.avif)
How the market for IT service providers is structured
The German market for IT service providers, known locally as Systemhäuser, is highly fragmented and dominated by mid-sized firms: a large number of regional providers with ten to a hundred employees face a small number of national groups. Within the market, four service areas with different business models can be distinguished.
IT infrastructure. Providers plan and install networks, servers, storage, workplaces and data centre technology. The business is project-driven, depends on vendor partnerships and usually carries the lowest margins because the hardware share is high. For many providers, it is nevertheless the entry point into the client relationship.
Cloud and software. This covers migration to public and private cloud environments, the licensing and roll-out of standard software such as Microsoft 365 or ERP systems, and integration into existing landscapes. Revenue is shifting from one-off licence sales to recurring subscriptions managed by the provider. Software and cloud are the fastest-growing segments of the German IT market.
Managed services and support. Managed service providers take over the day-to-day operation of their clients' IT for a monthly fee: monitoring, patch management, backup, helpdesk and workplace operations. The business is recurring, contractually bound over several years and scales through standardisation and automation. According to the Lünendonk study 2025, managed services are the largest revenue block of the leading IT service companies in Germany, at 20.8%.
IT security. Firewalls, endpoint protection, identity management, security operations and incident response plans are increasingly in demand as a standalone service, often likewise as a managed service. The segment requires certified specialists and benefits from regulatory pressure. For many providers, it is the area with both the strongest growth and the most acute staff shortage.
From an M&A perspective, this distinction is central. Infrastructure business is valued on its project pipeline, managed services on recurring revenue and contract duration, IT security on specialisation and certification. Buyers value the four areas accordingly, and the share of managed services in total revenue is usually the first figure they ask for. Our page on the Software & Technology sector gives an overview of the environment.
Which developments are structurally driving demand for IT services
Three developments are shifting demand, regardless of whether anyone wants to buy or sell.
Digitalisation and cloud migration. Bitkom expects the German IT market to grow by 5.4% to EUR 170.8 billion in 2026. The software business is set to grow by 9.9% to EUR 58.1 billion, cloud software alone by 21.9% to EUR 42.5 billion, and infrastructure-as-a-service by 22.3%. IT services are growing at 3.1%. For providers, this means that licence sales are moving to the cloud, and with them the business is moving from one-off revenue to ongoing operations. Whoever manages the migration usually runs the environment afterwards. In the Lünendonk survey, 85% of IT service companies named cloud transformation and 86% named IT modernisation as the strongest demand drivers.
Skills shortage on the client side. According to the Bitkom study of September 2026, around 79,000 IT positions in Germany are unfilled. The number has almost halved since 2023, yet 78% of companies still report a shortage of IT specialists, and 76% expect it to intensify again. A mid-sized company with 200 employees can hardly afford its own security team and cannot find one on the labour market either. It buys in the service. In the Lünendonk study, 84% of the companies surveyed cite limited internal resources as a reason for the rising demand for managed services. The skills shortage therefore works in two directions: it drives demand for external IT services and at the same time limits the growth of the providers themselves.
Regulation of IT security. The German NIS 2 Implementation Act came into force on 6 December 2025. It extends IT security obligations from fewer than 5,000 to around 30,000 companies and institutions in Germany, including many mid-sized firms in industry, logistics, healthcare and energy. Those affected must register with the Federal Office for Information Security (BSI), demonstrate risk management and report security incidents. Breaches carry fines of up to EUR 10 million or 2% of global revenue. Supply chain requirements add to this, as large clients pass their obligations on to suppliers. 89% of the companies surveyed by Lünendonk expect cyber security requirements to drive demand for managed services. For providers with security expertise, this creates a multi-year project and operations business.
Why the market for IT service providers is consolidating
Fragmented providers are meeting clients who demand infrastructure, cloud, operations and security from a single source, around the clock and with verifiable certifications. A provider with 20 employees can hardly maintain 24/7 operations, its own security operations centre and specialists for Microsoft, networks, backup and compliance all at once. That is the core of the consolidation logic. Added to this is the capital requirement: automation platforms, data centre capacity and the development of in-house AI offerings cost money that a single owner cannot inject indefinitely. Lünendonk notes that mid-sized IT service companies must broaden their portfolios organically or through acquisitions, and that a large number of private equity investors have entered the market as a result.
At the same time, many providers face a generational change. Many were founded in the 1980s and 1990s, and their founders are approaching retirement. Where no successor can be found within the family or the team, a sale to a larger provider or an investor-backed group becomes the obvious solution. Mergers resolve both bottlenecks at once: they spread investment across a larger base, create development paths for skilled staff and provide an answer to the succession question. In the software and IT market of the DACH region, Mergermarket counted 591 announced transactions in 2025, and M&A Review expects further platform building in IT services in 2026, above all through add-on acquisitions in the context of founder succession.
Recent transactions show how this works in practice:
- January 2026: DATAreform from Freiberg am Neckar acquires Systemhaus Knoblauch from Dogern on the Upper Rhine, founded in 1987. The founder thereby resolves his succession, while the buyer gains clients, a presence in southern Baden and an expanded managed services portfolio.
