SAC-IT A/S Due Diligence
Run due diligence on SAC-IT A/S: check compliance and get alerts when suppliers or ownership change.
Denmark · owned by EPICO GROUP ApS (Denmark) · www.sac-it.dk · 30 vendors
SAC-IT A/S provides stable, secure, and efficient IT operations for both private and public companies. Their services encompass IT consulting, planning, implementation, installation, operation, monitoring, and support for servers, PCs, printers, and cloud solutions.
Resilience scores
- Digital Sovereignty: 27
- Digital Resilience: 5
- Financial Resilience: 6
Technology vendors
- GitLab Inc. — Technology — United States
- Sophos Ltd. — Cybersecurity — United Kingdom
- TwentyThree — Media & Marketing — Denmark
- and 29 more
Services catalogue
2 services in catalogue across 2 categories; runs on 30 sub-vendors.
- DNS Hosting
- Personal Data Processing
Insights
Last updated 2026-09-13 · revision 19
30 direct vendors, 242 subvendors
Direct vendors by controlling owner country (sample)
- United States: 19
- Japan: 1
- Belgium: 1
Subvendors by controlling owner country (sample)
- Sweden: 7
- United Kingdom: 2
- United States: 174
Compliance
9 in-scope frameworks identified; showing 3.
SOC 2 (source) — No public evidence
Evidence: https://www.sac-it.dk/48/compliance, https://www.sac-it.dk/45/cloud, https://www.sac-it.dk/42/managed-services
ISAE 3000 (source) — No public evidence
Evidence: https://www.sac-it.dk/48/compliance, https://www.sac-it.dk/42/managed-services
ISO 27001 (source) — No public evidence
Evidence: https://www.sac-it.dk/48/compliance, https://www.sac-it.dk/39/it-sikkerhed, https://www.sac-it.dk/33/om-sac-it
Financials
Three-year financials
- 2025: gross profit DKK 24.5M, EBIT DKK -1.54M, equity DKK 3.18M
- 2024: gross profit DKK 25.4M, EBIT DKK -1.68M, equity DKK 2.80M
- 2023: gross profit DKK 22.7M, EBIT DKK 1.13M, equity DKK 6.18M
Financial Resilience Score: 6/10
SAC-IT A/S appears to operate a resilient business model centered on recurring-revenue managed services, cloud, and IT security offerings. These service lines typically generate predictable subscription-based cash flows and healthy gross margins, providing structural stability. The company is strategically positioned to benefit from rising regulatory demand in Denmark (NIS2, DORA, GDPR), which drives sustained need for compliance and security services. Established mid-market customer references such as BabyDan and Sv. Michelsen Chokolade suggest a stable B2B account base. However, without access to actual financial filings from CVR/virk.dk, a definitive resilience score cannot be assigned. Danish MSPs of this profile typically operate in the DKK 30-150M revenue range with limited buffers against churn of large accounts. The company faces meaningful risks from talent dependency in a tight Danish IT labor market, vendor concentration on Microsoft and VMware, cyber-liability exposure inherent to security/backup providers, and consolidation pressure from larger players like itm8, Fellowmind, and Globeteam. The midrange score reflects a qualitatively sound business model tempered by small-company scale risk and undisclosed financials.
Key strengths: Recurring-revenue business model via Managed Services, Cloud, and subscription offerings, Strategic positioning around IT security and compliance (NIS2, DORA, GDPR tailwinds), Established mid-market Danish customer references (BabyDan, Sv. Michelsen Chokolade), Vendor alignment with dominant enterprise stacks (Microsoft 365, Azure, VMware VCF), Active portfolio expansion into AI platform and GRC tooling
Risk factors: Small-company scale risk with limited buffers against large account churn, Talent dependency on certified engineers in a tight Danish IT labor market, Vendor concentration risk on Microsoft and VMware licensing/margin changes, Cyber-liability exposure as a security and backup provider, Consolidation pressure from larger Danish MSPs (itm8, Fellowmind, Globeteam)
Revenue by geography
- Denmark: 100%
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.