EWII Koncernen
Denmark · owned by EWII S/I (Denmark) · ewii.dk · 11 vendors
EWII is a Danish energy and utilities group headquartered in Kolding, Denmark, providing electricity, internet, EV charging, water, and district heating services to private and business customers. The group operates as a consumer-owned cooperative serving customers primarily in the Trekantområdet (Triangle Region) and on Bornholm. EWII is committed to contributing to a 100% climate-neutral energy system through renewable energy and green transition initiatives.
Resilience scores
- Digital Sovereignty: 36
- Digital Resilience: 6
- Financial Resilience: 8
Technology vendors
- Adobe Inc. — Technology — United States
- Google LLC — Technology — United States
- Meta Platforms, Inc. — Technology — United States
- and 8 more
Insights
Last updated 2026-09-13 · revision 2
11 direct vendors, 222 subvendors
Direct vendors by controlling owner country (sample)
- Belgium: 1
- Denmark: 3
- United States: 5
Subvendors by controlling owner country (sample)
- India: 2
- Denmark: 9
- Sweden: 8
Migration Readiness: 3/10
Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.
EWII Koncernen exhibits a low level of migration readiness, primarily due to its foundational technology stack and regulatory environment. A substantial portion of its key technologies involves specialized Industrial Control Systems (SCADA), Smart Grid management, fibre optic networks, and district heating systems. These are typically on-premise, highly integrated, and often legacy systems that are inherently complex and costly to migrate to cloud-native architectures. The company operates in a highly regulated Danish and EU energy and utility sector, classified as an 'Essential Entity' under the NIS2 Directive. This regulatory burden imposes stringent requirements for data integrity, operational continuity, and security, adding significant complexity and cost to any potential migration effort. The 'Data Residency Requirements' are not specified, which could introduce further constraints if strict local data storage is mandated. While EWII's consistent revenue growth provides the financial capacity to fund a migration, the 'Vendor Lock-in Risk' is unknown, particularly for critical OT systems where specialized vendors may limit flexibility. Although the company utilizes some modern IT components like mobile apps (EWII Energi & Opladning), OpenID Connect, and potentially a modern CMS (Episerver/Optimizely), these are likely peripheral to the core utility infrastructure. The overall technical complexity, regulatory hurdles, and potential vendor lock-in for critical operational technology present significant challenges for a comprehensive migration.
Compliance
12 in-scope frameworks identified; showing 3.
EU Cybersecurity Act — Assessment Required
The EU Cybersecurity Act establishes ENISA's permanent mandate and creates an EU-wide cybersecurity certification framework. While the Act itself does not impose direct obligations on operators, it underpins the cybersecurity certification schemes that may become mandatory for critical infrastructure operators under NIS2 and sector-specific regulations. EWII's smart metering systems, EV charging infrastructure, and broadband network may be subject to emerging EU cybersecurity certification requirements. Risk is Medium because mandatory certification schemes are still being developed, but EWII should monitor developments.
Evidence: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32019R0881, https://www.enisa.europa.eu/, https://www.cfcs.dk/en/
ISAE 3000 (source) — Assessment Required
ISAE 3000 is an international assurance standard used for non-financial assurance engagements, including sustainability reporting, ESG disclosures, and data security attestations. EWII Koncernen publishes annual reports and has stated commitments to green transition and climate-neutral energy. As a large Danish utility group, EWII may be subject to the EU Corporate Sustainability Reporting Directive (CSRD) and may use ISAE 3000 (or ISAE 3410 for greenhouse gas statements) for third-party assurance of sustainability disclosures. Risk is Medium because while ISAE 3000 assurance is not legally mandated as a standalone requirement, it is increasingly expected for CSRD compliance and stakeholder trust. Failure to obtain assurance on sustainability claims could expose EWII to greenwashing allegations.
