Hitachi Energy Ltd

Switzerland · owned by Hitachi, Ltd. (Japan) · www.hitachienergy.com · 23 vendors

Hitachi Energy is a global technology leader in power grids, serving utility, industry, and infrastructure customers across more than 90 countries. The company provides products, systems, and services across the energy value chain, including transformers, grid automation, high-voltage products, and power consulting. It was formed in 2020 when Hitachi acquired ABB's Power Grids business and rebranded it as Hitachi Energy in 2021.

Resilience scores

Disruption prediction

Hitachi Energy Ltd has an estimated 11% probability of disruption in the next 6 months.

13 of Hitachi Energy Ltd's 23 vendors monitored for disruptions.

Technology vendors

Services catalogue

4 services in catalogue across 3 categories; runs on 23 sub-vendors.

Insights

Last updated 2026-08-16 · revision 15

23 direct vendors, 276 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Hitachi Energy Ltd's migration readiness is significantly challenged by its complex regulatory and data residency landscape, despite strong financial backing and some modern technology adoption. The company's financial stability, with projected revenue growth to $20B by 2025, provides ample capacity to fund migration initiatives. Its internal tech stack includes modern elements like Microsoft Azure, Kubernetes, and Docker, which are conducive to cloud-native migration. However, the regulatory environment presents substantial hurdles. Hitachi Energy operates under an extremely complex web of regulations including GDPR, NIS2, CRA, Swiss nDSG, China's PIPL/DSL, India's DPDP Act, Saudi Arabia's PDPL, and NERC CIP. Many of these are currently in an 'Assessment Required' or 'Partially Compliant' state, indicating significant work needed to define compliant migration paths. The multi-jurisdictional data residency requirements are a major constraint, necessitating a highly distributed and carefully planned cloud architecture, potentially requiring local cloud instances in countries with strict localization laws (e.g., China, Saudi Arabia). The Privacy Notice, last updated in March 2022, predates several key regulatory and data residency developments, suggesting potential gaps in current documentation. While the company utilizes Microsoft Azure for voicemail, implying some cloud adoption, the migration of large enterprise systems like SAP ERP and Adobe Experience Manager (AEM) will be complex. The 'Total Vendors: 0' data point is noted as an anomaly; assuming key vendors like GlobalLogic and Hitachi Digital Services, the reliance on 'Hitachi Digital Services' could imply some internal vendor lock-in or dependencies within the Hitachi Group, which might simplify some internal migrations but add complexity for external cloud adoption. The 'Vendor Lock-in Risk' is explicitly stated as 'Unknown'. The overwhelming regulatory complexity and stringent data residency requirements are the primary factors limiting a higher migration readiness score, as they will dictate significant architectural and operational constraints on any large-scale migration effort.

Compliance

11 in-scope frameworks identified; showing 3.

GDPR (source) — Compliant

Hitachi Energy is a large multinational with 56,000+ employees in 60 countries, processing extensive personal data of employees, customers, contractors, job applicants, suppliers, and website visitors across the EEA and globally. The company has a formally appointed Data Protection Officer (DPO), published a comprehensive multi-language Privacy Notice, implemented Standard Contractual Clauses (SCCs) for international transfers, and maintains GDPR-aligned data processing agreements with third parties. Risk is Medium rather than Low because: (1) the sheer volume and sensitivity of personal data processed (including special categories such as health, race/ethnicity, criminal records) across 60 countries creates inherent exposure; (2) cross-border data transfers to non-EEA entities (including Japan's Hitachi parent) require ongoing SCC maintenance; (3) GDPR enforcement by EU supervisory authorities has intensified, with large multinationals frequently targeted; (4) California CCPA obligations are also acknowledged, indicating multi-jurisdictional privacy complexity. No publicly disclosed GDPR enforcement actions or fines were found, suggesting active compliance management.

Evidence: https://www.hitachienergy.com/privacy/privacy-notices, https://www.hitachienergy.com/privacy, https://www.hitachienergy.com/privacy/cookie-notice, https://www.hitachienergy.com/products-and-solutions/cybersecurity, https://www.hitachienergy.com/privacy/privacy-policy/subsidiaries

