SMTP.dk ApS

Denmark · owned by HANS JUL LARSEN HOLDING ApS (Denmark) · smtp.dk · 15 vendors

SMTP.dk ApS provides reliable and secure SMTP relay services for businesses in Denmark and beyond, ensuring efficient email delivery.

Resilience scores

Disruption prediction

SMTP.dk ApS has an estimated 17% probability of disruption in the next 6 months.

4 of SMTP.dk ApS's 15 vendors monitored for disruptions.

Technology vendors

Insights

Last updated 2026-09-13 · revision 18

15 direct vendors, 217 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 3/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

SMTP.dk ApS demonstrates low migration readiness. The primary challenge stems from its proprietary 'Custom SMTP Cloud Server Infrastructure' which is hosted 100% in Denmark. This custom, on-premises or private cloud solution suggests a high degree of vendor lock-in to their own environment, requiring significant re-platforming effort to migrate to a different public cloud provider. The explicit mention of the 'Outsourced SMTP' product being 'hosted 100% in Denmark' strongly implies strict data residency requirements, which would severely limit migration options to regions outside Denmark. The absence of information regarding containerization or microservices suggests a potentially monolithic or traditional architecture, further complicating a move to modern cloud-native environments. Critical financial data (revenue concentration, growth history) is missing, making it impossible to assess the company's financial capacity to fund a potentially costly and complex migration. The vendor lock-in risk is also explicitly stated as 'Unknown', adding to the uncertainty. While the website uses Joomla, which might be a simpler component to migrate, it does not offset the significant challenges posed by the core infrastructure and potential data residency constraints.

Compliance

6 in-scope frameworks identified; showing 3.

Danish Bookkeeping Act — Assessment Required

The Danish Bookkeeping Act (Bogføringsloven, Consolidated Act No. 700 of 24 May 2022, as amended by Act No. 480 of 22 May 2024) requires all Danish companies to maintain proper accounting records and store financial data securely, including digital bookkeeping requirements phased in from 2024-2026. As a Danish ApS (private limited company), SMTP.DK ApS is subject to these requirements. Risk is Low because: (1) these are standard business compliance obligations applicable to all Danish companies; (2) the company has been operating since 2007 and is presumably meeting basic accounting obligations; (3) the new digital bookkeeping requirements (mandatory use of approved digital bookkeeping systems) are being phased in and may require attention; (4) no evidence of non-compliance has been found. The Privacy Policy references compliance with bookkeeping law as a basis for data retention.

Evidence: https://smtp.dk/privacy-policy, https://smtp.dk/contact/company, https://datacvr.virk.dk/enhed/virksomhed/29849439

NIS2 (source) — Assessment Required

NIS2 (Directive (EU) 2022/2555), transposed into Danish law via the Danish NIS2 Act (Lov om net- og informationssikkerhed, in force October 2024), is potentially applicable to SMTP.DK ApS. The company operates as a digital infrastructure and managed ICT service provider — specifically a cloud-based SMTP relay and email delivery platform. NIS2 Annex II lists 'Digital Providers' as Important Entities, which includes managed service providers (MSPs) and cloud computing service providers. SMTP.DK's service is a cloud-hosted, multi-tenant email relay infrastructure serving numerous Danish businesses and public sector entities. The key uncertainty is the size threshold: NIS2 applies to medium enterprises (50+ employees OR €10M+ annual turnover). SMTP.DK appears to be a small company (likely fewer than 50 employees based on website presentation and team page), which would place it below the NIS2 size threshold and exempt it — unless it is identified as a critical entity by Danish authorities regardless of size. Risk is Medium because: (1) if the company meets the size threshold, NIS2 obligations are significant (incident reporting, security measures, management accountability); (2) the company serves public sector clients (Statens IT) which may trigger additional scrutiny; (3) Danish Centre for Cyber Security (CFCS) is actively enforcing NIS2; (4) misclassification risk exists. Fines for NIS2 non-compliance can reach €7M or 1.4% of global turnover for Important Entities.

Evidence: https://smtp.dk, https://smtp.dk/contact/company, https://www.cfcs.dk, https://erhvervsstyrelsen.dk/nis2

Danish Marketing Practices Act — Assessment Required

This is a highly material regulation for SMTP.DK ApS. The company explicitly offers email marketing services, including bulk marketing email sending with dedicated IP addresses. The Danish Marketing Practices Act (Consolidated Act No. 426 of 3 May 2017, as amended) and the EU ePrivacy Directive (2002/58/EC, implemented in Denmark via the Electronic Communications Act) impose strict rules on commercial electronic communications, including: (1) opt-in consent requirements for marketing emails to consumers; (2) prohibition on sending unsolicited commercial emails (spam); (3) mandatory unsubscribe mechanisms; (4) sender identification requirements. As an SMTP relay provider enabling marketing email campaigns, SMTP.DK bears both direct obligations (as a service provider) and indirect risk (if clients use the platform for non-compliant spam campaigns). Risk is High because: (1) the company's core business model includes email marketing relay, directly implicating anti-spam and ePrivacy rules; (2) IP reputation damage from client spam campaigns directly harms the company's business; (3) Forbrugerombudsmanden (Danish Consumer Ombudsman) actively enforces marketing rules; (4) the company has a published 'Sending Policy' and spam reporting mechanism, indicating awareness of this risk; (5) fines and reputational damage from spam-related enforcement are significant.

Evidence: https://smtp.dk/sending-policy, https://smtp.dk/report-spam, https://smtp.dk/privacy-policy, https://smtp.dk/terms-of-service, https://www.forbrugerombudsmanden.dk

Financials

Three-year financials

Financial Resilience Score: 6/10

SMTP.dk ApS is a long-established (2007), founder-led Danish niche SaaS/hosting company with approximately 18 years of continuous operation through multiple market cycles, indicating durable, cash-generating capability. The company benefits from recurring subscription revenue typical of SaaS/hosting businesses, providing high revenue visibility. As an owner-operated ApS with modest headcount, it likely maintains a low fixed cost base and low external debt, characteristic of founder-led Danish ApS microservices businesses. The company has differentiated positioning through 100% Danish/EU hosting, GDPR compliance, owned IP ranges, and deliverability expertise, creating a defensible niche against US giants for EU customers with data-residency concerns. Reference customers include public sector (Statens IT) and large Danish brands (Kamstrup, DBU, Kræftens Bekæmpelse), signaling credibility and likely low churn. However, the small scale creates key-person risk, and competitive pressure from global ESPs like Twilio SendGrid, Mailgun, Amazon SES, Brevo, and Postmark poses ongoing margin compression risk. Precise financial figures could not be verified in this analysis, limiting confidence in the resilience assessment.

Key strengths: 18 years of continuous operation since 2007, Recurring subscription revenue model with high visibility, Founder-led ApS with likely low fixed costs and low external debt, Differentiated positioning on Danish/EU hosting and GDPR compliance, Credible reference customers including public sector and large Danish brands, Owned IP ranges and deliverability expertise as defensible niche

Risk factors: Small scale with key-person dependency on founder and small technical team, Competitive pressure from global ESPs (SendGrid, Mailgun, Amazon SES, Brevo, Postmark), Platform/deliverability risk with major inbox providers (Google, Microsoft, Yahoo), Regulatory shifts such as Microsoft removing SMTP AUTH in Exchange (Dec 2026), Limited public financial transparency due to abbreviated ApS filings, Blacklisting incidents or DMARC policy shifts could impact revenue quickly

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report