CRANEWARE PLC (CRW) — Investment Research Note
Executive summary
Craneware is a UK-listed (AIM) vertical SaaS provider of financial performance, revenue-integrity and 340B-pharmacy software to US hospitals, serving c.40% of registered US hospitals via its cloud Trisus platform (which also embeds a Microsoft/OpenAI-based AI assistant, Trisus Assist). The operating trajectory across FY22–FY26 has moved from post-Sentry integration and mid-single-digit growth, to a step-up to 9% revenue growth and 32% EBITDA margins in FY25, then a stall in FY26 (revenue flat at $206m, NRR down to 100% from 107%) as 340B regulatory ambiguity paralysed customer purchasing. The single most important point for valuation today is that the stock has already de-rated ~57% over 12 months to a ~12× adjusted P/E on a business with $185m of contracted ARR, 90%+ retention, 98% cash conversion, and near-net-cash balance sheet — so the debate is whether the FY26 stall + the July 2026 cyber incident are transitory (fair value) or structural (still expensive on a broken thesis).
Fair value estimate
- Methodology: primary — 12–15× FY26 adjusted diluted EPS of 115.6¢ (≈86p at $1.34/£); cross-checked against EV/adj-EBITDA of 9–11× on $67m EBITDA.
- Assumptions: FY27 revenue reset to ARR of ~$185m (per company 2026-09-21 FY26 finals); adjusted EBITDA margin held ≥30% via cost review; effective tax rate ~24%; £/$ ~1.32; FY28 return to low- to mid-single-digit growth as 340B tailwinds build. No credit given to Trisus OneLink upside beyond current customer discussions.
- Fair-value range: 950p – 1,350p per share, implying market cap of ~£420m – £600m, with midpoint ~1,150p (£513m).
- Current disclosed market cap: £459.5m (share price 1,029.88p).
- Absolute upside to midpoint: ~+12% (view: fair, with modest upside).
Sector context
- Sector classification: Health Care (ICB Super-Sector Health Care) — but functionally healthcare IT / vertical SaaS, closer in economics to enterprise software than to hospitals or pharma.
- Quality profile vs. sector peers: quality above typical Health Care peers (SaaS gross margin 84%, EBITDA margin 33%, ~85% recurring revenue, 21-year average customer tenure, near-net-cash balance sheet); growth in line to slightly below current cohort peers; leverage well below.
- Listed peers: Waystar (WAY), R1 RCM (RCM), Definitive Healthcare (DH), HealthStream (HSTM), Model N (MODN, pre-take-private). Alfa Financial Software or Kainos are the nearest UK-listed vertical-SaaS comparables by profile, though different end-markets.
Investment thesis (3 bullets)
- Deep, high-retention installed base with genuine AI-adjacent optionality. ~40% of US hospitals, top-10 <30% of ARR, no customer >8% of ARR, ≥90% retention across all measures, 21-yr avg tenure; Trisus Assist AI agent now used by 400+ customers on Microsoft Azure, with two AI extensions (Labour Productivity, Reimbursement Intelligence) launched in H2 FY26 2026-09-21 FY26 finals. Proprietary data (200m+ patient encounters) plus Microsoft Frontier partner status is the picks-and-shovels angle for the investor's AI thesis.
- Balance-sheet strength allows patience through the reset. $54.8m cash, $43.5m bank debt (post $25m buyback), $56m undrawn RCF, $100m accordion, 98% operating cash conversion, all covenants met, going-concern comfortable even under severe downside 2026-09-21 FY26 finals. Board still funded 32p total dividend for FY26.
- 340B optionality is real and free at current price. Company has launched Trisus OneLink – Medication ahead of the HRSA rebate pilot restart (1 Jan 2027) and reports rising enquiries; FY27 guidance explicitly excludes any 340B tailwind 2026-09-21 FY26 finals. If the rebate model scales, both new subscription and transaction revenue accrue to Craneware's existing hospital touch-points.
Key risks (3 bullets)
- Cyber incident financial tail is unquantified. Data exfiltration confirmed on 20 July 2026 including customer, partner and employee records; ICO and FBI notified; investigation, regulatory fines, notification costs, litigation and insurance recovery all unresolved 2026-09-21 FY26 finals. Management resetting FY27 revenue partly reflects this uncertainty.
