Telefonaktiebolaget LM Ericsson

Sweden · owned by Independent (Sweden) · www.ericsson.com · 18 vendors

Telefonaktiebolaget LM Ericsson is a Swedish multinational telecommunications company headquartered in Stockholm, Sweden, that provides mobile and fixed network infrastructure, software, and services to telecom operators and enterprises worldwide. The company is a global leader in 5G technology, offering radio access networks (RAN), core networks, and managed services. Ericsson also provides OSS/BSS solutions and enterprise networking products under its Cradlepoint and Vonage subsidiaries.

Resilience scores

Disruption prediction

Telefonaktiebolaget LM Ericsson has an estimated 11% probability of disruption in the next 6 months.

14 of Telefonaktiebolaget LM Ericsson's 18 vendors monitored for disruptions.

Technology vendors

Services catalogue

12 services in catalogue across 4 categories; runs on 18 sub-vendors.

Insights

Last updated 2026-07-17 · revision 8

18 direct vendors, 243 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Ericsson exhibits a strong foundation for migration readiness, primarily driven by its highly modern, cloud-native internal tech stack. The use of Kubernetes, Docker, Helm, microservices architecture, and cloud-native network functions (CNF/VNF), coupled with robust CI/CD and DevOps practices, significantly reduces technical barriers to migrating workloads to cloud environments. Key technologies like 5G Standalone Core, Open RAN, and Cloud-Native Network Functions further underscore their architectural alignment with modern, agile infrastructure. However, several factors present significant challenges to migration readiness. The regulatory environment is complex, with 'Assessment Required' status for NIS2 (High risk), SOC2 (Medium risk), and ISAE 3000 (Medium risk). These compliance requirements, especially for critical infrastructure and managed services, will necessitate careful planning and potentially substantial investment during any migration. Furthermore, Ericsson faces extensive data residency requirements due to its global operations, GDPR, national security laws, and customer-specific rules. Migrations must meticulously plan for data localization and cross-border data transfer mechanisms, adding considerable complexity and cost. The vendor relationship data also introduces uncertainty; while 'Total Vendors: 0' is stated, 'Vendor HQ Countries' lists 3 countries (United States, Australia, Germany) for 32 services. This ambiguity makes it difficult to assess vendor lock-in. If these 32 services are provided by a limited number of vendors, it could increase migration complexity and cost due to potential dependencies and contract renegotiations. The limited geographic diversity of vendor HQs (3 countries) also suggests a potential concentration risk. While financially stable, the lack of strong growth might lead to cautious investment in large-scale migration projects, potentially slowing down readiness.

Compliance

14 in-scope frameworks identified; showing 3.

FCC Regulations — Assessment Required

Ericsson has significant US operations (US headquarters in Plano, Texas; major customer AT&T; listed on NASDAQ) and provides network equipment and managed services to US telecom operators. The FCC has specific regulations affecting telecom equipment vendors, including: (1) FCC equipment authorization requirements for radio frequency devices; (2) Supply chain security rules (FCC's Secure and Trusted Communications Networks Act implementation, which designated Huawei and ZTE as security threats — Ericsson is a beneficiary/alternative supplier); (3) Potential obligations under the FCC's cybersecurity labeling program. Risk is Medium due to the complexity of US regulatory requirements and Ericsson's significant US market presence.

Evidence: https://www.ericsson.com/en/about-us/company-facts/ericsson-worldwide, https://ericssonfederal.com/, https://www.fcc.gov/consumers/guides/fccs-role-telecommunications, https://www.fcc.gov/supplychain

GDPR (source) — Compliant

Ericsson is headquartered in Sweden (EU/EEA) and processes vast amounts of personal data globally — including employee data (~100,000+ employees), customer/partner data, and subscriber-related data from managed network services serving over 1 billion subscribers. GDPR is unambiguously applicable. Risk is rated Medium rather than High because Ericsson publicly maintains a dedicated privacy policy, references GDPR compliance on its website, and as a large, publicly listed company (NASDAQ: ERIC) is subject to significant regulatory scrutiny and investor oversight that incentivizes compliance. However, the sheer scale and complexity of global data flows, cross-border data transfers (e.g., to the US, India, China), and the sensitivity of telecom network data elevate residual risk above Low. Enforcement by the Swedish Authority for Privacy Protection (IMY) and other EU DPAs remains active in the telecom sector.

