UP42 GmbH

Germany · up42.com · 12 vendors

UP42 GmbH is a geospatial platform that provides access to Earth observation data, including satellite imagery, aerial, and elevation data. It offers a marketplace, APIs, and SDKs, enabling developers and data scientists to find, order, process, and analyze geospatial data. The platform supports various applications such as vegetation management, infrastructure monitoring, and disaster response.

Resilience scores

Disruption prediction

UP42 GmbH has an estimated 11% probability of disruption in the next 6 months.

9 of UP42 GmbH's 12 vendors monitored for disruptions.

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 12 sub-vendors.

Insights

Last updated 2026-07-30 · revision 6

12 direct vendors, 210 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

UP42 exhibits very high migration readiness due to its highly modern, cloud-native, and containerized technology stack. The extensive use of Google Cloud Platform (GCP), Google Kubernetes Engine (GKE), Kubernetes, Docker, and a microservices architecture means the company is already operating in a highly portable and flexible environment. The adoption of open-source tools and languages like PostgreSQL, Python, Golang, and TypeScript further reduces proprietary vendor lock-in, making it easier to transition components or even entire workloads to alternative cloud providers or environments if needed. The existing GDPR compliance framework, including the use of Standard Contractual Clauses for international data transfers, means that the company has established processes for data handling that can be adapted to new environments. While highly ready, a full migration, especially to a different cloud provider, would still involve challenges. The reliance on specific GCP services such as Google Cloud Pub/Sub and Google BigQuery would require re-architecting or finding equivalent services in a new environment. Data residency requirements, particularly for sensitive geospatial data and customer-specific mandates, would necessitate careful planning to ensure compliance in a new infrastructure. The 'Assessment Required' status for NIS2, SOC2, and ISO 27001 means that any migration effort would need to factor in achieving these certifications, potentially adding complexity and cost. Financial stability, with missing revenue data, remains an unknown factor for funding a large-scale migration project. The vendor relationships, while moderately diverse across 16 services from 3 countries, still point to a concentration on GCP for core infrastructure, which would be the primary migration effort.

Compliance

4 in-scope frameworks identified; showing 3.

NIS2 (source) — Assessment Required

UP42 operates in the technology sector providing geospatial data services, which could potentially fall under 'digital providers' or 'ICT service management' categories in NIS2. As a German company, they are subject to EU regulations. However, without clear information about their exact size (employee count/revenue) and specific service classifications, a detailed assessment is needed to determine if they meet the thresholds for Essential or Important Entities under NIS2.

GDPR (source) — Compliant

UP42 demonstrates strong GDPR compliance with comprehensive privacy policy, appointed DPO, proper legal bases for processing, and data subject rights implementation. However, they process significant amounts of personal data and transfer data to third countries (USA) which creates ongoing compliance obligations and risks. The company shows good compliance practices but must maintain vigilance given the complexity of international data transfers.

Evidence: https://up42.com/legal/privacy, https://up42.com/legal/imprint

ISO 27001 (source) — Assessment Required

As a technology company handling sensitive geospatial data and operating a cloud platform, ISO 27001 certification would be expected for information security management. This is particularly important given their B2B customer base and the sensitive nature of some geospatial data. The risk is medium because lack of ISO 27001 could impact customer confidence and competitive positioning, especially with enterprise and government customers.

Evidence: https://trust.up42.com

Financials

Three-year financials

Financial Resilience Score: 7/10

UP42 GmbH benefits from strong parent backing as a subsidiary of Airbus Defence and Space, which provides funding stability, customer access, and privileged supply of Airbus-owned satellite data (Pléiades, Pléiades Neo, SPOT, TerraSAR-X). This parent relationship is the dominant resilience factor and significantly de-risks the standalone entity from a funding and going-concern perspective. The asset-light marketplace model (no satellite ownership) keeps capex low, with the business essentially functioning as software plus procurement orchestration. However, the company faces meaningful risks including strategic dependency on Airbus's continued commitment, a crowded competitive landscape (SkyFi, Arlula, EOS Data Analytics, Sentinel Hub, and direct sales channels of data providers), and uncertain profitability given that marketplace economics in EO are still maturing with typically thin gross margins on resold third-party imagery. Standalone audited financials are not publicly available due to small-company disclosure exemptions under German HGB rules, limiting external visibility into the P&L.

Key strengths: Parent backing by Airbus SE provides funding stability and customer access, Asset-light marketplace model with low capex requirements, Diversified supplier base (Airbus, Planet, Capella, ICEYE, Maxar partnerships), Privileged access to Airbus-owned satellite data, Growing structural demand for Earth observation across multiple verticals

Risk factors: Strategic dependency on Airbus's continued commitment and priorities, Crowded competitive landscape with multiple marketplace and direct competitors, Profitability uncertainty due to thin margins on resold third-party imagery, Limited public disclosure under small-company GmbH exemption, Geopolitical and export-control exposure on satellite imagery (dual-use restrictions), Internal competition with Airbus's own Intelligence/OneAtlas offering

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report