webgrafkort
Denmark · owned by Independent (Denmark) · webgrafkort.dk · 4 vendors
Webgrafkort.dk is a Danish company specializing in web-based mapping solutions and geographic information systems (GIS). They offer services for creating, managing, and displaying interactive maps for various applications.
Resilience scores
- Digital Sovereignty: 50
- Digital Resilience: 4
Disruption prediction
webgrafkort has an estimated 27% probability of disruption in the next 6 months.
Technology vendors
- CSC — Other — United States
- GlobalConnect A/S — Telecommunications — Denmark
- WooCommerce — Technology — United States
- and 1 more
Services catalogue
2 services in catalogue across 2 categories; runs on 4 sub-vendors.
- Email Sending
- Web Hosting & Email Services
Insights
Last updated 2026-07-30 · revision 16
4 direct vendors, 71 subvendors
Direct vendors by controlling owner country (sample)
- United States: 2
- Denmark: 1
- Sweden: 1
Subvendors by controlling owner country (sample)
- Finland: 1
- Luxembourg: 1
- United States: 49
Migration Readiness: 3/10
Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.
webgrafkort's migration readiness is significantly hampered by several factors. A primary challenge is the complete lack of information regarding its internal tech stack and key technologies. Without knowing if the company utilizes cloud-native architectures, containerization, or microservices, it is difficult to assess the ease of migration, but the absence of such details often suggests a more traditional or legacy environment, which typically entails higher migration complexity and cost. The regulatory landscape presents another substantial hurdle; the company faces "Assessment Required" statuses for GDPR, NIS2, SOC2, and ISO 27001, coupled with stringent EU data residency requirements. These compliance obligations will add significant complexity, cost, and risk to any migration project, requiring careful planning and execution to avoid non-compliance. Furthermore, the vendor relationships, characterized by 5 services and an ambiguous "Total Vendors: 0" (implying a limited number of actual vendors), suggest a high potential for vendor lock-in. This could make it challenging and expensive to transition services or data away from current providers. While the company shows stable financial growth, which could support migration investments, the combined technical, regulatory, and vendor-related complexities place its migration readiness at a low level.
Compliance
8 in-scope frameworks identified; showing 3.
ISAE 3000 (source) — Assessment Required
ISAE 3000 is relevant primarily for companies that provide assurance services or need to demonstrate compliance through third-party assurance reports (e.g., ISAE 3402 for service organizations, ISAE 3000 for non-financial reporting). Risk is Low because: (1) ISAE 3000 is not a universal requirement for technology companies, (2) it is most relevant for financial service providers, auditors, or companies with significant outsourced processing, (3) there is no evidence webgrafkort.dk operates in sectors where ISAE 3000 is commonly mandated.
Evidence: https://www.iaasb.org/publications/international-standard-assurance-engagements-isae-3000-revised-assurance-engagements-other-audits, https://fsr.dk/english
ISO 27001 (source) — Assessment Required
ISO 27001 is an internationally recognized information security standard. While voluntary, it is increasingly expected of technology companies by enterprise customers, public sector clients, and as part of NIS2 compliance demonstration. Risk is Medium because: (1) technology companies without ISO 27001 face competitive disadvantage in enterprise and public sector markets, (2) ISO 27001 certification can serve as evidence of NIS2 cybersecurity risk management compliance, (3) Danish public procurement often favors or requires ISO 27001 certified vendors, and (4) absence of certification may indicate immature security controls.
Evidence: https://www.iso.org/standard/27001, https://www.iso.org/isoiec-27001-information-security.html, https://www.ds.dk/en/standards/it/information-security
Danish Data Protection Act — Assessment Required
The Danish Data Protection Act supplements GDPR with national specifications and is directly applicable to all Danish companies. Risk is High for the same reasons as GDPR, with the additional layer of Danish-specific requirements (e.g., processing of CPR numbers - Danish personal identification numbers - requires specific legal basis and security measures). Datatilsynet actively enforces both GDPR and the Danish Data Protection Act.
Evidence: https://www.retsinformation.dk/eli/lta/2018/502, https://www.datatilsynet.dk/english, https://www.datatilsynet.dk/english/gdpr/danish-data-protection-act
Financials
Three-year financials
- 2024:
- 2023:
- 2022:
Financial Resilience Score: null/10
No financial data was successfully retrieved for Webgrafkort.dk from the Danish financial databases searched. The research report indicates that multiple search approaches were attempted across Danish financial databases to locate the company's CVR number and financial records, but no concrete financial figures, ratios, or operational metrics were returned. Without access to revenue, EBIT, equity, or any balance sheet data, a meaningful financial resilience assessment cannot be constructed. The company appears to be a small Danish private entity for which public financial disclosure may be minimal or the data retrieval was unsuccessful. A reliable resilience score requires at minimum revenue trends, profitability indicators, and equity position, none of which are available here.
Risk factors: No financial data available to assess solvency or liquidity, CVR number could not be confirmed, limiting database verification, Small private Danish company with potentially limited public disclosure obligations, Inability to verify operational continuity or revenue trends
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.