AtkinsRéalis Group Inc.

Canada · owned by Independent (Canada) · www.atkinsrealis.com · 30 vendors

AtkinsRéalis is a world-class engineering services and nuclear organization that connects people, data, and technology to transform the world's infrastructure and energy systems. The company offers end-to-end services spanning consulting, engineering and design, project and program management, operations and maintenance, and decommissioning across sectors including transportation, nuclear, power and renewables, buildings, water, defense, and industrial markets. With over 40,000 employees operating in more than 50 countries, it serves clients globally on major infrastructure and energy projects.

Resilience scores

Technology vendors

Insights

Last updated 2026-07-20 · revision 7

30 direct vendors, 315 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

AtkinsRéalis exhibits a medium level of migration readiness. Strengths include strong financial stability, with consistent revenue growth, providing the capacity to fund significant migration initiatives. The existing adoption of cloud platforms like Microsoft Azure and Microsoft 365, alongside the use of modern technologies such as AI, Digital Twins, and advanced data analytics, provides a solid foundation for further cloud migration and adoption of cloud-native architectures. However, significant challenges exist. The complex regulatory environment, including NIS2 applicability and various ISO standards, coupled with explicit data residency requirements, will necessitate meticulous planning and potentially restrict choices for cloud providers and regions, increasing the complexity and cost of migration. The presence of several proprietary software solutions (e.g., VUEWorks®, SIMULATOR Solution Suite) may require substantial refactoring or re-platforming efforts if they are not already cloud-native, posing a potential internal lock-in challenge. The vendor data is contradictory, stating 'Total Vendors: 0' while also listing vendor geographic diversity. If external vendors exist, the unknown number of vendors and contract complexities could introduce additional lock-in risks, making a full assessment of external vendor lock-in difficult.

Compliance

10 in-scope frameworks identified; showing 3.

ISAE 3000 (source) — Partially Compliant

AtkinsRéalis publishes an Annual Integrated Report (2025: 'Performance With Purpose') and has a sustainability reporting program. The company's integrated reporting approach and ESG disclosures may be subject to ISAE 3000 assurance requirements, particularly for non-financial information. As a TSX-listed company with significant ESG commitments, third-party assurance of sustainability data is increasingly expected by investors and regulators. Risk is MEDIUM because: (1) the company publishes sustainability metrics that may require ISAE 3000 assurance; (2) Canadian securities regulations increasingly require ESG disclosure assurance; (3) the company's 2025 Annual Integrated Report suggests a mature reporting framework; (4) no explicit ISAE 3000 assurance statement was found publicly.

Evidence: https://www.atkinsrealis.com/en/investors/financial-information/annual-integrated-report-2025, https://www.atkinsrealis.com/en/sustainability, https://www.atkinsrealis.com/en/about/corporate-governance, https://www.atkinsrealis.com/en/engineering-better-future/beyond-engineering/journey-to-integrated-reporting

NIS2 (source) — Assessment Required

NIS2 is highly likely applicable to AtkinsRéalis for multiple reasons: (1) The company has significant EU operations and exceeds all size thresholds (large enterprise with ~36,000 employees and revenues exceeding €4 billion); (2) AtkinsRéalis provides engineering services to critical infrastructure sectors explicitly covered by NIS2 - including energy (nuclear, power grids, renewables), transport (rail, aviation, roads, ports), water/wastewater utilities, and digital infrastructure; (3) The company itself operates as a critical infrastructure service provider and consultant to Essential Entities; (4) AtkinsRéalis has a dedicated cybersecurity practice and has published thought leadership on NIS2 compliance for clients (e.g., 'Helping a water company to meet its NIS-R requirements'); (5) The company's EU subsidiaries (particularly in UK/post-Brexit equivalent NIS regulations, and EU member states) would be subject to NIS2 as Important or Essential Entities. Risk is HIGH because failure to comply with NIS2 can result in fines up to €10M or 2% of global turnover for Important Entities, and €20M or 4% for Essential Entities.