- May 2026: Medialine acquires the systems house and managed services business of Heidelberg IT with 24 employees. The seller will focus on security, data centre operations and AI in future.
- June 2026: The Nobix group, backed by Liberta Partners, acquires Blackpoint (around 30 employees, cyber security, backup and telephony), its third company in 2026. The group now has more than 300 employees at 13 locations, and Blackpoint's managing directors stay on board.
- October 2026: The managed service provider 8its from Mering acquires Infomas, an Augsburg-based provider founded in 1997. As no successor could be found within the family, the two founders had engaged an adviser to search for a buyer. They stay on for two years, and all employees transfer.
- November 2026: The connexta group, backed by Fremman Capital, acquires Haus & Gross IT.Services from Saarbrücken (20 employees, managed services for smaller companies and medical practices), its fifth company in 2026. The two founders thereby resolve their succession and stay on board until the end of 2027. The group has around 850 employees at 25 locations and revenue of about EUR 230 million.
Five transactions in one year, from the investor-backed group to the regional MSP, one common pattern: buyers acquire companies with recurring revenue contracts, well-established teams and solid client relationships that fit into a larger group as a platform or as an add-on. At the same time, providers are divesting business units that no longer fit their own focus.
Who buys IT service providers
Three buyer groups shape the market. Their motives differ, and anyone wishing to position their company strategically should know all three.
Financial investors and the groups they back. They pursue buy-and-build, the step-by-step acquisition of regional providers to form a national group. It starts with a platform, a larger and professionally organised company, for example with a high share of managed services. Add-ons follow: smaller providers that add a region, a specialisation or a client group. The market is attractive to these buyers because it combines recurring, contractually bound revenue with structural growth. Owners can sell a majority stake and remain invested through a reinvestment.
Large IT service groups. The national providers have been growing through acquisitions for years and have the means to do so. These buyers look for regional presence, skilled staff and client access, often among mid-sized companies and public sector clients. The acquired business usually keeps its name and location at first and is integrated into the group step by step.
Telecommunications and technology groups. Network operators and technology providers are acquiring cloud and managed services expertise to offer their business customers more than connectivity. They pay for scale, certifications and vendor partnerships. For financial investors, they are the typical buyer at the end of a buy-and-build phase.
Which IT service providers are particularly attractive from an M&A perspective
Not every provider is a target. Buyers examine recurring criteria against which owners can measure their own company.
Share of recurring revenue. Managed services contracts, maintenance contracts and managed cloud subscriptions make revenue predictable. Buyers look at what share of revenue recurs every month, how long the contracts run and how high the churn rate is. A provider with 60% recurring revenue is valued differently from one that lives off hardware projects.
Specialisation and certifications. High-tier vendor partnerships, ISO 27001, industry expertise, for example in healthcare or public administration, and an in-house security offering set a provider apart from the mass of generalists. These are exactly the capabilities that groups acquire rather than build themselves.
Client structure. A broad base of mid-sized clients with long-standing relationships stands for stability. Buyers examine a strong concentration on a few key accounts separately.
Skilled staff and retention. Certified technicians, low staff turnover and a team that runs projects independently are the real asset in this market. Buyers assess not only headcount, but how long people stay and whether they support the change of ownership.
Standardisation and processes. A documented service portfolio, uniform tools for monitoring and ticketing and clearly defined contracts make integration into a group easier. Those who have put their house in order face fewer deductions in due diligence.
Second management tier. Team leaders, service managers and sales leads who manage clients and operations without the owner are the key valuation lever. The less the company depends on the founder, the broader the pool of buyers.
What this means for owners of IT service providers
Consolidation has been under way for years and follows a pattern that MIND also observes in adjacent markets. For owners, this raises questions that bring clarity even without any intention to sell.
The first is business succession. Where client relationships, vendor contacts and technical knowledge depend on the owner, an internal solution is difficult to finance and difficult for buyers to value. A sale to a group can close this gap, provided the business already runs without the founder.
The second concerns structure: a full sale or a sale with reinvestment. Those who reinvest share in the group's increase in value and in a later onward sale. Those who sell completely gain clarity. Both routes are legitimate and suit different stages of life.
The third is the company's own role in the buyer landscape. A provider with a high share of managed services, a management team and systems can itself become a platform, while a smaller specialist fits as an add-on. Valuation and room for manoeuvre after the transaction differ significantly.
The fourth concerns timing. The share of recurring revenue can be increased deliberately ahead of a sale. This usually takes some time and changes the valuation noticeably. Those who start early sell from a stronger position.
There is no general recommendation to sell. What has changed is the number of options. Demand for external IT services is structural and underpinned by regulation. Financial investors, large IT service groups and corporates are specifically acquiring providers with recurring revenue, security expertise and stable teams. For their owners, this opens up additional options for growth, succession and company sale.
MIND is available at any time for a confidential discussion of strategic options.
