SCR

Denmark · owned by Independent (Denmark) · scr.dk · 23 vendors

SCR is a Danish IT recruitment agency specializing in finding IT specialists, leaders, and consultants for companies across Denmark. They provide both permanent recruitment and freelance consulting services, with expertise in areas including infrastructure, software development, cybersecurity, and IT leadership.

Resilience scores

Technology vendors

Services catalogue

13 services in catalogue across 7 categories; runs on 23 sub-vendors.

Insights

Last updated 2026-09-13 · revision 13

23 direct vendors, 248 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

SCR exhibits medium migration readiness. Key challenges include the internal tech stack, which features WordPress and a custom 'SCR Portal'. While WordPress is widely supported, the architecture of the custom portal is unknown, potentially posing challenges for migration to modern cloud-native environments if it is monolithic or has tight infrastructure dependencies. The regulatory environment presents a significant hurdle, with high-risk GDPR compliance gaps (status unknown, no audit evidence). Ensuring data integrity, lawful processing, and data subject rights throughout any migration process will require extensive planning and resources. Vendor lock-in risk is moderate; although 'Total Vendors: 0' is stated, 'Total Services: 34' and 'Vendor HQ Countries' imply a vendor ecosystem. The lack of specific vendor information, coupled with the custom portal, suggests a potential for moderate vendor or technology lock-in. Opportunities for migration include SCR's consistent revenue growth, which provides a stable financial base to fund necessary migration efforts. Furthermore, while GDPR imposes clear data residency requirements (EU/EEA), this provides a defined target for cloud infrastructure selection. The geographic diversity of vendor HQ countries (9 unique countries) also offers a broad market for selecting new, potentially more cloud-friendly vendors, reducing reliance on a single region's offerings.

Compliance

6 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Assessment Required

ISO 27001 is highly relevant for SCR given that: (1) SCR processes large volumes of sensitive personal data (CVs, professional profiles, employment histories) through its candidate portal and internal systems; (2) SCR serves enterprise clients in regulated sectors (banking — Bankdata, Spar Nord; energy — Norlys; manufacturing — Grundfos, Nilfisk; food — Danish Crown) who may require ISO 27001 certification from their suppliers as part of vendor risk management; (3) a data breach at SCR could expose thousands of candidate profiles, creating significant reputational and regulatory risk. Risk is MEDIUM because while ISO 27001 is not legally mandated for recruitment agencies, the combination of sensitive data volumes and enterprise client base creates meaningful business pressure to certify. No certification was found.

Evidence: https://scr.dk/esg/, https://scr.dk/hvem-er-vi/, https://www.iso.org/isoiec-27001-information-security.html

Danish Data Protection Act — Assessment Required

The Danish Data Protection Act (Act No. 502 of 23 May 2018, as amended) supplements GDPR with Danish-specific provisions. It is directly applicable to SCR as a Danish company. Key risk areas include: (1) Section 12 restrictions on processing sensitive personal data (e.g., health data, union membership) which may arise in recruitment contexts; (2) Section 11 on processing of CPR numbers (Danish civil registration numbers) — recruitment agencies may handle CPR numbers for background checks or employment contracts; (3) Datatilsynet enforcement — Denmark's DPA has issued fines and reprimands to companies for GDPR/Databeskyttelsesloven violations. Risk is HIGH for the same reasons as GDPR, with the additional Danish-specific obligations around CPR numbers.

Evidence: https://scr.dk/cookiepolitik/, https://www.datatilsynet.dk/english, https://www.retsinformation.dk/eli/lta/2018/502

GDPR (source) — Partially Compliant

SCR is a Danish IT recruitment agency (HQ in Denmark, EU member state) that processes extensive volumes of personal data as its core business activity — including CVs, professional profiles, contact details, employment histories, and candidate assessments for both job seekers and consultants. This makes GDPR not merely applicable but central to their operations. Risk is HIGH because: (1) recruitment agencies are a known enforcement focus for EU data protection authorities due to the volume and sensitivity of personal data processed; (2) the Danish Data Protection Authority (Datatilsynet) is an active enforcement body; (3) SCR operates a self-service candidate portal (scrportalen.dk) where individuals register profiles, creating significant data controller obligations; (4) no publicly accessible privacy policy was found on the website (only a cookie policy), which is a notable gap; (5) no Data Protection Officer (DPO) appointment is publicly disclosed; (6) third-party data sharing via Google Analytics, Google Maps, Wistia, and Facebook Pixel (_fbp cookie) is present without clear adequacy documentation. Fines under GDPR can reach €20M or 4% of global annual turnover.

Evidence: https://scr.dk/cookiepolitik/, https://scr.dk, https://www.datatilsynet.dk/english, https://gdpr-info.eu/

Financials

Three-year financials

Financial Resilience Score: 6/10

SCR demonstrates qualitative resilience through its long operating history since 1986, having survived multiple economic cycles including the dot-com bust, 2008-09 financial crisis, and COVID-19. The company's blue-chip Danish client base (Grundfos, Danish Crown, Norlys, Spar Nord, Bankdata, TV2, Nilfisk, Krifa, SOS International, Kvik) provides diversified enterprise-customer exposure rather than reliance on volatile start-ups, which supports revenue stability. Its dual revenue model combining permanent placement fees with freelance/consultant contracting provides both higher-margin project fees and recurring, higher-volume revenue streams. However, financial resilience cannot be quantitatively verified as actual revenue, EBIT, equity, and employee figures were not retrievable from Danish business registries (datacvr.virk.dk) in this research session. As a privately held Danish company likely filing under Regnskabsklasse B, disclosure is limited (revenue may not be broken out separately, only gross profit). The company faces cyclical exposure to IT hiring demand, with recent slowdowns in Danish tech hiring (2023-24) compressing sector revenues. As a small independent Danish agency, SCR competes with large global players (Hays, Randstad, ManpowerGroup Experis, Adecco/Modis) and specialist boutiques (ProData, Emagine, Ework), creating pricing pressure and key-person dependency risks typical for recruitment agencies of this size.

Key strengths: Long operating history since 1986 (nearly 40 years through multiple economic cycles), Blue-chip Danish client base including Grundfos, Danish Crown, Norlys, Spar Nord, Bankdata, Dual revenue model: permanent placements plus freelance consultant contracts, Focus on structurally growing IT/OT niche with persistent Danish digital skills shortages, Two office locations covering both Jutland (Viby J) and Zealand (Greve) demand centers, Formalized ESG activities indicating maturing, professionally managed mid-sized company

Risk factors: Cyclical exposure to IT hiring demand with recent 2023-24 Danish tech hiring slowdown, Small-firm concentration risk competing against large global players (Hays, Randstad, ManpowerGroup, Adecco), Wage inflation for internal recruiters and specialist consultants compressing margins, Limited public disclosure as private Class B filer (only gross profit, not revenue), Key-person dependency typical for recruitment agencies of this size, Pricing pressure from specialist boutique competitors (ProData, Emagine, Ework)

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report