Evidence: https://www.ewii.dk/om-ewii/organisering-og-forretning/aarsrapport/, https://www.ewii.dk/om-ewii/mission-og-vision/, https://www.iaasb.org/publications/international-standard-assurance-engagements-isae-3000-revised-assurance-engagements-other-audits, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2464
EU Electricity Market Regulation — Assessment Required
EU electricity market regulations establish the framework for internal electricity market operation, including rules for distribution system operators (DSOs), consumer rights, smart metering, and renewable energy integration. EWII Infrastruktur A/S as a DSO must comply with unbundling requirements, non-discriminatory grid access, and smart metering rollout obligations. Risk is Medium because Denmark has a mature regulatory framework and EWII as a licensed DSO is presumed to be operating within this framework, but specific compliance posture is not publicly verified.
Evidence: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32019R0943, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32019L0944, https://www.forsyningstilsynet.dk/, https://www.energistyrelsen.dk/
Financials
Three-year financials
- 2025: revenue DKK 402M, EBIT DKK -11.9M, equity DKK 524M
- 2024: revenue DKK 354M, EBIT DKK -63.5M, equity DKK 801M
- 2023: revenue DKK 291M, EBIT DKK -16.9M, equity DKK 954M
Financial Resilience Score: 8/10
EWII Koncernen demonstrates strong financial resilience underpinned by a very substantial equity base of approximately DKK 5.5 billion and a solvency ratio of 37.5% in 2025 (down from 46.3% in 2023 but still healthy for a capital-intensive utility). As a self-owning institution (selvejende institution), the group has no dividend obligations to shareholders, allowing full reinvestment of earnings into infrastructure and green transition initiatives. The group also maintains a large liquid financial reserve through EWII Invest, valued at more than DKK 1.9 billion in 2025, which delivered a DKK 170m gain (+6.2%) in 2025 and DKK 340m (+14.4%) in 2024. The regulated infrastructure segments (electricity distribution via TREFOR El-net, district heating, and water) provide stable, predictable cash flows under Danish cost-plus regulation with uptime exceeding 99.9%. Financing is predominantly through long-dated Danish realkredit (mortgage bonds), providing cheap and stable funding. The post-balance-sheet Fibernet divestment closed on 1 February 2026, generating a DKK 1.1 billion gain and materially recapitalising the group, with management guiding to DKK 1.0-1.2 billion net result in 2026. Risks include exposure to volatile power markets (DKK 151m combined loss/provision on long-dated solar PPAs in 2025), execution delays in growth areas (batteries, EV charging, trading), heavy geographic concentration in Denmark (99% of revenue), rising financial costs (DKK 113m in 2025), grid capacity constraints, groundwater contamination risks requiring future capex, and cyber threats to critical infrastructure. Nevertheless, the group's fortress balance sheet, foundation structure, and imminent liquidity boost from the Fibernet sale support a strong resilience score.
Key strengths: Very strong equity base of DKK 5.5B with 37.5% solvency ratio, Foundation ownership structure (S/I) with no dividend obligations, Liquid financial reserve of DKK 1.9B+ via EWII Invest, Stable regulated cash flows from electricity, heating, water, Long-dated realkredit (mortgage bond) financing, DKK 1.1B gain from Fibernet sale closed Feb 2026, Management guiding DKK 1.0-1.2B net result for 2026, Unqualified PwC audit opinion for both 2024 and 2025
Risk factors: Losses on long-dated fixed-price solar PPAs (DKK 151m in 2025), Execution delays in batteries, EV charging, and trading, 99% revenue concentration in Denmark, Rising financial costs (DKK 113m in 2025), Declining solvency trend (46.3% → 41.9% → 37.5%), Grid capacity constraints in TREFOR El-net, Groundwater contamination risk requiring water capex, Cyber threat rated 'very high' for critical infrastructure, EBIT loss of DKK -150m in 2025
Revenue by geography
- Denmark: 99.1%
- United Kingdom: 0.7%
- Germany: 0.1%
Revenue by product/service
- Commercial activities (electricity retail, broadband, EV charging, batteries, trading, software): 63.3%
- Regulated activities (electricity distribution, district heating, water): 36.7%
Workforce by country
- Denmark: 650
- Lithuania: 1
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.