform processing sensitive commercial supply chain data for global enterprise clients including Audi, Ferrari, Lufthansa, and Hilti. Enterprise procurement processes in automotive, aerospace, and manufacturing sectors routinely require ISO 27001 as a vendor qualification criterion. The company's scale (€63M Series B, Gartner Magic Quadrant Leader) suggests it operates at a maturity level where ISO 27001 would be expected. Risk is Medium because: (1) no public ISO 27001 certificate was found, (2) enterprise clients in regulated sectors may require it, (3) absence could create commercial risk. However, ISO 27001 is voluntary, and the risk is primarily commercial rather than regulatory. Austrian and EU regulatory frameworks (NIS2, GDPR) increasingly reference ISO 27001 as a benchmark for 'appropriate technical and organisational measures.'

Evidence: https://www.prewave.com, https://www.iso.org/standard/27001, https://www.prewave.com/company/news-and-press/prewave-named-leader-2026-gartner-magic-quadrant-supplier-risk-management-solutions

CSRD (source) — Assessment Required

CSRD (Directive (EU) 2022/2464) requires large EU companies and listed SMEs to report on sustainability matters using European Sustainability Reporting Standards (ESRS). Prewave GmbH, as a private GmbH (limited liability company) in Austria, is likely below the CSRD thresholds for the initial phases (250+ employees, €40M+ turnover, €20M+ balance sheet for large companies). However, given Prewave's rapid growth (€63M Series B, Gartner Magic Quadrant Leader status), it may approach CSRD thresholds in coming years. Risk is Low currently because: (1) Prewave likely does not yet meet all three CSRD size criteria simultaneously, (2) CSRD is a reporting obligation, not a prohibition, (3) Prewave's platform actively helps clients with CSRD compliance. The company should monitor its growth against CSRD thresholds.

Evidence: https://www.prewave.com/resources/regulatory-frameworks, https://www.prewave.com/solutions/due-diligence, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2464

NIS2 (source) — Assessment Required

Prewave GmbH operates as a B2B SaaS/digital platform provider headquartered in Austria (EU), which places it within NIS2's geographic scope. NIS2 covers 'digital providers' including online marketplaces, online search engines, and cloud computing services — Prewave's AI-powered supply chain intelligence platform may qualify as a 'managed service provider' or 'digital provider' under Annex II (Important Entities). Following its €63M Series B funding round, Prewave likely exceeds the medium enterprise threshold (50+ employees, €10M+ turnover), which would bring it within NIS2 scope. Risk is Medium because: (1) the exact NIS2 sector classification requires formal legal assessment, (2) Austria's NIS2 transposition (Netz- und Informationssystemsicherheitsgesetz 2024 / NISG 2024) is in force, (3) non-compliance penalties can reach €10M or 2% of global turnover for Important Entities. The company has not publicly disclosed NIS2 compliance status or registration with Austrian authorities (RTR/BMI).

Evidence: https://www.prewave.com/company/our-story, https://www.prewave.com/company/news-and-press/prewave-raises-euro63m-series-b-to-revolutionise-supply-chain-risk-management-with-ai-driven-superintelligence-platform, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555, https://www.rtr.at/en/tk/NIS2, https://www.ris.bka.gv.at/GeltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=20012425

Financials

Three-year financials

Financial Resilience Score: 7/10

Prewave GmbH is a well-funded Series B stage Austrian SaaS company that has raised approximately USD 90M+ in total funding, including a €63M Series B in June 2024 led by Hedosophia. This substantial cash injection provides significant runway to execute on its global expansion strategy. The company benefits from powerful regulatory tailwinds including Germany's LkSG (in force since 2023), the EU CSDDD, EU Forced Labour Regulation and EU Deforestation Regulation, all of which create mandatory demand for its supply chain due diligence and monitoring capabilities. The company has assembled a blue-chip customer base including Audi, Ferrari, Lufthansa, Hilti, Kärcher, Endress+Hauser and Dr. Oetker, providing high-quality recurring revenue with long enterprise contract cycles. Analyst validation from Gartner (Leader in 2025 and 2026 Magic Quadrant for Supplier Risk Management), Forrester, and The Hackett Group reduces sales friction with large enterprises. Defensible IP originating from Lisa Smith's PhD research in AI/NLP provides technical differentiation. However, as a Series B scale-up, Prewave is presumed loss-making, though no public EBIT/EBITDA data is available. The proposed CSDDD 'omnibus' simplification package in early 2025 could reduce the number of in-scope companies and soften buying urgency. Competitive intensity is high with well-funded rivals including IntegrityNext, Sphera/riskmethods, EcoVadis, Sedex, and SAP Ariba. As an Austrian GmbH, external stakeholders cannot verify revenue, gross margin or burn rate from statutory filings, creating disclosure opacity.

Key strengths: €63M Series B funding raised in June 2024 led by Hedosophia, ~USD 90M+ total funding raised across seed, Series A and Series B, Strong regulatory tailwinds (LkSG, CSDDD, EU Forced Labour Regulation, EUDR), Blue-chip customer base (Audi, Ferrari, Lufthansa, Hilti, Kärcher, Dr. Oetker), Named Leader in 2025 and 2026 Gartner Magic Quadrant for Supplier Risk Management, Defensible AI/NLP IP originating from TU Wien PhD research, Strong investor syndicate with follow-on capacity (Hedosophia, Creandum, Ventech, Kompas, DN Capital, Speedinvest)

Risk factors: Presumed loss-making as a Series B stage SaaS scale-up, CSDDD omnibus simplification could reduce in-scope companies and demand urgency, High competitive intensity (IntegrityNext, Sphera, EcoVadis, Sedex, SAP Ariba, IBM), Disclosure opacity as private Austrian GmbH - no public revenue/EBIT/equity data, Potential customer concentration risk given small number of very large logos, Unknown cash burn and remaining runway

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report