DFDS A/S

Denmark · owned by Independent (Denmark) · dfds.com · 29 vendors

DFDS is Northern Europe's leading transport provider, operating ferry, road and rail transport with complementary logistics solutions. The company connects European countries with each other, as well as with Türkiye and North Africa, carrying 5.5 million passengers annually and transporting trailer freight units.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 29 sub-vendors.

Insights

Last updated 2026-09-13 · revision 39

29 direct vendors, 281 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

DFDS A/S exhibits a medium level of migration readiness, leaning towards the lower end, primarily due to significant regulatory complexities and an unknown vendor lock-in risk. The tech stack, while including modern elements like 'Mobile Applications' and 'Online Booking Systems', does not explicitly indicate cloud-native, containerized, or microservices architectures, suggesting a likely mixed environment with potential legacy components that would complicate migration. The regulatory environment presents substantial challenges: NIS2 compliance is a critical requirement for any migration of core transport infrastructure systems, adding significant complexity and cost. GDPR data residency requirements mandate data processing within the EU/EEA, with specific safeguards for transfers outside, and operational data must be accessible to maritime and customs authorities, severely constraining cloud deployment options. The 'Partially Compliant' status for Danish AML also necessitates careful consideration during migration of financial systems. The 'Total Vendors: 0' data is contradictory, but assuming vendor relationships exist (216 services), the 'Vendor Lock-in Risk' is 'Unknown', which is a major impediment to migration planning. High vendor lock-in could significantly increase the cost and difficulty of migrating systems. While the geographic diversity of vendor countries is good for resilience, it can add complexity to contract renegotiation and integration during a large-scale migration. The company's size implies potential financial capacity to fund a migration, but this is not explicitly detailed. Overall, the combination of regulatory hurdles, data residency constraints, and the unknown extent of vendor lock-in significantly lowers migration readiness, despite some modern tech components.

Compliance

5 in-scope frameworks identified; showing 3.

SOC 2 (source) — Assessment Required

DFDS operates extensive digital platforms processing sensitive customer data, making SOC2 relevant for demonstrating security controls to business customers and partners.

DFDS operates extensive digital platforms including passenger booking systems, freight management platforms, mobile apps, and customer portals that process sensitive customer data. While not a pure cloud service provider, their digital services and data processing activities could benefit from SOC2 compliance to demonstrate security controls to business customers and partners. Risk is moderate as SOC2 is not legally mandated but could be important for business relationships.

Evidence: https://dfds.com, https://www.dfds.com/en/legal/privacy

NIS2 (source) — Assessment Required

DFDS operates in the transport sector in the EU, which is classified as an Essential Entity under NIS2, and likely exceeds the size thresholds.

DFDS operates in the transport sector in the EU, which is classified as an Essential Entity under NIS2. As a major ferry operator connecting multiple EU countries with significant infrastructure (ferry terminals, IT systems, booking platforms), they likely exceed the size thresholds (50+ employees, €10M+ turnover). Transport sector entities face high cybersecurity risks due to critical infrastructure dependencies and passenger safety implications. Non-compliance could result in significant fines and operational restrictions.

Evidence: https://dfds.com, https://www.dfds.com/en/about

ISAE 3000 (source) — Assessment Required

As a publicly listed company with sustainability reporting, ISAE 3000 assurance may be required for specific ESG reporting.

As a publicly listed company (Copenhagen Stock Exchange), DFDS may require ISAE 3000 assurance for specific sustainability or ESG reporting. The risk is low as this is typically used for specific assurance engagements rather than ongoing compliance requirements. However, increasing ESG reporting requirements may make this relevant.

Evidence: https://www.dfds.com/en/about, https://www.dfds.com/en/about/sustainability

Financials

Three-year financials

Financial Resilience Score: 7.5/10

This score reflects a strong and diversified business model, but acknowledges its exposure to macroeconomic cycles and high capital intensity. DFDS operates two complementary divisions: Ferry and Logistics. This diversification provides a natural hedge. While the passenger-heavy Ferry division was impacted by travel restrictions during the pandemic, its freight operations remained robust. The Logistics division provides stable, contract-based revenue streams, reducing overall volatility. DFDS maintains a prudent approach to debt. Its key leverage metric, Net Interest-Bearing Debt (NIBD) to EBITDA, stood at 2.8x at the end of 2023. This is within the company's long-term target of below 3.0x and is considered a healthy level for a capital-intensive industry, providing flexibility for strategic moves. The business is inherently exposed to economic downturns (which affect freight volumes), fuel price volatility, and geopolitical events (e.g., Brexit's long-term effects, Red Sea disruptions impacting supply chains). Furthermore, the industry faces increasing environmental regulations (e.g., IMO 2030/2050), requiring significant future capital expenditure on greener fleet technologies.

Key strengths: Diversified Business Model, Manageable Leverage, Strong Market Position, Proven M&A Capability

Risk factors: Exposure to economic downturns, Fuel price volatility, Geopolitical events, Increasing environmental regulations

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report