Københavns Lufthavn A/S

Denmark · owned by Independent (Denmark) · cph.dk · 45 vendors

Københavns Lufthavn (Copenhagen Airport) operates Denmark's main international airport, providing passenger services, baggage handling, security, and terminal facilities. The company is currently undertaking major expansion projects including a new terminal area opening in 2028.

Resilience scores

Technology vendors

Insights

Last updated 2026-03-26 · revision 63

45 direct vendors, 365 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Københavns Lufthavn A/S exhibits a medium-low level of migration readiness. The most significant challenge stems from a highly complex and restrictive regulatory environment, including mandatory GDPR, NIS2, EASA, and Danish Aviation Act requirements. Explicit data residency and sovereignty requirements, particularly for critical operational and security data, will severely complicate migration to global cloud platforms, necessitating careful selection of cloud regions and robust legal frameworks for data transfers. The current tech stack includes custom-built systems (e.g., Airport Charges Calculation Engine, Order Now platform) and potentially hardware-dependent solutions (automated security screening systems), which typically require substantial refactoring or re-platforming efforts for cloud-native adoption, increasing migration complexity and cost. There is no explicit mention of cloud-native practices like containerization or microservices, suggesting a more traditional architecture that would require significant transformation. On the positive side, the company's strong financial recovery provides the necessary capital to fund a substantial migration initiative. ServiceNow is already a SaaS solution, reducing its migration burden. While the geographic diversity of vendor HQs is good, the actual number of unique vendors for the 88 services is not provided (due to the 'Total Vendors: 0' anomaly), making it difficult to assess the extent of technical vendor lock-in and the complexity of managing numerous vendor relationships during a migration.

Compliance

6 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Assessment Required

ISO 27001 is highly recommended for critical infrastructure operators like airports. While not legally mandatory, it demonstrates information security management maturity. Given CPH's role as critical infrastructure and extensive data processing, ISO 27001 certification would be expected by stakeholders and may be required by business partners.

NIS2 (source) — Assessment Required

Airport operators are classified as Essential Entities under NIS2 Directive due to their critical role in transport infrastructure. CPH clearly exceeds size thresholds (18,500 employees, major international airport). Non-compliance can result in significant fines and operational restrictions. Critical infrastructure operators face heightened cybersecurity requirements and incident reporting obligations.

Evidence: https://cph.dk

SOC 2 (source) — Assessment Required

While not mandatory, SOC2 may be relevant for CPH's digital services and cloud infrastructure supporting airport operations. Many large organizations require SOC2 compliance from service providers. Risk is moderate as it's primarily a trust and assurance framework rather than regulatory requirement.

Financials

Three-year financials

Financial Resilience Score: 7/10

Københavns Lufthavn A/S (Copenhagen Airport, CPH) demonstrates solid financial recovery following the COVID-19 pandemic disruption, with 2023 revenues reaching DKK 5,265M and EBIT of DKK 1,876M, reflecting a strong rebound in passenger traffic toward pre-pandemic levels. The airport benefits from a near-monopoly position as Denmark's primary international hub, providing a structurally stable and largely captive revenue base from both aeronautical and commercial sources. Regulatory oversight of aeronautical charges provides revenue predictability, though it also caps upside pricing flexibility. The company carries meaningful long-term debt associated with ongoing capital investment programs, including terminal expansions and infrastructure upgrades required to handle growing passenger volumes. Debt service obligations are manageable given the strong operating cash flow generation, but elevated capex commitments reduce near-term free cash flow. The equity base has recovered to DKK 4,782M in 2023, reflecting retained earnings improvement as profitability normalized post-pandemic. Key resilience factors include the airport's strategic importance to Danish and Scandinavian connectivity, a diversified revenue mix between regulated aeronautical fees and unregulated commercial revenues (retail, parking, real estate), and a stable shareholder base including the Danish state and Macquarie Infrastructure. Risks include sensitivity to macroeconomic downturns affecting air travel demand, competitive pressure from low-cost carrier route shifts, and significant ongoing capital expenditure requirements that constrain financial flexibility. Overall, CPH is a financially resilient infrastructure asset with investment-grade characteristics, though its leverage profile and capex intensity moderate the score relative to asset-light businesses. The recovery trajectory is positive and the long-term demand outlook for Scandinavian hub connectivity supports continued earnings growth.

Key strengths: Near-monopoly position as Denmark's primary international airport hub, Diversified revenue streams: aeronautical fees plus commercial/retail/parking revenues, Strong post-pandemic traffic and revenue recovery through 2022–2023, Stable long-term shareholder base including Danish state and Macquarie Infrastructure, Regulated aeronautical charges providing revenue predictability, Recovering EBIT margin with 2023 EBIT of DKK 1,876M vs. negative EBIT in 2021

Risk factors: High capital expenditure requirements for terminal and infrastructure expansion, Elevated long-term debt load constraining free cash flow, Regulatory risk on aeronautical charge-setting limiting pricing power, Macroeconomic sensitivity — air travel demand vulnerable to recessions and geopolitical shocks, Concentration risk: single-site operation with no geographic diversification, Environmental and sustainability regulatory pressures increasing compliance costs

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report