- 340B regulatory regime remains unsettled. FY26 stall was principally 340B: customers could not realise Shelter opportunities, rebate-model licences signed but deferred, transaction revenue slowed 2026-07-03 FY26 trading update. The rebate pilot could be re-postponed, expanded, or replaced — timing risk to the recovery thesis is high.
- NRR fell from 107% to 100% and revenue miss is a first for management. After an 18-year public track record of growth, FY26 was materially below Board expectations even before the cyber event 2026-07-03 FY26 trading update; 2026-09-21 FY26 finals. Execution premium the shares historically enjoyed has been damaged.
Operating leverage
Craneware's cost base is dominated by fixed R&D and platform costs (development spend $59.6m, or 29% of revenue) and largely fixed customer-facing headcount; direct cost of sales (sales commissions, professional-services delivery, transaction-service delivery) is only $33m or 16% of revenue at 84% gross margin 2026-09-21 FY26 finals. The FY26 outturn is a live case study: revenue was flat but the mix shifted (more transaction revenue with lower gross margin) and gross margin compressed 300bp, yet the net operating expense line fell $8.3m via disciplined cost control, delivering adjusted EBITDA growth of 3% on flat revenue and margin expansion to 33%. That implies incremental stripped-out opex was negative; on a normalised basis with revenue upside, incremental contribution margin on SaaS revenue at current scale is plausibly 60–70%. A 10–20% revenue beat over the FY27 reset (say $185m → $205–222m) with cost base already sized down could plausibly add $12–25m to EBITDA — i.e., 20–40% EBITDA uplift, not the 2× "multiple of profit" ideal the investor wants. So genuine operating leverage exists but is second-tier rather than best-in-class, because R&D is already lean and the business is already at 33% EBITDA margins.
Value-trap signals
- 340B rebate revenue explicitly deferred and unable to be recognised — a real, disclosed value contingent on regulatory outcome the company doesn't control 2026-03-02 H1 FY26 results; 2026-09-21 FY26 finals.
- NRR sequential deterioration from 107% (FY25) to 100% (FY26) is the first weakening of this metric in years 2026-09-21 FY26 finals.
- Bank debt increased $16m to fund the $25m buyback that was announced at H1 FY26 when management was still confident of double-digit growth — capital allocation timing was poor with hindsight (buyback average price meaningfully above current market) 2026-03-02 H1 FY26 results.
- Cyber incident is real, disclosed, and financially open-ended. Not fatal but genuinely value-trap-adjacent for a business whose product is trust-in-data.
Earnings vs. expectations
- FY22 (Sept 2022): Revenue $165.5m, EBITDA $51.8m — 30% margin target achieved ahead of schedule post-Sentry 2022-09-20 FY22 finals. Beat.
- FY23 (Sept 2023): Revenue $174.0m (~5% growth), EBITDA $54.9m — professional services revenue soft due to post-COVID hospital staffing, but overall in line 2023-09-05 FY23 finals. In line to slight miss on professional services.
- FY24 (Sept 2024): Revenue $189.3m (+9%), EBITDA $58.3m (+6%) — above market expectations per July 2024 trading update 2024-07-18 FY24 trading update. Beat.
- FY25 (Sept 2025): Revenue $205.7m (+9%), EBITDA $65.3m — profitability ahead of consensus 2025-07-16 FY25 trading update. Beat.
- FY26 (Sept 2026): H1 FY26 in line with market (interim beat). July 2026 trading update materially below market: revenue $205–208m and EBITDA $65–67m vs. guidance for continued double-digit growth 2026-07-03 FY26 trading update. Confirmed Sept 2026 2026-09-21 FY26 finals. Material miss. Pattern: three years of beats, then a decisive miss in FY26 caused by 340B market dislocation and slower Shelter conversion. Management guidance history is credible until FY26 — the current reset to ARR-equivalent is deliberately prudent.
Conviction
3 — moderate. Anchors: clean, well-audited IFRS reporting with clear APM reconciliations; recurring revenue base of $185m provides a robust valuation floor; multiple methodologies (P/E, EV/EBITDA, FCF yield) converge on a fair-to-slightly-cheap read on current price; long, high-quality track record of disclosure. Caveats: the FY27 revenue floor and the timing/scale of 340B recovery are genuinely unknown, and the cyber incident's ultimate cost cannot yet be quantified — both meaningfully widen any fair-value range and prevent a conviction-4/5.