Etteplan

Finland · www.etteplan.com · 20 vendors

Etteplan Oyj is a technology service company specializing in software and embedded solutions, engineering solutions, and technical communication solutions. The company serves leading industrial and manufacturing companies globally, aiming to improve the efficiency, sustainability, and productivity of their customers' business operations through engineering, innovation, and digitalization.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 20 sub-vendors.

Insights

Last updated 2026-08-11 · revision 1

20 direct vendors, 252 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Etteplan exhibits strong migration readiness, largely due to its modern and cloud-oriented internal tech stack, including Microsoft Azure and Next.js. The company's core offerings and key technologies are heavily invested in cloud-based industrial applications, AI/ML, IIoT, and Industry 4.0 solutions, suggesting an architecture that is inherently adaptable and compatible with modern migration strategies (e.g., cloud adoption, microservices, containerization), even if specific details on these architectures are not provided. Etteplan's proven capability in navigating complex regulatory environments, particularly EU compliance and cybersecurity, is a significant asset for managing the legal and compliance aspects of any migration. The high geographic diversity of its vendor/partner ecosystem (10 unique countries for HQ and 9 for owner countries across 33 services) suggests a lower overall vendor lock-in risk and greater flexibility in choosing migration paths, despite the 'Vendor Lock-in Risk: Unknown' status. Challenges include the lack of specified data residency requirements, which could introduce complexities if strict rules apply, and the absence of financial stability data (revenue concentration, growth history), which makes it difficult to assess the company's capacity to fund large-scale migration initiatives. The 'Total Vendors: 0' data point is ambiguous, but the broader vendor diversity data points to a flexible ecosystem.

Compliance

13 in-scope frameworks identified; showing 3.

NIS2 (source) — Assessment Required

NIS2 (EU Directive 2022/2555, transposed into Finnish law via the Cybersecurity Act / Kyberturvallisuuslaki) applies to entities in listed sectors that meet size thresholds (50+ employees or €10M+ turnover). Etteplan is a large enterprise (Nasdaq Helsinki-listed, ~3,000+ employees, revenue well above €10M) operating in multiple EU countries. NIS2 applicability depends on whether Etteplan itself falls within a covered sector as an operator, or whether it qualifies as an ICT service management provider or digital provider. Etteplan provides ICT/software/embedded services and serves energy, defence, and manufacturing sectors — but as a B2B technology services company, its own classification under NIS2 requires formal self-assessment. Risk is Medium because: (a) Etteplan clearly exceeds size thresholds; (b) its ICT service management and software services could qualify it as an Important Entity under Annex II; (c) non-compliance with NIS2 carries fines up to €7M or 1.4% of global turnover for Important Entities; (d) Finland has transposed NIS2 and enforcement is active.

Evidence: https://www.etteplan.com/about-us/sustainability/quality/, https://www.etteplan.com/about-us/insights/eu-cyber-resilience-act-product-manufacturers-guide/, https://www.etteplan.com/about-us/insights/eu-cyber-resilience-act-product-manufacturers-act-now/

ISAE 3000 (source) — Assessment Required

ISAE 3000 applies to assurance engagements on non-financial information, commonly used for sustainability reporting assurance, ESG disclosures, and non-financial statement audits. Etteplan is a publicly listed company (Nasdaq Helsinki) and publishes sustainability information. Under the EU Corporate Sustainability Reporting Directive (CSRD), large listed companies are required to have sustainability reporting assured. Etteplan's size and listing status likely bring it within CSRD scope, which mandates limited assurance (and eventually reasonable assurance) under ISAE 3000 or equivalent. Risk is Low because ISAE 3000 is an assurance standard rather than a regulatory mandate with direct penalties — non-compliance risk is primarily reputational and investor-relations related, and CSRD enforcement timelines are phased.

Evidence: https://www.etteplan.com/about-us/sustainability/, https://www.etteplan.com/investors/reports-and-presentations/

CSRD (source) — Assessment Required

CSRD (Directive 2022/2464/EU) requires large listed EU companies to report on sustainability matters using European Sustainability Reporting Standards (ESRS) with mandatory third-party assurance. Etteplan Oyj is listed on Nasdaq Helsinki and is a large enterprise (exceeds all size thresholds). As a Finnish company, CSRD was transposed into Finnish law. Large listed companies were in scope from financial year 2024 (reporting in 2025). Risk is Medium because: (a) CSRD non-compliance carries regulatory and reputational risk; (b) Etteplan already publishes sustainability information but the extent of ESRS-compliant reporting is unconfirmed; (c) mandatory assurance requirements add compliance cost and complexity.

Evidence: https://www.etteplan.com/about-us/sustainability/, https://www.etteplan.com/investors/reports-and-presentations/, https://www.etteplan.com/about-us/sustainability/environment/

Financials

Three-year financials

Financial Resilience Score: 6/10

Etteplan demonstrates moderate financial resilience characterized by a stable top line of approximately EUR 360M across three consecutive years (2023-2025), a solid equity base with a consistent equity ratio of around 40.5-40.9%, and reliable operating cash generation of EUR 31-36M per year even in a weak industrial market. The company has a diversified blue-chip customer base (ABB, KONE, Valmet, Danfoss, Philips) spread across three service areas and multiple geographies, and benefits from the stability of a strong controlling shareholder (Ingman Group). However, profitability has compressed materially, with EBIT margin falling from 7.1% in 2023 to 4.9% in 2025, and further to 3.5% in H1 2026. Revenue growth has stalled and organic revenue actually declined about 4.7% in 2024, offset only by acquisitions. Rising debt (gross interest-bearing debt grew from EUR 86.6M to EUR 95.9M) combined with a goodwill-heavy balance sheet (EUR 117.4M goodwill vs EUR 117.8M equity) creates impairment risk if profitability does not recover. Missing the prior strategic target of EUR 500M revenue by 2024 (actual: EUR 361M) also raises execution concerns for the new 2027 targets.

Key strengths: Stable revenue of ~EUR 360M for three consecutive years, Solid equity ratio consistently at 40.5-40.9%, Positive and resilient operating cash flow of EUR 31-36M annually, Blue-chip diversified customer base (ABB, KONE, Valmet, Danfoss, Philips), Strong controlling shareholder (Ingman Group) provides stability, Diversified across three service areas and seven countries, Active acquisition track record supporting inorganic growth

Risk factors: Cyclical exposure to machinery/metal industry capex, Margin compression: EBIT margin fell from 7.1% (2023) to 4.9% (2025), 3.5% in H1 2026, Rising debt: gross interest-bearing debt up to EUR 95.9M with net gearing at 60%, Goodwill-heavy balance sheet (EUR 117.4M goodwill vs EUR 117.8M equity) - impairment risk, Automotive weakness in Sweden and Germany, Talent risk in competition for skilled engineers, Geopolitical and market uncertainty flagged by management, Missed prior strategic targets (EUR 500M by 2024; achieved EUR 361M), Organic revenue decline of ~4.7% in 2024 masked by acquisitions

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report