SEPO Due Diligence

Run due diligence on SEPO: check compliance and get alerts when suppliers or ownership change.

Denmark · owned by AX VI itm8 Holding III ApS (Denmark) · sepo.dk · 15 vendors

SEPO is a Danish-developed secure email solution that encrypts and decrypts emails using OCES certificates to protect sensitive data. It offers top-class security and compliance, including ISAE 3000 type II, ISAE 3402 type II, and ISO 27001 certifications, with all data stored in Denmark. The solution is flexible, scalable, and compatible with various systems, serving both public and private companies in Denmark.

Resilience scores

Technology vendors

Services catalogue

9 services in catalogue across 3 categories; runs on 15 sub-vendors.

Insights

Last updated 2026-09-13 · revision 1

15 direct vendors, 192 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

5 in-scope frameworks identified; showing 3.

SOC 2 (source) — No public evidence

Evidence: https://itm8.dk/om-itm8/certificeringer

ISAE 3000 (source) — No public evidence

ISO 27001 (source) — No public evidence

Evidence: https://itm8.dk/om-itm8/certificeringer

Financials

Three-year financials

Financial Resilience Score: 6/10

SEPO as a standalone entity has been fully absorbed into itm8, a large Danish IT services and cybersecurity group with 1,700+ employees and a multi-city presence across Denmark and Sweden. The combined entity benefits from strong market tailwinds driven by NIS2 directive compliance requirements, rising ransomware threats, and broad digital transformation demand across Nordic public and private sectors. The breadth of the itm8 service portfolio — spanning cybersecurity, ERP, cloud, AI, managed services, and hardware — reduces single-service revenue concentration risk and supports recurring revenue streams. The Top-5 Microsoft Solutions Partner status in Denmark, including a rare European-level Support Services Designation, signals deep vendor relationships and a structurally advantaged position in Microsoft licensing and managed services revenue. Geographic diversification across seven Danish offices and a Swedish presence in Malmö further reduces regional concentration risk. However, meaningful financial analysis is severely constrained by the private nature of the entity and the inaccessibility of CVR registry filings during this research session. No revenue, EBIT, or equity figures could be verified from official sources. The score reflects the qualitative strength of the underlying business model and market position, tempered by significant opacity risk and the inability to confirm financial health through audited data. Additional risks include integration execution challenges from rapid M&A-driven growth, competitive pressure from Atea, Bechtle, and KMD, potential revenue volatility once the initial NIS2 compliance wave subsides, and persistent talent retention challenges in the tight Nordic IT labor market.

Key strengths: 1,700+ employee scale providing delivery capacity advantages over smaller Danish IT firms, Top-5 Microsoft Solutions Partner status in Denmark with rare European-level Support Services Designation, Broad multi-service portfolio across cybersecurity, ERP, cloud, AI, managed services, and hardware, Strong NIS2 and Nordic digital transformation market tailwinds, Multi-city Danish presence (7 offices) plus Sweden reducing regional concentration risk, M&A-driven consolidation strategy consistent with Nordic IT managed services sector trends

Risk factors: Private company opacity — no public financial disclosures beyond statutory CVR filings, CVR registry and all major Danish financial databases were inaccessible during research — financials unverifiable, Integration execution risk from rapid acquisition-led growth absorbing entities such as SEPO, High competitive pressure from Atea, Bechtle, and KMD in Danish IT services and cybersecurity, NIS2 compliance-driven demand may create revenue volatility once initial compliance wave subsides, Tight Nordic IT labor market creates persistent key-person and talent retention risk

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report