Siscon A/S Due Diligence

Run due diligence on Siscon A/S: check compliance and get alerts when suppliers or ownership change.

Denmark · owned by BÆRENTZEN ApS (Denmark) · siscon.dk · 17 vendors

SISCON ApS develops and delivers the ControlManager™ platform, a scalable GRC (Governance, Risk, and Compliance) platform. This platform assists organizations in managing compliance with various standards and regulations, including NIS2, GDPR, and DORA. It provides structured compliance work, automates tasks, and offers insights into adherence levels.

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 17 sub-vendors.

Insights

Last updated 2026-09-13 · revision 24

17 direct vendors, 222 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

6 in-scope frameworks identified; showing 3.

Danish Data Protection Act — Evidence found

Evidence: https://siscon.dk/privatlivspolitik/, https://siscon.dk/vilkaar-og-betingelser/

ISAE 3000 (source) — No public evidence

Evidence: https://siscon.dk/controlmanager/, https://siscon.dk/vilkaar-og-betingelser/, https://siscon.dk/privatlivspolitik/

GDPR (source) — Evidence found

Evidence: https://siscon.dk/privatlivspolitik/, https://siscon.dk/vilkaar-og-betingelser/, https://siscon.dk/controlmanager/, https://siscon.dk

Financials

Three-year financials

Financial Resilience Score: 6/10

Siscon A/S benefits from a strong regulatory tailwind driven by rising EU cybersecurity and compliance regulation (NIS2, DORA, GDPR, AI Act adjacencies), which creates structural demand for its ControlManager™ GRC platform among Danish and Nordic mid-market and public-sector customers. The company has approximately 20 years of operating history and recently converted from ApS to A/S, typically signaling growth in size and capital structure warranting stricter governance. Its hybrid revenue model combining recurring SaaS subscriptions with project-based advisory services provides both stability and upsell potential. However, the company is small and highly concentrated in Denmark, with a Danish-only website, exclusively Danish customer references, and a single office in Søborg. It competes against much larger international GRC players (ServiceNow GRC, Archer, OneTrust, LogicGate, Diligent, RSA) as well as Nordic peers (Neupart/Advisera, RISMA), requiring sustained R&D investment. Consulting revenue is people-dependent and scales linearly with headcount unless SaaS mix grows. Limited public disclosure as a small A/S means no analyst coverage or segment reporting is available. Actual financial figures (revenue, EBIT, equity) could not be retrieved in this session and should be verified via datacvr.virk.dk.

Key strengths: Regulatory tailwind from NIS2, DORA, GDPR, and AI Act driving structural demand, Diversified blue-chip Danish customer base including DLR Kredit, Velliv Foreningen, Argo, Nævnenes Hus, Stevns Kommune, Punktum.dk, JMA A/S, and Jobindex A/S, Hybrid revenue model combining recurring SaaS with project-based advisory, ~20 years of operating history, Recent conversion from ApS to A/S suggesting growth and governance maturity, High switching costs in financial-services, public-sector, and utility clients

Risk factors: Small, Denmark-concentrated company with ~100% domestic revenue exposure, Competitive GRC market with much larger international and Nordic peers requiring sustained R&D, Key-person and consulting dependency causing linear scaling with headcount, Limited public disclosure with no analyst coverage or segment reporting, Exposure to Danish public-sector procurement cycles and macro conditions

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report