Orphaned Access: The Silent Cybersecurity Gap
Benedikt Langer
5 Min. Read Time Service accounts, API keys, and AI agents often outnumber human accounts. Many of these ...
VINCI Energies is paying All for One nearly double the share price, a premium of around 95 percent. The price has a reason. It values something that has become scarce on the market: an SAP partner with thousands of locked-in mid-market customers and predictable service revenues. The deal shows how infrastructure giants are buying the application layer rather than building it themselves.
Key Takeaways
Related:SAP Joule and NVIDIA shatter AI silos / Sovereignty trumps price: the new procurement signal
On 16 July, All for One signed a merger agreement with a VINCI Energies subsidiary. The group is launching a cash offer of €67.50 per share and the board will recommend acceptance. Major shareholders, holding about 55 percent, have already committed. For decision-makers, the headline is less interesting than the logic behind it.
What is a public takeover offer? In a public takeover offer, a buyer proposes to purchase all shares of a listed company at a fixed price. The bid only becomes effective once a minimum acceptance threshold is met and antitrust clearance is secured; until then, the target remains independent.
A conglomerate the size of VINCI-€75 billion in group revenue-could build its own SAP consultancy. It isn’t doing that because time and customer relationships cannot be bought like compute capacity. All for One brings more than 4,500 customers in the DACH region’s mid-market, plus Poland. Layer on a business model rich in recurring revenues from multi-year service contracts for mission-critical processes.
Those customer relationships are the real asset. Once established, an SAP partnership rarely changes hands. Such stickiness cannot be replicated quickly; it must be purchased. Axians, VINCI Energies’ ICT brand, already covers fibre-optic networks, data centres and cybersecurity, but only parts of the SAP applications business. All for One plugs the gap.
The sell-side rationale is equally sobering. International expansion costs money and reach-both of which a corporation with a presence in 120 countries can deliver faster than the capital market. All for One gains access to a broad European customer base in industries such as manufacturing, energy, telecommunications, and the public sector, where it can sell its SAP and consulting services.
For the owners, the timing is favorable. A 95.5 percent premium on the closing price of 15 July 2026 unlocks value the stock had not previously reflected. Major shareholders who commit early lock in this price rather than wait for an uncertain organic revaluation.
A premium of this magnitude is rare on the German market. It says less about All for One than about the valuation of SAP transformation expertise as a whole. Switching to S/4HANA ties mid-market firms up for years, and migration capacity is limited. A partner with a locked-in customer base is therefore a scarce asset. Securing that position either requires deep pockets or a decade-long, painstaking build-up.
This places the deal in a broader pattern. Infrastructure, operations, security, and application consulting are converging because customers increasingly demand a seamless partner. The transaction is an early, visible manifestation of that consolidation.
More revealing than the price are the commitments. A domination and profit-and-loss transfer agreement is ruled out until 1 January 2029. As long as VINCI does not hold every share, at least one independent supervisory-board member remains. Filderstadt stays headquarters and main administrative site. The board also intends to contribute its own shares.
This is no coincidence. It is a retention mechanism. In knowledge-based services, value resides in people, not assets. Moving too fast risks losing precisely the talent for which the premium was paid. Temporary autonomy is the price of keeping management and staff on board. For decision-makers integrating acquisitions themselves, this is a revealing template.
Every stakeholder procuring SAP, cloud, and security services faces the operational consequences. A single vendor providing everything from management to business processes reduces coordination effort and interface risks. Yet it also increases dependency and weakens your own negotiating position. This trade-off was theoretical-until now.
The counterargument deserves serious consideration. A best-of-breed approach keeps supplier competition alive and prevents a single failure from disrupting the entire chain. Opting for an all-in-one provider trades convenience for concentration risk. The right answer depends on your organization’s maturity: teams with strong governance benefit from multiple partners, while lean IT departments gain from bundled procurement.
Before the next contract round, conduct a quick, honest assessment. Five questions separate the convenient choice from the resilient one:
Answers will vary by organization. The real mistake is not asking the question at all-especially when a one-stop offering looks so neat on paper.
No. A merger agreement has been signed that outlines the proposed offer. The transaction will only take effect once the acceptance threshold of 75 percent is reached and antitrust approval is granted. Until then, it remains pending.
The 95.5 percent markup reflects the scarcity of a captive SAP customer base. Reliable transformation expertise with recurring revenue streams cannot be built quickly and must be acquired at a premium.
A domination agreement is ruled out until 2029, an independent supervisory board member will remain, and Filderstadt will stay the headquarters. These assurances protect autonomy and primarily aim to retain key personnel.
Not hastily, but deliberately. The deal forces a clear choice between a one-stop provider and a best-of-breed approach. The right answer depends on your governance capacity and acceptable concentration risk.
It fits a pattern. Infrastructure, operations, security, and application consulting are converging as customers seek end-to-end partners. Further mergers between infrastructure and application providers are likely.
Read more on Digital Chiefs
Digital ChiefsThe data claim already applies to existing fleetsDigital ChiefsNIS2 liability for management boards applies despite registrationDigital ChiefsToken-OPEX: Inference Controls, Not the Seat BudgetMore from the MBF Media Network
cloudmagazinVINCI’s offer for All for One: Network meets SAP Cloud mybusinessfutureAll for One and VINCI: What SAP customers can expectImage source: AI-generated (July 2026)