Schmitto ApS Due Diligence

Run due diligence on Schmitto ApS: check compliance and get alerts when suppliers or ownership change.

Denmark · owned by MO-GRUPPEN ApS (Denmark) · schmitto.dk · 16 vendors

Schmitto ApS is a Danish IT security consultancy run by Ole Schmitto, offering practical cybersecurity and GDPR advisory services to small and medium-sized enterprises (SMEs). The company helps businesses prioritize IT security strategies that maintain operational capability and flexibility, without relying on buzzwords or overly complex reports. Services include board-level risk advisory, fractional CISO engagements, GDPR compliance support, and acting as a bridge between business leadership and IT teams.

Resilience scores

Technology vendors

Insights

Last updated 2026-11-01 · revision 32

16 direct vendors, 197 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

8 in-scope frameworks identified; showing 3.

DORA (source) — No public evidence

The Digital Operational Resilience Act applies to financial entities and their critical ICT third-party service providers. Applicability for Schmitto ApS depends on whether it is designated as a critical service provider to the financial sector.

SOC 2 (source) — No public evidence

A SOC 2 report provides assurance on controls at a service organization relevant to security, availability, processing integrity, confidentiality, or privacy. It is a common framework for cybersecurity firms, particularly those with US customers.

Danish NIS Act — No public evidence

This is the Danish transposition of the NIS/NIS2 directives. If Schmitto ApS is in scope for NIS2 as a provider of ICT or digital services, it will be bound by this national law and supervised by the Danish Centre for Cyber Security (CFCS).

Financials

Three-year financials

Financial Resilience Score: 5/10

Schmitto ApS is a consistently profitable micro-entity consultancy that has stabilised at approximately DKK 350K gross profit and DKK 61K net profit over the past two fiscal years. Liquidity is healthy at 171.8% and solvency at 34.1%, with positive equity of DKK 170K comfortably above the DKK 40K ApS minimum share capital. The business benefits from long-tenured client relationships (many >10 years), high-profile customers including C20-listed companies, and group backing via parent MO-GRUPPEN ApS. Return on assets of 12.3% indicates efficient use of the modest asset base. However, resilience is materially constrained by extreme key-person dependency: the entire operation rests on founder Ole Schmitto as sole employee. The equity base dropped sharply from DKK 574K to DKK 171K between FY2022/23 and FY2023/24 despite positive earnings, consistent with a large owner distribution, leaving only a modest cash cushion. Historical volatility is significant - gross profit swung from DKK 853K (FY2021/22) to DKK 256K with a loss (FY2022/23) before recovering. With total assets of only DKK 500K and no geographic or workforce diversification, the business has limited capacity to absorb client losses or founder incapacity. Succession planning is a structural concern given the founder's long career trajectory.

Key strengths: Consistent profitability with DKK 61K net profit in each of the last two fiscal years, Healthy liquidity ratio of 171.8% (up from 163.1%), Long-tenured client relationships, many exceeding 10 years, High-profile customer base including C20-listed companies, Deep founder expertise in IT security dating to 1987, Group backing via parent MO-GRUPPEN ApS, Positive equity cushion of DKK 170K above DKK 40K ApS minimum

Risk factors: Extreme key-person dependency - single employee (owner-director), Sharp equity decline from DKK 574K to DKK 171K in FY2023/24 suggests large distribution, Small absolute scale with total assets of only DKK 500K, Historical revenue volatility - gross profit swung from DKK 853K to DKK 256K between FY21/22 and FY22/23, No geographic diversification - essentially 100% Denmark, Succession risk given founder's long career trajectory and prior exits, Revenue opacity under micro-entity reporting exemption, Solvency ratio declined from 38.7% to 34.1%

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report