united-domains AG

Germany · www.united-domains.de · 26 vendors

Resilience scores

Technology vendors

Services catalogue

5 services in catalogue across 3 categories; runs on 26 sub-vendors.

Insights

Last updated 2026-07-30 · revision 6

26 direct vendors, 295 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

united-domains AG's migration readiness is moderate, primarily constrained by stringent data residency requirements and a complex regulatory landscape. The explicit commitment to hosting all email and webspace servers in Germany, subject to strict German data protection standards, significantly limits the choice of potential migration targets to those offering robust EU-based data centers and comprehensive GDPR compliance. This constraint adds complexity and potentially higher costs to any cloud migration strategy. Furthermore, the company faces several "Assessment Required" statuses for critical regulatory frameworks such as NIS2, SOC2, and ISO 27001. Any migration effort would need to meticulously ensure that the new infrastructure, processes, and data handling fully comply with these standards, adding substantial planning, auditing, and potential remediation efforts. While the company demonstrates GDPR compliance and awareness of NIS2, the unconfirmed status of these other certifications represents a significant hurdle. The internal tech stack, while featuring modern elements like a DNS API and AI-powered website builder, does not explicitly detail cloud-native architectures, containerization, or microservices. This suggests that a migration might involve a more traditional lift-and-shift or re-platforming approach rather than a straightforward re-architecture to a fully cloud-native environment, potentially increasing effort and cost. Financial stability, including revenue concentration and growth, is unknown, making it difficult to assess the company's capacity to fund a large-scale migration project. The "Total Vendors: 0" data point is ambiguous, preventing a clear assessment of vendor concentration and potential lock-in risks, which could significantly impact the ease of transitioning services to new providers. While the geographic diversity of vendor HQs (10 countries) might offer some flexibility in selecting new partners, the overall vendor lock-in risk remains unclear.

Compliance

4 in-scope frameworks identified; showing 3.

NIS2 (source) — Assessment Required

As a digital infrastructure provider offering domain registration, DNS services, and hosting services in the EU, united-domains likely qualifies as an Important Entity under NIS2. The company appears to exceed size thresholds (part of IONOS Group) and provides digital services that could fall under NIS2 scope. Non-compliance could result in significant fines and operational restrictions, but the company's existing security measures suggest awareness of cybersecurity requirements.

Evidence: https://www.united-domains.de/unternehmen/kontakt/, https://www.united-domains.de/nis2auskunft/

GDPR (source) — Compliant

As a German company processing personal data of EU residents, GDPR compliance is mandatory. The company has comprehensive privacy policies and data protection measures in place, including a dedicated data protection officer and detailed data processing documentation. However, as a digital services provider handling large volumes of personal data, ongoing compliance monitoring is critical due to the severity of potential fines (up to 4% of annual turnover) and the complexity of data processing operations.

Evidence: https://www.united-domains.de/unternehmen/datenschutz/

ISO 27001 (source) — Assessment Required

As a digital services provider handling customer data and providing hosting services, ISO 27001 certification would demonstrate robust information security management. While not legally mandated, it's increasingly expected by enterprise customers and could be required for certain business partnerships. The company shows security awareness through their domain security offerings, but formal ISO 27001 certification status is unclear.

Evidence: https://www.united-domains.de/domain-security/

Financials

Three-year financials

Financial Resilience Score: 7/10

united-domains operates a highly recurring subscription-based revenue model centered on domain registrations, hosting, email, and SSL certificates, which provides strong revenue visibility and customer stickiness. The company benefits from a blue-chip enterprise customer base including Bechtle, Celonis, TARGOBANK, DekaBank, Payback, and Schufa, supporting stable B2B cash flows. Affiliation with the United Internet AG group provides infrastructure scale, financial backing, and bargaining power with registries, materially strengthening the company's resilience profile. However, the company faces significant price competition from global mass-market registrars (GoDaddy, IONOS, Strato, Namecheap, Cloudflare Registrar) and is exposed to wholesale price increases from registries like VeriSign and DENIC. Growth in the core domain market is structurally low (low single digits globally), and the business is concentrated in the DACH region with limited geographic diversification. Public financial transparency is limited as a private GmbH/AG, restricting external assessment. Historical Bundesanzeiger disclosures suggest revenues in the €25–35M range with positive operating results, but these are not reconfirmed.

Key strengths: Recurring subscription revenue model with high renewal rates, Enterprise customer base including Bechtle, Celonis, TARGOBANK, DekaBank, Payback, Schufa, Higher-margin Brand Protection / corporate domain management business line, Affiliation with United Internet AG group providing scale and financial backing, 20+ years of operating history and established brand in DACH, Diverse product portfolio across 1,000+ TLDs, hosting, email, SSL

Risk factors: Intense price competition from GoDaddy, IONOS, Strato, Namecheap, Cloudflare Registrar, TLD wholesale cost dependence on registries (VeriSign for .com, DENIC for .de), Low structural growth in core domain market (low single digits), Geographic concentration in DACH market, Limited public financial transparency as a private entity

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report