Resiliate Due Diligence

Run due diligence on Resiliate: check compliance and get alerts when suppliers or ownership change.

Denmark · owned by Celanin ApS (Denmark) · resiliate.io · 14 vendors

Resiliate is an automated tech vendor due diligence platform focused on analysing digital sovereignty and resilience of companies and technology vendors. It helps organisations assess and build digital resilience by evaluating the sovereignty and risk posture of their technology supply chain. The platform targets enterprises seeking to understand and manage their exposure to digital dependencies.

Resilience scores

Disruption prediction

Resiliate: 1 critical incidents expected in the next three months, based on its recorded incident history.

Forecast estimates are rounded up to whole numbers.

No active incident reported (its status page, as of 2026-11-09 17:55 UTC)

9 of Resiliate's 14 vendors have incident tracking.

Technology vendors

Services catalogue

3 services in catalogue across 2 categories; runs on 14 sub-vendors.

Insights

Last updated 2026-11-04 · revision 17

14 direct vendors, 238 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

9 in-scope frameworks identified; showing 3.

NIS2 (source) — No public evidence

The company operates in the cybersecurity sector, likely falling under the 'digital infrastructure' or 'ICT service management' categories, which are covered. Applicability is certain, but classification as 'Essential' or 'Important' is unknown.

Evidence: https://amatas.com/blog/what-is-nis2-key-changes-and-how-they-impact-your-organization/, https://www.bureauveritas.co.uk/cybersecurity/network-and-information-security-directive-nis2, https://digital-strategy.ec.europa.eu/en/news/new-rules-boost-cybersecurity-eus-critical-entities-and-networks, https://cpl.thalesgroup.com/compliance/emea/nis2-directive-goal-enhance-cybersecurity-across-the-eu

GDPR (source) — Evidence found

The company is established in Denmark, an EU member state, making the regulation directly applicable to all its processing of personal data, including that of employees, customers, and suppliers.

Evidence: https://resiliate.io/privacy

CER Directive (source) — No public evidence

As a provider of cybersecurity services, Resiliate could be considered part of the 'digital infrastructure' sector. EU member states must identify critical entities by July 2026; applicability depends on this designation.

Evidence: https://www.critical-entities-resilience-directive.com/, https://www.pwc.com/ee/en/services/advisory-services/crisis-management/critical-entities-resilience-directive.html, https://www.dpo-consulting.com/blog/eu-ai-act, https://www.dlapiper.com/en/insights/topics/cer-critical-entities-resilience-directive, https://www.bsigroup.com/en-US/insights-and-media/insights/blogs/what-is-the-eu-critical-entities-resilience-directive-cer/, https://www.sabd.dk/l/en-tre-nye-love-traeder-i-kraft-danmark-styrker-beredskabet-og-sikkerheden-i-kritisk-infrastruktur/

Financials

Three-year financials

Financial Resilience Score: 4/10

Resiliate is a micro-cap Danish ApS that was effectively dormant from 2022-2024 and relaunched operationally in FY2025. The filed accounts show a deliberate inflection: operating losses expanded from DKK -8K to DKK -145K as real activity began, while equity swung from DKK -206K to +DKK 111K via an estimated DKK ~450K founder capital injection. This recapitalization removes the technical insolvency risk that persisted for three years and restores a positive balance sheet. The company is bootstrapped with extremely low burn (~DKK 145K / ~EUR 19K annually), giving it tactical flexibility, and it operates in a regulatory tailwind theme (EU digital sovereignty, DORA, NIS2, third-party cyber risk). Founder Lars Neupart is a credible repeat GRC entrepreneur (previously Neupart), and early traction signals include public analyses of Danish ministries' IT supplier dependencies and expansion into OT supply-chain mapping for critical infrastructure. However, resilience is constrained by scale: DKK 111K of equity provides only a few months of runway at current burn, the product is still in BETA on a freemium model with no disclosed revenue, zero average employees were recorded in FY2025 (founder-run, extreme key-person risk), and the TPRM market is contested by much larger players (OneTrust, SecurityScorecard, UpGuard, Bitsight). Continued founder funding or external capital will be required.

Key strengths: Recapitalized to positive equity (DKK +111K) in FY2025, ending three years of technical insolvency, Extremely low cash burn (~DKK 145K annually) under a bootstrapped model, Credible repeat founder (Lars Neupart, previously Neupart GRC), Regulatory tailwinds: EU digital sovereignty, DORA, NIS2, third-party cyber risk, Early public traction: Danish ministries' IT supplier analyses, OT supply-chain expansion

Risk factors: Micro-cap scale - equity provides only a few months of runway at current burn, Zero average recorded employees; extreme key-person/founder dependency, No disclosed revenue (Class B micro-entity exemption) - traction unverifiable from filings, Product still in BETA on a freemium model, not monetized at scale, Crowded TPRM market with much larger international competitors (OneTrust, SecurityScorecard, UpGuard, Bitsight), Dependency on continued founder funding or external capital raise

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report