Spaak Technologies ApS

Denmark · owned by Independent (Denmark) · spaak.ai · 22 vendors

Spaak Technologies provides AI-powered software solutions for public affairs professionals. The company offers monitoring, assistant, legislative tracking, stakeholder management, and events tools to help organizations track policy developments and streamline public affairs workflows.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-13 · revision 18

22 direct vendors, 264 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 2/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Spaak Technologies exhibits low migration readiness due to a combination of unknown technical architecture, a complex and currently non-compliant regulatory environment, and significant data residency constraints. **Challenges:** * **Unknown Internal Tech Stack:** The most significant challenge is the complete lack of information regarding Spaak Technologies' internal tech stack. Without knowing if their platform is cloud-native, containerized, microservices-based, or a legacy monolith, it is impossible to accurately assess the technical effort, complexity, and cost of a migration. While their 'Key Technologies' (AI, NLP, ML) suggest modern capabilities, this does not guarantee a modern underlying architecture suitable for easy migration. * **Complex Regulatory & Data Residency Environment:** The stringent requirements of GDPR, NIS2, SOC2, and ISO 27001, coupled with the current 'Assessment Required' and 'No audit evidence' status for all, present a major hurdle. Any migration would need to meticulously ensure compliance with these regulations, especially regarding data processing, security, and international transfers. EU data residency requirements mandate careful selection of cloud regions and providers, adding significant complexity and limiting options for data storage and processing (e.g., for AI model training and inference). * **Unknown Financial Capacity:** The absence of growth history (revenue, employees) makes it impossible to assess the company's financial ability to fund a potentially costly and resource-intensive migration project. * **Vendor Lock-in Uncertainty:** The provided data is contradictory ('Total Vendors: 0' vs. 'Total Services: 101' from diverse HQ countries). Assuming they utilize vendors for their 101 services, the actual number of distinct vendors and the level of vendor lock-in are unknown. A high number of services implies numerous integration points, which could complicate migration if vendor contracts are complex or if there's significant reliance on specific proprietary technologies. **Opportunities:** * The company's focus on modern 'Key Technologies' like AI, NLP, and Machine Learning suggests that the team likely possesses modern skill sets, which could be an asset during a migration if the underlying architecture is also modern. However, this remains speculative without concrete internal tech stack details.

Compliance

4 in-scope frameworks identified; showing 3.

NIS2 (source) — Assessment Required

NIS2 applicability depends on company size and specific classification. If Spaak qualifies as a 'digital service provider' under NIS2 (which AI platforms often do) and meets size thresholds (50+ employees or €10M+ turnover), they would be subject to NIS2 as an Important Entity.

Medium risk as NIS2 applicability depends on company size and specific classification. If Spaak qualifies as a 'digital service provider' under NIS2 (which AI platforms often do) and meets size thresholds (50+ employees or €10M+ turnover), they would be subject to NIS2 as an Important Entity. Risk is medium because: (1) Size thresholds are uncertain from available information, (2) Digital service provider classification needs verification, (3) Non-compliance penalties are significant but less severe than GDPR, (4) Implementation deadline was October 2024, creating immediate compliance pressure.

ISO 27001 (source) — Assessment Required

ISO 27001 is increasingly expected for AI technology companies handling sensitive data. While not legally mandatory, it's a market requirement for enterprise clients and regulatory compliance.

Medium risk as ISO 27001 is increasingly expected for AI technology companies handling sensitive data. While not legally mandatory, it's a market requirement for enterprise clients and regulatory compliance. Risk factors include: (1) AI platforms require robust information security frameworks, (2) Enterprise clients often mandate ISO 27001 certification, (3) Competitive disadvantage without certification, (4) Foundation for other compliance frameworks (GDPR, NIS2), (5) Cross-border operations increase security complexity.

GDPR (source) — Assessment Required

As a Danish company (EU/EEA) providing AI-powered public affairs technology, GDPR is definitively applicable. The company processes personal data through their platform (customer data, stakeholder information, user accounts).

As a Danish company (EU/EEA) providing AI-powered public affairs technology, GDPR is definitively applicable. The company processes personal data through their platform (customer data, stakeholder information, user accounts). High risk due to: (1) Severe financial penalties up to 4% of annual turnover or €20M, (2) AI processing of personal data requires additional safeguards under GDPR, (3) Cross-border data processing across Europe increases complexity, (4) Public affairs data often includes sensitive political information requiring enhanced protection.

Financials

Three-year financials

Financial Resilience Score: null/10

A quantitative resilience score cannot be calculated without access to the balance sheet and income statement. However, a qualitative assessment can be made based on the company's profile. Spaak Technologies ApS operates in the AI-powered financial technology (FinTech) sector, offering a Software-as-a-Service (SaaS) product. SaaS models typically provide predictable, recurring revenue streams, which contributes positively to financial resilience once a stable customer base is established. As an early-stage technology company, its resilience is highly dependent on its cash reserves and ability to secure funding. Its "runway" (the amount of time before it runs out of money) is the single most critical resilience factor. This information is not public. The company's ability to demonstrate user growth, product-market fit, and a clear path to monetization would be key to securing future funding rounds. The AI and FinTech spaces are highly competitive and capital-intensive. Resilience is tied to the company's ability to innovate and differentiate its product from larger, better-funded competitors. The "ApS" structure limits the liability of the owners, which is a standard and resilient legal setup for a startup. Without visibility into their cash burn rate, debt levels, and revenue traction, this assessment remains speculative.

Key strengths: Predictable, recurring revenue streams (SaaS model), Cash reserves and ability to secure funding, User growth, product-market fit, and a clear path to monetization, Ability to innovate and differentiate its product, ApS structure limits liability

Risk factors: Highly competitive and capital-intensive AI and FinTech spaces, Lack of visibility into cash burn rate, debt levels, and revenue traction

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report