Company Insights

OSPN customer relationships

Explore interactive graphBrowse insights index
OSPN customer relationship map

OneSpan (OSPN) — customer map and commercial implications for investors

OneSpan sells cloud and on-premises identity and digital agreement software to large financial institutions and enterprises, monetizing primarily through subscription licensing and service contracts with a growing shift toward cloud-delivered authentication and digital-signature offerings. Recent customer announcements underscore OneSpan’s position as a vendor of record for high‑security banking implementations and as a partner in FIDO passwordless authentication rollouts — outcomes that support predictable, recurring revenue but also concentrate risk in major banking relationships. For a deeper view into how customer relationships translate to revenue and risk, visit https://nullexposure.com/.

What recent customer wins say about commercial traction

OneSpan’s recent publicized relationships are concentrated in financial services and identity partners — the company is moving customers from legacy hardware token models toward cloud FIDO solutions and SaaS signatory workflows. Winning implementations with major Japanese banks and channel partners like SCSK and Ping Identity reinforces both OneSpan’s enterprise credibility and its go‑to‑market mix: direct sales for marquee deals and partnerships for scale. These wins fit a broader strategy of recurring subscription revenue and international deployment, supporting OneSpan’s valuation multiple that reflects steady EBITDA conversion and strong margin profiles.

The relationships we tracked (plain-English summaries)

SCSK Corporation

OneSpan was selected alongside SCSK to help deliver a phishing‑resistant mobile banking solution for Sumitomo Mitsui Trust Bank, indicating a channeled implementation role for SCSK in Japan’s banking market. Source: Fintech.Global coverage, 19 November 2025 — https://fintech.global/2025/11/19/sumitb-taps-onespan-and-scsk-for-phishing-proof-banking/.

SuMiTB

SuMiTB has teamed with SCSK and OneSpan to strengthen mobile banking security, adopting OneSpan’s cloud FIDO authentication approach to reduce phishing risk for customers. Source: Fintech.Global, 19 November 2025 — https://fintech.global/2025/11/19/sumitb-taps-onespan-and-scsk-for-phishing-proof-banking/.

Ping Identity

Ping Identity entered a strategic partnership to offer OneSpan’s FIDO‑enabled solutions through its identity platform, enabling customers to eliminate passwords and adopt stronger authentication at scale. Source: QuantisNow reporting on OneSpan news, FY2026 — https://www.quantisnow.com/insight/onespan-appoints-m-samy-ibrahim-as-chief-revenue-officer-to-3694336.

Sumitomo Mitsui Trust Bank (SuMiTB) — Japan’s largest trust bank

Sumitomo Mitsui Trust Bank publicly deployed OneSpan’s cloud FIDO authentication to combat phishing threats in its mobile banking channel, representing a high‑profile enterprise reference in APAC for OneSpan’s security solutions. Source: BiometricUpdate, November 2025 — https://www.biometricupdate.com/202511/onespans-cloud-based-fido-authentication-helps-japans-largest-trust-bank-combat-phishing-threats.

Company‑level constraints that shape how OneSpan runs the business

The publicly reported constraints in OneSpan’s disclosures and press coverage read as guiding operational realities rather than isolated facts. Investors should treat these as company‑level signals:

  • Contracting posture — subscription and flexible deployment. OneSpan sells primarily via subscription licensing while supporting both cloud and on‑premises models, which drives recurring revenue stability but requires ongoing platform investment to convert and retain customers.
  • Customer concentration — material but manageable. The top 10 customers accounted for about 20% of revenue in 2024, a sign of concentration that increases revenue volatility if a major account churns, but also reflects strong enterprise relationships that can be upsold.
  • Counterparty profile — very large enterprises and public sector exposure. OneSpan’s customer base tilts heavily to blue‑chip banks and government customers, which elevates deal size, contract life, and implementation complexity.
  • Geographic footprint — global with APAC and EMEA importance. Revenue is reported across the Americas, EMEA, and APAC; APAC showed growth in software authentication while some EMEA hardware volumes declined, signaling regional variation in product mix.
  • Channel and partner model — multi‑modal distribution. Solutions are sold direct and through distributors, resellers, systems integrators and OEMs, enabling scale but introducing channel risk and margin dilution.
  • Portfolio mix and maturity — shifting from hardware to cloud software. The business has both hardware authenticators and cloud software (OneSpan Sign, Notary, Identity Verification). The company is sunsetting legacy product lines (e.g., Dealflo) and emphasizing cloud authentication, signaling product maturation and margin improvement over time.

How these constraints translate into investor‑level risks and opportunities

  • Opportunity — recurring revenue and high gross margins. The subscription and cloud shift increases revenue visibility and supports OneSpan’s operating margins (operating margin TTM ~21%), with software becoming the primary growth driver.
  • Risk — customer and regional concentration. Top customers represent a material share of revenue and large banking relationships dominate APAC and EMEA outcomes, so geopolitical or regulatory shifts in those regions can move the top line.
  • Opportunity — partnership leverage for distribution. Alliances like the Ping Identity relationship accelerate adoption of passwordless authentication across existing identity stacks and create routes to cross‑sell OneSpan Sign and identity services.
  • Risk — product lifecycle management. Declining hardware volumes and sunsetting legacy products create transitional costs and require successful migration strategies to protect ARR.

For a focused view on how these customer dynamics affect contract-level revenue and risk, explore our platform at https://nullexposure.com/.

Investment checklist — what to watch next

  • Track net retention and subscription ARR growth to validate the cloud migration thesis.
  • Monitor top‑10 customer concentration and any single-customer revenue movements in quarterly filings.
  • Watch APAC and EMEA regional performance metrics for evidence of repeatable expansion outside the Americas.
  • Follow partner announcements (Ping Identity, SCSK) for pipeline acceleration and channel revenue contribution.

Bottom line

OneSpan is demonstrably executing a transition to cloud‑first authentication and digital agreement software, monetized through subscription licensing and amplified by strategic partners. The recent Japanese bank deployment and the Ping Identity partnership are concrete signals of product-market fit in enterprise banking and identity ecosystems, supporting recurring revenue growth while keeping concentration and channel risks visible. For continued tracking of these customer relationships and their revenue implications, visit https://nullexposure.com/ for deeper customer intelligence and actionable signals.