Brødrene A&O Johansen A/S

Denmark · owned by Avenir Invest ApS (Denmark) · ao.dk · 30 vendors

AO.dk is the Danish online retail operation of AO World plc, selling household appliances and consumer electronics directly to consumers. The platform offers products such as washing machines, refrigerators, televisions, and other home appliances with delivery and installation services. AO entered the Danish market as part of its European expansion strategy.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-13 · revision 38

30 direct vendors, 322 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Brødrene A&O Johansen A/S exhibits medium migration readiness, leaning towards the lower end of the spectrum. The company's existing use of Microsoft Azure and Microsoft Dynamics 365 provides a foundational understanding and experience with modern cloud platforms, which is a positive for future migrations. However, the presence of SAP (ERP/legacy systems) represents a significant challenge, as migrating from or modernizing such a core legacy system is typically complex, costly, and time-consuming. There is no explicit mention of cloud-native architectures like containerization or microservices, suggesting a more traditional application landscape that would require substantial refactoring for cloud optimization. Strict data residency requirements under GDPR and Danish law, particularly concerning CPR numbers, along with potential NIS2 implications, impose significant constraints on cloud provider selection and data transfer strategies, adding complexity to any migration effort. The 'Assessment Required' status for several critical regulations (GDPR, NIS2, ISO 27001) indicates that compliance considerations would need to be thoroughly addressed as part of, or prior to, a major migration, potentially increasing project scope and risk. While vendor geographic diversity is good, specific vendor lock-in risk for core ERP systems (SAP, Dynamics) remains unknown but is implied, which could complicate vendor transitions or negotiations during migration.

Compliance

8 in-scope frameworks identified; showing 3.

NIS2 (source) — Assessment Required

AO operates in wholesale distribution of installation materials (plumbing, heating, HVAC, electrical supplies). This sector is classified under general wholesale/distribution trade (NACE code G46), which is NOT listed as an Essential Entity sector under NIS2 Annex I. However, NIS2 Annex II (Important Entities) includes 'manufacturing' broadly, and AO's distribution of heating/HVAC components could intersect with supply chain criticality. The primary risk is Medium because: (1) AO clearly exceeds the size threshold (large enterprise, 2,000+ employees, multi-billion DKK revenue); (2) the sector classification as 'Important Entity' under manufacturing/distribution is plausible but not certain for a pure wholesale distributor; (3) Denmark transposed NIS2 via the Center for Cybersikkerhed (CFCS) framework, and Danish authorities are actively enforcing. If AO is classified as an Important Entity, non-compliance penalties can reach €7M or 1.4% of global annual turnover. Risk is Medium rather than High because sector applicability is not definitively confirmed for wholesale distribution.

Evidence: https://www.cfcs.dk/da/cybersikkerhed/nis2/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555, https://www.erhvervsstyrelsen.dk/nis2, https://ao.dk

GDPR (source) — Assessment Required

GDPR is universally applicable to AO as a Danish company headquartered in Albertslund, Denmark (EU member state). AO processes substantial volumes of personal data across multiple categories: customer data (B2B and B2C purchasers), employee data (~2,000+ staff), supplier/partner data, and website visitor data. As a large publicly listed company with significant digital commerce operations (ao.dk e-commerce platform), the volume and sensitivity of personal data processed is considerable. Danish enforcement by Datatilsynet has been active, with fines issued to Danish companies in recent years. Non-compliance risk is High due to scale of data processing, e-commerce exposure, and Datatilsynet's enforcement track record. No public certification or audit evidence of GDPR compliance was found, which is typical for non-tech Danish wholesalers but does not reduce the compliance obligation.

Evidence: https://ao.dk, https://www.datatilsynet.dk/english, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679, https://www.datatilsynet.dk/afgoerelser-domme-og-udtalelser

ISAE 3000 (source) — Assessment Required

ISAE 3000 is relevant for companies that provide assurance reports to third parties on non-financial matters (e.g., CSR/ESG reporting, data protection compliance, internal controls). AO is a publicly listed company on Nasdaq Copenhagen and publishes annual reports including ESG/sustainability disclosures, which may be subject to third-party assurance under ISAE 3000. Risk is Low because ISAE 3000 is not a mandatory regulatory requirement for AO's core business, but Medium relevance exists given ESG reporting obligations under the EU Corporate Sustainability Reporting Directive (CSRD) which will require assured sustainability reporting for large listed companies.

Evidence: https://ao.dk, https://www.iaasb.org/publications/international-standard-assurance-engagements-isae-3000-revised-assurance-engagements-other-audits-or, https://www.nasdaq.com/solutions/nasdaq-copenhagen

Financials

Three-year financials

Financial Resilience Score: 7/10

Brødrene A&O Johansen A/S demonstrates solid financial resilience, underpinned by a strong balance sheet with an equity ratio historically in the 40-50% range and low net gearing. Family control through A-shares supports a long-term, conservative approach to leverage, which provides a buffer against cyclical downturns in the Danish construction market. The company holds a leading market position as one of the top two or three technical wholesalers in Denmark, benefiting from scale advantages in logistics via its central warehouse in Albertslund and a nationwide network of approximately 50 branches. However, resilience is tempered by significant cyclicality tied to Danish new-build residential and renovation activity. The 2023 slowdown following interest-rate hikes materially compressed EBIT (down roughly 40-45% YoY) and revenue (down ~8%), illustrating the operational leverage risk. Working-capital swings on a broad SKU inventory base further amplify downturns. Competitive pressure from Sanistål, Solar A/S, Lemvigh-Müller, and pure-play e-commerce entrants keeps pricing tight. Overall, the combination of a strong equity base, diversified customer mix, and digital moat outweighs the cyclical vulnerabilities, warranting an above-average resilience score.

Key strengths: Strong equity ratio historically 40-50% with low net gearing, Family-controlled long-term ownership favors conservative leverage, Leading market position in Danish technical wholesale, Scale advantages in logistics with central warehouse and ~50 branches, Diverse customer base with no single-customer concentration, Early and consistent e-commerce investment supports margins, Own-label / private brand products improve margin mix

Risk factors: High cyclicality tied to Danish construction and renovation activity, Working-capital swings from wide SKU inventory when demand disappoints, Intense competition from Sanistål, Solar, Lemvigh-Müller and e-commerce entrants, Wage inflation and energy costs in Danish logistics, Dual-class share structure limits minority (preference) shareholder influence, Interest-rate sensitivity of end markets demonstrated in 2023 downturn

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report