Digital Research Centre Denmark (DIREC)
Denmark · owned by Independent (Denmark) · direc.dk · 11 vendors
DIREC (Digital Research Centre Denmark) is Denmark's national research and innovation centre for advanced digital technologies, formed as a unique partnership between all eight Danish universities and the Alexandra Institute. Its purpose is to expand capacity within research, innovation, and education in digital technologies to keep Denmark competitive worldwide. DIREC is funded by the Innovation Fund Denmark and the Danish Ministry of Higher Education and Science.
Resilience scores
- Digital Sovereignty: 36
- Digital Resilience: 5
- Financial Resilience: 6
Technology vendors
- Cookiebot (Cybot A/S) — Technology — Denmark
- CrocoBlock (Zemez) — Ukraine
- Google LLC — Technology — United States
- and 8 more
Insights
Last updated 2026-09-14 · revision 7
11 direct vendors, 157 subvendors
Direct vendors by controlling owner country (sample)
- Belgium: 2
- Sweden: 1
- India: 1
Subvendors by controlling owner country (sample)
- Denmark: 3
- Belgium: 1
- Australia: 2
Migration Readiness: 3/10
Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.
DIREC demonstrates low migration readiness. The primary challenge is the legacy internal tech stack, 'WordPress' and 'Elementor.' This monolithic setup is not cloud-native, containerized, or microservices-based, making a modern cloud migration complex and costly. The regulatory environment presents substantial hurdles; numerous regulations (GDPR, EU AI Act, Danish Public Funding Terms, NIS2) require 'Assessment Required' or are 'Partially Compliant,' indicating a complex compliance landscape that would need to be meticulously addressed during any migration. GDPR also imposes strict 'Data Residency Requirements,' necessitating appropriate safeguards for any data transfer outside the EU/EEA, which limits flexibility in choosing cloud providers. The 'Vendor Lock-in Risk' is unknown, and while there are 19 services and 8 vendor HQ countries, the actual number of distinct vendors is not specified, making it difficult to assess the complexity of disentangling from existing vendor relationships. On the positive side, DIREC's consistent financial growth provides a solid foundation for funding a potential migration initiative. The geographic diversity of vendor HQs (assuming the 'Total Vendors: 0' is an error and there are actual vendors) could indicate a less concentrated vendor landscape, potentially simplifying some aspects of vendor management during migration, though the specific vendor lock-in risk remains unknown.
Compliance
8 in-scope frameworks identified; showing 3.
EU Dual-Use Regulation — Assessment Required
DIREC's research in cutting-edge technologies could be subject to the EU's dual-use export control regime. Danish law requires individual researchers and their institutions to assess the applicability of these regulations.
Research in areas like quantum computing, advanced materials, and cybersecurity can have both civilian and military applications. Failure to comply with export controls on dual-use technology can lead to severe penalties.
Evidence: https://gorrissenfederspiel.com/en/latest-news-on-dual-use-export-controls-for-research-organisations/, https://www.akingump.com/en/insights/alerts/eu-updates-dual-use-export-control-list-key-changes-for-emerging-technologies, https://www.gamingtechlaw.com/2026/03/eu-dual-use-technologies-regulation/, https://www.beinformed.com/dual-use-goods-regulations-are-changing-can-your-compliance-process-keep-up/, https://drillanddefense.com/eu-dual-use-regulation-export-control/, https://sdunet.dk/en/enheder/fakulteter/naturvidenskab/research/legal-aid/dual-use
GDPR (source) — Partially Compliant
DIREC is established in Denmark, an EU member state, and its privacy policy explicitly states compliance with the GDPR (Regulation (EU) 2016/679).
As a research institution in the EU, DIREC processes personal data of employees, research subjects, and collaborators. Non-compliance could lead to significant fines and reputational damage, especially given Denmark's strict enforcement.
EU AI Act (source) — Assessment Required
As a leading AI research center in the EU, DIREC's work on developing and testing AI systems will be subject to the EU AI Act. Denmark has already adopted supplementary national legislation.
DIREC's extensive research in AI, including projects with real-world applications in critical sectors, could fall under the high-risk category of the AI Act, leading to significant compliance obligations and penalties for non-compliance.
Evidence: https://gorrissenfederspiel.com/en/latest-news-on-dual-use-export-controls-for-research-organisations/, https://eksportkontrol.erhvervsstyrelsen.dk/export-controls, https://www.akingump.com/en/insights/alerts/eu-updates-dual-use-export-control-list-key-changes-for-emerging-technologies, https://www.trail-ml.com/blog/eu-ai-act-high-risk-checklist, https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai, https://artificialintelligenceact.eu/high-level-summary/
Financials
Three-year financials
- 2025: revenue DKK 52M
- 2020: revenue DKK 100M
Financial Resilience Score: 6/10
DIREC is a non-profit research consortium rather than a commercial company, so traditional financial resilience metrics (revenue, EBIT, equity) do not apply. Its financial model is grant-based, operating on a break-even basis where inflows from public and private grants are deployed into research projects. The centre has demonstrated strong political and institutional backing, receiving an initial DKK 100M grant from Innovation Fund Denmark for 2020-2025, followed by a DKK 40M government extension and DKK 12M from the Danish Industry Foundation to secure operations through 2026/27. Total programme budget over the initial phase reached approximately DKK 275M when including university, Alexandra Institute, and industry co-financing. Resilience is supported by a diversified backer base (Innovation Fund Denmark, Ministry of Higher Education and Research, Danish Industry Foundation), significant co-financing (~DKK 175M from universities and partners), a lean central secretariat hosted by the Alexandra Institute, and a proven ability to leverage DKK 79.4M in follow-on grants from bodies including the Novo Nordisk Foundation, ERC, DFF, and the Carlsberg Foundation. However, the centre remains fundamentally dependent on renewed political appropriations with no commercial revenue stream, and the current extension only covers through 2026/27. Underperformance on commercial KPIs (2 startups vs. 25 target; 4 PhDs in industry vs. 18 target) may weaken future political case-making for continuation funding.
Key strengths: Diversified public and private funding sources (Innovation Fund Denmark, Danish government, Danish Industry Foundation), Strong co-financing base (~DKK 175M from universities and industry partners), Lean central secretariat hosted by Alexandra Institute A/S, Track record of leveraging DKK 79.4M in follow-on grants, 2024 political renewal secured funding through 2026/27, Owned collectively by 8 Danish universities plus Alexandra Institute
Risk factors: Grant dependency with no commercial revenue stream, Current extension only covers 2025-2026/27; long-term continuation not guaranteed, Significant under-shoot on commercial KPIs (startups, PhDs into industry), Reliance on continued political will for public appropriations, Limited direct international funding diversification
Revenue by geography
- Denmark: 100%
Revenue by product/service
- Explore (small exploratory projects): 32%
- Bridge (collaborative research with industry): 32%
- Next Generation AI / Cyber: 28%
- SciTech (fundamental research): 8%
Workforce by country
- Denmark: 255
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.