WelcomeBob Group ApS

Denmark · owned by Independent (Denmark) · welcomebob.com · 87 vendors

WelcomeBob Group ApS develops and operates a smart digital door intercom platform that allows residents, property managers, and businesses to answer the door and manage access via smartphone. The system features plug-and-play 5G hardware, video calling, and a cloud-based admin panel, replacing traditional intercom and key-fob systems. It serves housing associations, dormitories, coworking spaces, and commercial properties across Scandinavia.

Resilience scores

Disruption prediction

WelcomeBob Group ApS has an estimated 17% probability of disruption in the next 6 months.

38 of WelcomeBob Group ApS's 87 vendors monitored for disruptions.

Technology vendors

Insights

Last updated 2026-09-13 · revision 90

87 direct vendors, 523 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

WelcomeBob Group ApS exhibits high migration readiness. Their tech stack is modern, cloud-native, and API-first, with cloud infrastructure hosted in Europe-West and a web-based SaaS admin panel. This architecture, designed for interoperability and integrations with third-party systems like iLOQ, Salto, Boligflow, and ProBo, significantly reduces the complexity and effort typically associated with migrating legacy systems. The company's strong financial stability, backed by substantial funding rounds, ensures ample resources are available to fund any necessary migration initiatives. WelcomeBob also benefits from flexible data residency options, with data centers available in the US, EU (Ireland and Frankfurt), and Australia, allowing them to meet diverse regulatory and customer requirements during a migration. Their robust regulatory compliance (GDPR, HIPAA, SOC 2, ISO 27001, CCPA, NIS2 awareness) means they have established processes and controls that can be adapted to new environments, streamlining compliance aspects of migration. While the 'Total Vendors: 0' entry is contradictory, the presence of 127 services with vendor headquarters in 19 unique countries suggests a diverse vendor landscape. This diversity, coupled with an API-first approach, implies a lower risk of vendor lock-in, although the specific 'Vendor Lock-in Risk: Unknown' remains a factor to consider. The modular nature suggested by their integrations and cloud-native approach further enhances their ability to migrate components or the entire platform with relative ease.

Compliance

8 in-scope frameworks identified; showing 3.

GDPR (source) — Partially Compliant

WelcomeBob is headquartered in Denmark (EU), making GDPR universally applicable. The company processes significant volumes of personal data including names, phone numbers, email addresses, physical access logs, video streams, and location data for residents, customers, and end-users of its smart intercom platform. The privacy policy demonstrates clear GDPR awareness — it references the regulation explicitly, defines Data Controller/Processor roles, mentions Data Processing Agreements, and outlines data subject rights. Data is stored in the 'Europe-West' region. However, the risk is rated Medium rather than Low because: (1) no independent GDPR audit or DPO appointment is publicly evidenced; (2) the company processes biometric-adjacent data (video streams, access logs) which carry heightened sensitivity; (3) third-party processors outside the EU/EEA are acknowledged without naming them; (4) the company is a cloud SaaS provider acting as both Data Controller and Data Processor for customers, creating dual compliance obligations; (5) as a small company (~12-15 staff), dedicated compliance resources may be limited. The risk is not High because the company has a published privacy policy, explicit GDPR references, DPA framework, and data residency in EU.

Evidence: https://welcomebob.com/en/privacy-policy, https://welcomebob.com, https://welcomebob.com/en/data-access, https://welcomebob.com/en/data-deletion

SOC 2 (source) — Assessment Required

SOC 2 is a voluntary framework developed by the AICPA for cloud service providers and SaaS companies, assessing controls around Security, Availability, Processing Integrity, Confidentiality, and Privacy. WelcomeBob is a cloud-based SaaS platform that processes personal data (access logs, user credentials, video metadata) on behalf of its customers, acting as a Data Processor. Enterprise and institutional customers (property management companies, housing associations, dormitories) increasingly require SOC 2 Type II reports as part of vendor due diligence. Risk is rated Medium because: (1) WelcomeBob is a cloud SaaS provider — the primary target audience for SOC 2; (2) the company processes sensitive access control data on behalf of customers; (3) absence of SOC 2 certification could be a commercial barrier with larger enterprise customers; (4) however, SOC 2 is voluntary and the company's current customer base (housing associations, SME property managers) may not yet be demanding it. The risk is not High because SOC 2 non-compliance carries no regulatory penalty — only commercial risk.

Evidence: https://welcomebob.com/en/privacy-policy, https://welcomebob.com/en/products/admin-panel

Radio Equipment Directive — Assessment Required

WelcomeBob manufactures and sells physical intercom hardware with built-in 5G SIM connectivity. The Radio Equipment Directive (RED) applies to all radio equipment placed on the EU market, requiring CE marking, technical documentation, and conformity assessment. Risk is Medium because: (1) the company sells physical hardware with wireless radio capabilities (5G, potentially Wi-Fi/Bluetooth); (2) RED compliance is mandatory for placing such products on the EU market; (3) non-compliance could result in product recalls, market withdrawal, and fines; (4) no CE marking documentation or RED Declaration of Conformity has been publicly evidenced on the website.

Evidence: https://welcomebob.com/en/products/doorphone, https://welcomebob.com

Financials

Three-year financials

Financial Resilience Score: 5/10

WelcomeBob Group ApS presents a mixed resilience profile based on qualitative assessment, as specific financial figures could not be retrieved from the Danish CVR register in the source research. On the strength side, the company benefits from a subscription-based business model with long-dated contracted revenue: the WelcomeBob Complete plan carries a 6-year commitment at DKK 695/unit/month, creating substantial visible ARR and high customer lifetime value. The customer base includes institutional, credit-worthy Nordic real-estate players such as NREP, Balder, Jeudan, and Newsec, which reduces counterparty risk. Additionally, the hardware-plus-SaaS model creates switching costs through physical installation, long contracts, and integrations with iLOQ, alarms, and EV chargers. However, several risk factors weigh on resilience. The group holding entity (CVR 43644041) was allocated in 2022, suggesting a young reporting history with limited public financial track record. The hardware-intensive business model with subsidised device economics (DKK 4,995 device bundled into monthly fees) creates capex intensity and margin sensitivity to payback duration. As a small Danish PropTech scale-up, the company is likely still in a growth-stage cash burn phase, and working capital and inventory risk typical of hardware businesses apply. Competitive pressure from established digital intercom vendors (2N, Aiphone, Doorbird, Akuvox) also poses ongoing market risk. Without access to the årsrapport figures for revenue, EBIT, and equity, a definitive resilience score cannot be assigned, so a mid-range score reflects the balanced qualitative signals.

Key strengths: Long-dated recurring subscription revenue with 6-year contract commitments, Institutional Nordic real-estate customer base (NREP, Balder, Jeudan, Newsec), Hardware+SaaS switching costs and platform integrations, Nordic multi-market footprint (Denmark, Sweden, Norway), Sector tailwinds in PropTech and smart-building adoption, PropTech Denmark membership

Risk factors: Young group holding entity (CVR allocated in 2022) with limited reporting history, Hardware capex intensity and subsidised device economics, Concentration on Danish housing/administrator market, Competitive threats from established intercom vendors (2N, Aiphone, Doorbird, Akuvox), Working capital and inventory risk typical of hardware businesses, Likely growth-stage cash burn common to small Danish PropTech scale-ups

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report