Evidence: https://www.atkinsrealis.com/en/projects/operational-technology-anomolous-detection, https://www.atkinsrealis.com/en/engineering-better-future/beyond-engineering/how-highways-sector-can-prepare-for-rising-cyber-threats-and-regulation, https://www.atkinsrealis.com/en/engineering-better-future/beyond-engineering/railway-cybersecurity-is-an-engineering-challenge, https://www.atkinsrealis.com/en/engineering-better-future/beyond-engineering/secure-by-design-2024, https://www.atkinsrealis.com/en/markets-and-services/markets/nuclear, https://www.atkinsrealis.com/en/markets-and-services/markets/transportation

GDPR (source) — Partially Compliant

AtkinsRéalis has significant operations across the EU/EEA (UK pre-Brexit, and ongoing EU operations including projects in Poland - Baltic Power Offshore Wind, ITER in France, and other EU member states). The company processes personal data of EU/EEA employees, clients, and project stakeholders. While a Data Protection Officer (Andrew Cox, based in Bristol, UK) has been formally appointed and a Privacy Notice is published (last updated September 2025), the privacy policy explicitly acknowledges data transfers outside the EEA and global processing. The risk is HIGH because: (1) AtkinsRéalis operates in multiple EU jurisdictions; (2) the company processes large volumes of employee and client personal data globally; (3) cross-border data transfers are explicitly acknowledged in their privacy notice; (4) no specific GDPR audit certifications or DPA registration evidence was found publicly; (5) as a large multinational engineering firm, the volume and sensitivity of personal data processed is substantial. Non-compliance penalties can reach €20M or 4% of global annual turnover.

Evidence: https://www.atkinsrealis.com/en/site-services/privacy-policy, https://www.atkinsrealis.com/en/about/corporate-governance, https://www.atkinsrealis.com/en/projects/baltic-power-offshore-wind, https://www.atkinsrealis.com/en/projects/iter-fusion-for-energy

Financials

Three-year financials

Financial Resilience Score: 8/10

AtkinsRéalis has undergone a significant transformation into a cleaner, services-led engineering and nuclear pure-play with strong financial resilience. The company achieved investment-grade credit ratings from both DBRS and S&P during 2025, reflecting improved balance sheet quality. Following the ~C$2.6B sale of the remaining 6.76% interest in Highway 407 ETR in June 2025, the company paid down C$900M of debt (C$400M limited-recourse and C$500M non-revolving term loan) and moved to a net cash position at year-end 2025. It also returned capital via a 10.5M share repurchase (~6.4% of shares outstanding). Operating performance is robust with Segment Adjusted EBIT of C$973M (+15.1% YoY) and a record backlog of C$21.2 billion (+21.5% YoY), providing multi-year revenue visibility roughly 2x annual revenue. Nuclear is a standout growth engine (revenue up 55% YoY to C$2.3B) supported by CANDU life extensions and SMR deployment at Darlington. The business benefits from structural tailwinds including the nuclear renaissance, UK water AMP8 cycle, US infrastructure spending, and Middle East giga-projects. Risks remain around the LSTK legacy tail (2025 segment loss of C$111.7M on only C$152.5M revenue), integration risk from three 2025 acquisitions (David Evans, C2AE, ADG), and dependence on government infrastructure budgets. Overall, the company demonstrates strong financial resilience with diversified geography, de-risked contract mix, strong backlog, and improved credit profile.

Key strengths: Investment-grade credit ratings from DBRS and S&P (upgraded 2025), Net cash position at year-end 2025 following Highway 407 divestiture, Record backlog of C$21.2B (~2x annual revenue) providing multi-year visibility, Segment Adjusted EBIT growth of 15.1% to C$973M, De-risked business mix with LSTK wind-down and shift to professional services, Diversified geographic footprint (Canada, UK, US, Middle East, Australia), Structural demand tailwinds: nuclear renaissance, UK AMP8, US infrastructure, Nuclear segment revenue growth of 55% YoY to C$2.3B

Risk factors: LSTK legacy projects continue to generate segment losses (C$-111.7M in 2025), Concentration in large, complex public-sector programs subject to cost overruns and delays, M&A integration risk from three 2025 acquisitions (David Evans, C2AE, ADG), Talent competition in engineering, nuclear, and digital/AI skills, Sensitivity to government infrastructure budgets and nuclear public-policy shifts, Regulatory/climate disclosure exposure under Canadian Sustainability Disclosure Standards, Cyber and AI governance risk given rapid AI scaling

Revenue by geography

Revenue by product/service

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report