Business groups
Regardless of size and sector, we ensure that the D-seal's criteria are tailored to your company's specific risks and complexity. Learn more about our business group classifications and your path to obtaining the D-seal.
The D-seal is relevant for all types of businesses.
The D-seal is relevant for all types of businesses, but the number of criteria your company needs to meet is tailored individually. When you start the D-seal's self-assessment, one of the first steps is to classify your business group that determines how many criteria your company must meet. This way, a smaller company, such as a locksmith, does not have to meet as many criteria as a large IT company. The D-seal has the following business groups, reflecting the risks and complexity faced by companies.
Group 1
Small company with few employees (1 to 9) or sole trader with limited revenue (up to DKK 7.9 million), e.g. craftsman, consultant, programmer, etc.
A company that falls into Group I (based on number of employees and revenue), but processes specific categories of personal data (e.g. health details, race, sexuality), will be placed in Group II.
A small company that falls into Group I (based on number of employees and revenue), but is a supplier of software or IT services, will be placed in Group III.
Group II
Small company, typically with 10 to 49 employees and revenues from DKK 8 to 155.9 million. This business type may store or process specific categories of personal data, e.g. medical practice, carpentry firm or small IT company.
A company that falls into Group I (based on number of employees and revenue), but processes specific categories of personal data (e.g. health details, race, sexuality), will be placed in Group II.
A small company that falls into Group II (based on number of employees and revenue), but is a supplier of software or IT services, will be placed in Group III.
Group III
Medium-sized company with many employees (50 to 249) and revenues between DKK 156 and 313 million. This business type will always process personal data, e.g. small pension companies, manufacturers, etc.
A small company that falls into Group I or II (based on number of employees and revenue), but is a supplier of software or IT services, will be placed in Group III.
Group IV
Large company with revenues of DKK 313 million and above, and many employees (250+). Typically processes large volumes of personal data and sensitive data, e.g. exchange-listed companies.