Dunea Duin & Water

Netherlands · owned by Independent (Netherlands) · dunea.nl · 41 vendors

Dunea is a Dutch water utility company that provides drinking water to nearly 1.4 million customers in the western part of South Holland. The company also manages dune areas that receive 1 million recreational visitors annually.

Resilience scores

Technology vendors

Insights

Last updated 2026-01-13 · revision 69

41 direct vendors, 338 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 3/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Dunea Duin & Water demonstrates low migration readiness, primarily due to a likely legacy technology landscape, stringent regulatory requirements, and ambiguous vendor relationships. **Challenges:** * **Likely Legacy Tech Stack:** The 'Internal Tech Stack' is empty, and 'Key Technologies' describe operational systems (water filtration, quality monitoring, distribution) rather than modern, cloud-native IT infrastructure. This strongly suggests a traditional, potentially monolithic and legacy IT environment, which is inherently difficult, costly, and time-consuming to migrate to modern cloud architectures. * **Strict Regulatory and Data Residency Requirements:** Dunea operates under stringent EU regulations (GDPR, NIS2) and Dutch national laws (Dutch Drinking Water Act). Critically, explicit data residency requirements mandate processing of EU personal data within the EU/EEA, with NIS2 potentially imposing further localization for critical operational data within EU borders. These requirements significantly complicate cloud migration, limiting the choice of cloud providers and architectures, and substantially increasing compliance overhead and costs. * **Financial Constraints (Potential):** While a stable utility, the extreme revenue concentration (98% drinking water, 100% Netherlands) might limit financial flexibility for large-scale, non-core investments like a comprehensive digital migration, particularly if funding is tied to regulated service provision. * **Vendor Complexity & Lock-in (Ambiguous):** The vendor data presents a significant contradiction: 'Total Vendors: 0' is stated, yet 'Total Services: 236' are listed with 'Vendor HQ Countries' spanning 9 unique nations. If Dunea truly has no external vendors, it eliminates external vendor lock-in, which would be a positive for migration. However, it would imply a vast, internally developed and maintained system landscape (236 services) that would be complex and costly to migrate. If, conversely, the diverse vendor country data is accurate, then managing the migration of 236 services across multiple vendors, with an 'Unknown' vendor lock-in risk, presents substantial contractual and technical challenges. **Opportunities:** * No specific opportunities for migration readiness are explicitly evident from the provided data. The lack of an identified modern internal tech stack means there are no existing cloud-native components to leverage for a phased migration strategy.

Compliance

6 in-scope frameworks identified; showing 3.

EU Water Framework Directive — Assessment Required

The EU Water Framework Directive applies to water management in EU member states. While primarily environmental, it affects water utilities' source protection and sustainability practices.

The EU Water Framework Directive applies to water management in EU member states. While primarily environmental, it affects water utilities' source protection and sustainability practices. Risk is medium as non-compliance can affect operational licenses and environmental permits.

NIS2 (source) — Assessment Required

Dunea operates drinking water infrastructure in the EU, qualifying as an Essential Entity under the directive. Water utilities are explicitly listed as critical infrastructure.

NIS2 applies with HIGH confidence as Dunea operates drinking water infrastructure in the EU, qualifying as an Essential Entity under the directive. Water utilities are explicitly listed as critical infrastructure. Non-compliance can result in fines up to 2% of annual turnover. The risk is high due to the critical nature of water infrastructure, potential for service disruption, and cybersecurity threats to essential services.

GDPR (source) — Assessment Required

Dunea is a Dutch water utility operating in the EU and processes personal data of customers, employees, and suppliers.

GDPR applies with HIGH confidence as Dunea is a Dutch water utility operating in the EU and processes personal data of customers, employees, and suppliers. Non-compliance can result in fines up to 4% of annual turnover or €20M. Water utilities handle extensive customer personal data including addresses, payment information, and usage patterns. The risk is high due to the significant financial penalties and the essential nature of water services requiring continuous customer data processing.

Financials

Three-year financials

Financial Resilience Score: High/10

Dunea's financial resilience is exceptionally high due to the fundamental nature of its business model and operating environment. Dunea operates a natural monopoly in a legally defined service area. It faces no direct competition for its core product (drinking water). Revenue is highly predictable and inelastic, as water is an essential good. The company is 100% owned by municipalities in its service region. This shareholder structure prioritizes long-term continuity and public service over short-term profit maximization. It also implies strong implicit government support, making the risk of insolvency virtually zero. With over €630 million in equity and a vast asset base of critical infrastructure, the company is well-capitalized. Its solvency ratio is consistently strong, providing a substantial buffer against financial shocks. The business generates stable and predictable cash flows from operations, which are used to fund maintenance, operational expenses, and a significant capital investment program (€80-€100 million annually) aimed at renewing and future-proofing its infrastructure. The primary financial risks are not market-based but operational and strategic, such as managing the immense cost of replacing aging pipelines and adapting to climate change (e.g., drought, water quality issues), which require massive, long-term capital expenditures.

Key strengths: Regulated Monopoly, Public Shareholding, Strong Balance Sheet, Predictable Cash Flow

Risk factors: Managing the immense cost of replacing aging pipelines, Adapting to climate change (e.g., drought, water quality issues)

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report