Videotool

Denmark · owned by Independent (Denmark) · videotool.dk · 6 vendors

Nordisk Net TV ApS, operating as VideoTool, develops and provides a comprehensive video platform for managing, streaming, and publishing video content. Their solutions include Video On Demand, livestreaming, and secure GDPR-compliant video handling, serving public sector entities and private companies. The platform also offers a CMS for creating web TV platforms and landing pages.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 6 sub-vendors.

Insights

Last updated 2026-09-13 · revision 1

6 direct vendors, 115 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Videotool exhibits a good level of migration readiness due to its modern, cloud-based technology architecture, which includes scalable media libraries, web platforms, native mobile apps (iOS/Android), and REST APIs. This architecture suggests a modular and portable system. The company's strong existing regulatory compliance framework, particularly with GDPR and ISAE 3000 Type II, means they have established processes and expertise for handling sensitive data, which is a significant advantage when migrating to a new compliant environment. The use of standard protocols like RTMP, REST API, and LTI further enhances interoperability and reduces proprietary lock-in. A key challenge for migration is the strict data residency requirement, with most products hosted on EU servers and VideoTool SECURE specifically on Danish servers. Any migration strategy would need to rigorously adhere to these geographical data storage mandates, potentially limiting the choice of new providers or regions. While the tech stack is modern, the absence of explicit mentions of containerization or microservices, which are hallmarks of highly agile cloud-native environments, means there might be further optimization opportunities to enhance migration flexibility. The 'Total Vendors: 0' is confusing, but the implied vendor relationships (Hetzner, ECIT, Microsoft Azure) suggest some dependencies that would need careful management during a migration, though the use of standard technologies mitigates severe lock-in. The lack of financial stability data also means the company's capacity to fund a potentially complex migration project is unknown.

Compliance

8 in-scope frameworks identified; showing 3.

GDPR (source) — Partially Compliant

Videotool (operated by Nordisk Net TV ApS / NNTV) is headquartered in Denmark (EU), explicitly markets itself as a GDPR-compliant platform, maintains a published privacy policy, has appointed a named Compliance Officer (Janne Bjørn Larsen), and undergoes annual IT audits with ISAE 3000 Type II reports. These are strong positive indicators. However, the status is 'Partially Compliant' rather than 'Compliant' because: (1) no independent third-party GDPR audit certificate is publicly available for download — the ISAE 3000 report must be requested directly; (2) the privacy policy does not explicitly name all sub-processors or third-country transfer mechanisms; (3) no Data Protection Officer (DPO) registration with Datatilsynet (the Danish DPA) is publicly confirmed. The risk level is Medium because the company clearly invests in compliance infrastructure, but gaps in public documentation and the absence of a confirmed DPO registration create residual risk. Enforcement by Datatilsynet is active in Denmark, and fines under GDPR can reach €20M or 4% of global annual turnover.

Evidence: https://www.videotool.dk/privatlivspolitik, https://www.videotool.dk/secure, https://www.videotool.dk/home, https://eur-lex.europa.eu/legal-content/DA/TXT/PDF/?uri=CELEX:32016R0679&from=DA, https://www.datatilsynet.dk

WCAG 2.1 Web Accessibility — Compliant

Videotool explicitly markets its video player as WCAG 2.1 compliant and states support for web accessibility requirements ('understøtter lovkrav webtilgængelighed'). The EU Web Accessibility Directive (transposed in Denmark) requires public sector websites and mobile apps to meet WCAG 2.1 AA standards. Since Videotool serves Danish public authorities (municipalities, ministries, regions), WCAG compliance is a contractual and legal requirement. The company's explicit WCAG 2.1 support (subtitles, keyboard navigation, speed adjustment, audio description, additional audio tracks, portrait/landscape formats) demonstrates active compliance. Risk is Low given the explicit compliance claim and product features.

Evidence: https://www.videotool.dk/home, https://www.videotool.dk/videoplayer, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016L2102, https://www.digitaliser.dk/resource/4882/artefact/tilgaengelighed

ISO 27001 (source) — Partially Compliant

Videotool's hosting provider (ECIT Solutions A/S, used for VideoTool SECURE) holds ISO 27001 certification, and the company's security framework (security policy, risk assessment, access control, encryption, incident management, change management, business continuity) aligns substantially with ISO 27001 requirements. However, no ISO 27001 certificate for NNTV ApS / Videotool itself (as the software developer and service operator) has been found publicly. The risk is Medium because: (1) the absence of direct ISO 27001 certification for NNTV means the company cannot formally claim the standard; (2) enterprise and public sector clients increasingly require ISO 27001 from SaaS vendors; (3) the existing ISAE 3000 Type II audit partially compensates but does not replace ISO 27001 certification. Obtaining ISO 27001 would strengthen the company's compliance posture significantly.

Evidence: https://www.videotool.dk/secure, https://www.videotool.dk/privatlivspolitik, https://www.iso.org/isoiec-27001-information-security.html

Financials

Three-year financials

Financial Resilience Score: 6/10

Nordisk Net Tv ApS (VideoTool) is a ~25-year-old Danish SaaS company with a recurring subscription revenue model and a highly sticky blue-chip public-sector customer base including Danish ministries (Statsministeriet, Finansministeriet, Undervisningsministeriet), Digitaliseringsstyrelsen, multiple regions and municipalities, and universities. The recurring nature of SaaS contracts combined with Danish public-sector procurement stickiness supports revenue visibility and resilience. Regulatory certifications (GDPR, ISAE 3000 Type II, KOMBIT FKI, Uni-Login, WAYF) create a genuine compliance moat against larger global competitors. However, as a small Danish ApS, the company likely has a limited capital base and is exposed to concentration risk from a small number of large public accounts. Its geographic footprint is effectively 100% Denmark, limiting diversification. Competitive pressure from global platforms (Vimeo, Kaltura, Brightcove, Microsoft Stream) and Nordic peers (24-7, Qbrick), together with lumpy public-procurement cycles and vendor dependency on Hetzner and ECIT Solutions, temper the resilience score. Actual financial figures (revenue, EBIT, equity) could not be retrieved in this session, so this score reflects qualitative factors only.

Key strengths: Recurring SaaS subscription revenue model, Sticky blue-chip Danish public-sector customer base (ministries, regions, municipalities, universities), Regulatory moat via GDPR, ISAE 3000 Type II, KOMBIT FKI, Uni-Login, WAYF compliance, Broad integrated product suite (DAM, TV, LIVE, Editor, Subtitle, Podcast, SECURE, etc.), ~25 years of operating history through multiple tech and financial cycles

Risk factors: Small private ApS with likely limited capital base, Customer concentration risk from a small number of large public accounts, Geographic concentration — effectively 100% Denmark, Competitive pressure from global platforms (Vimeo, Kaltura, Brightcove, Microsoft Stream) and Nordic peers, Infrastructure dependency on Hetzner (Germany) and ECIT Solutions (Denmark), Lumpy revenue and fee compression from Danish/EU public-procurement cycles (SKI/EU tenders)

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report