Evidence: https://www.ericsson.com/en/legal/privacy, https://www.ericsson.com/en/about-us/security, https://www.ericsson.com/en/legal/privacy/do-not-sell-or-share-my-information, https://www.ericsson.com/en/about-us/sustainability-and-corporate-responsibility/sustainability-report, https://www.imy.se/en/

Swedish Annual Accounts Act — Compliant

Ericsson is a publicly listed company on Nasdaq Stockholm and NASDAQ (US), subject to IFRS financial reporting standards and Swedish Annual Accounts Act requirements. As a large, publicly listed company with PricewaterhouseCoopers as statutory auditor, financial reporting compliance is well-established. Risk is Low as Ericsson has robust financial reporting infrastructure and is subject to continuous audit by a Big Four firm.

Evidence: https://www.ericsson.com/en/investors/financial-reports-and-presentations/annual-reports, https://www.ericsson.com/en/about-us/corporate-governance/auditor, https://www.ericsson.com/en/investors/financial-reports-and-presentations

Financials

Three-year financials

Financial Resilience Score: 8/10

Ericsson demonstrated a strong financial recovery in 2025 with adjusted EBITA margin reaching 18.1% (top of the 15-18% long-term target), net income of SEK 28.7 billion (versus SEK 0.4 billion in 2024 and a SEK 26.1 billion loss in 2023), and free cash flow before M&A of SEK 26.8 billion. The balance sheet is robust with net cash of SEK 61.2 billion (up from SEK 37.8 billion), gross cash of SEK 93.9 billion against total borrowings of SEK 32.7 billion, and an improved equity ratio of 39.5%. Investment-grade credit ratings from S&P (BBB-) and Fitch (BBB-), with Moody's Ba1 outlook upgraded to positive, plus USD 2.5 billion in undrawn committed liquidity facilities, further support resilience. Structural strengths include technology leadership in 5G/RAN (~37% market share ex-China), 206 live 5G networks, and over 60,000 patents generating ~SEK 14.5 billion in annual IPR licensing revenue. The Board's proposed SEK 25 billion shareholder return (SEK 3.00/share dividend plus up to SEK 15 billion buyback) is the largest in company history, reflecting management confidence. Risks that temper the score include continued top-line contraction (reported sales -5% in 2025), high customer concentration (top 10 = 46% of sales, largest ~14%), unresolved U.S. DOJ investigation regarding Iraq conduct (2011-2019), multiple Anti-Terrorism Act civil lawsuits, ongoing SAMR China antitrust investigation, and Vonage acquisition write-downs (SEK ~46.6 billion in cumulative impairments). Pension deficit sensitivity and geopolitical/tariff exposure also weigh on the outlook.

Key strengths: Strong 2025 profitability recovery with adjusted EBITA margin at 18.1%, Robust balance sheet with SEK 61.2B net cash and 39.5% equity ratio, Investment-grade credit ratings (S&P BBB-, Fitch BBB-) with Moody's positive outlook, USD 2.5B undrawn committed liquidity facilities, Technology leadership in 5G/RAN with ~37% market share ex-China, 60,000+ patents generating SEK 14.5B annual IPR licensing revenue, Free cash flow of SEK 26.8B (11.3% of sales, within 9-12% target), Proposed record SEK 25B shareholder return (dividend + buyback), Successful cost reduction: ~5,000 headcount reduction in 2025

Risk factors: Continued revenue contraction (-5% reported in 2025, -6% in 2024), High customer concentration: top 10 = 46% of sales, largest ~14%, Ongoing U.S. DOJ investigation regarding Iraq conduct (2011-2019), Three pending U.S. Anti-Terrorism Act civil lawsuits, SAMR China antitrust patent-licensing investigation since 2019, Vonage acquisition cumulative impairments of ~SEK 46.6B, CFIUS National Security Agreement compliance obligations, Geopolitical/tariff exposure with concentrated component supply chain, Pension deficit sensitivity (SEK 18.6B net DBO recognized), Shareholder claims in Sweden from 93 non-Swedish funds re: 2019 Iraq disclosure, Sharp India revenue decline (SEK 31.2B in 2023 to SEK 12.3B in 2025)

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report