NIS2 (source) — Assessment Required

Hitachi Energy is a global leader in electrification and power grid technology, operating directly in the energy sector (electricity transmission, distribution, generation, renewable energy, HVDC, substations, grid automation) — one of the most explicitly named Essential Entity sectors under NIS2 Annex I. The company has 56,000+ employees and ~$20 billion in revenues, vastly exceeding NIS2's medium enterprise threshold (50+ employees or €10M+ turnover). It operates in numerous EU member states including Germany, France, Sweden, Italy, Poland, Austria, Denmark, Finland, and others. Risk is rated High because: (1) NIS2 Essential Entity classification carries the most stringent obligations (incident reporting within 24/72 hours, supply chain security, board-level accountability, potential fines up to €10M or 2% of global turnover); (2) As a critical infrastructure supplier to EU energy operators, Hitachi Energy's EU subsidiaries are likely directly in scope as Essential Entities; (3) NIS2 also applies to ICT service management and digital infrastructure, which Hitachi Energy provides through its grid automation and digitalization solutions; (4) Non-compliance risk is elevated because NIS2 was transposed into national law across EU member states by October 2024, and enforcement is actively ramping up; (5) A cybersecurity incident affecting Hitachi Energy's grid products could have cascading effects on EU critical infrastructure. Status is 'Assessment Required' because formal NIS2 registration/designation status per individual EU member state has not been publicly disclosed by the company.

Evidence: https://www.hitachienergy.com/products-and-solutions/cybersecurity, https://www.hitachienergy.com/products-and-solutions/cybersecurity/certificates, https://www.hitachienergy.com/news-and-events/features/2025/09/cybervadis-recognizes-hitachi-energy-with-a-platinum-rating, https://publisher.hitachienergy.com/preview?DocumentID=8DBR002862&LanguageCode=en&DocumentPartId=&Action=launch, https://www.hitachienergy.com/company/company-profile

SOC 2 (source) — Assessment Required

Hitachi Energy provides cloud-based and SaaS energy software solutions including Asset & Work Management, Energy Portfolio Management, Grid and Generation Management (Network Manager), and the HMAX Energy AI-powered platform. These digital offerings are delivered to utility and industrial customers who may contractually require SOC 2 Type II reports as evidence of security, availability, and confidentiality controls. Risk is Medium because: (1) Enterprise software and cloud service customers in regulated industries (utilities, financial sector energy traders) increasingly mandate SOC 2 reports in vendor due diligence; (2) Absence of SOC 2 certification could be a commercial barrier for US-based utility customers; (3) The company's existing ISO 27001 certification partially overlaps with SOC 2 Trust Service Criteria but is not a direct substitute for US market expectations; (4) No public SOC 2 report has been found, creating uncertainty about compliance posture for cloud service offerings.

Evidence: https://www.hitachienergy.com/products-and-solutions/cybersecurity, https://www.hitachienergy.com/products-and-solutions/cybersecurity/certificates, https://www.hitachienergy.com/services-and-consulting/hmax-energy, https://www.hitachienergy.com/products-and-solutions/digitalization

Financials

Three-year financials

Financial Resilience Score: 8/10

Hitachi Energy demonstrates strong financial resilience underpinned by a powerful structural tailwind from the global electrification and energy-transition capex cycle. Revenue has grown from ~JPY 1,082B in FY2022 to ~JPY 2,077B in FY2024, with Adjusted EBITA margin expanding from ~2% to ~10% over the same period, evidencing successful post-carve-out integration, pricing power in supply-constrained HVDC and transformer markets, and strong operating leverage. Order backlog exceeding USD 30 billion at end-FY2024 provides multi-year revenue visibility. As a wholly-owned subsidiary of Hitachi Ltd (Tokyo: 6501), the company benefits from an investment-grade parent credit halo and strong access to capital, with Hitachi committing over USD 6 billion in capex through FY2027 to expand manufacturing capacity. Hitachi Energy holds global #1 or #2 positions in HVDC, power transformers, and high-voltage switchgear — long-cycle, engineered products with high switching costs and a diversified installed base across 140+ countries. Risks include large-project execution and warranty exposure on turnkey HVDC/substation contracts, supply-chain and input-cost inflation (electrical steel, copper, semiconductors), potential stranded capacity if utility spending slows, FX translation impact from JPY reporting, and customer concentration among a relatively small set of transmission system operators globally. Overall, the combination of secular demand, expanding margins, record backlog, and parent support supports a high resilience rating.

Key strengths: Structural tailwind from global electrification and energy-transition capex, Record order backlog exceeding USD 30 billion providing multi-year visibility, Adjusted EBITA margin expansion from ~2% (FY2022) to ~10% (FY2024), Wholly-owned by investment-grade Hitachi Ltd with strong capital access, Global #1/#2 positions in HVDC, transformers, and high-voltage switchgear, Diversified installed base across 140+ countries, Over USD 6 billion capex commitment through FY2027 to expand capacity

Risk factors: Project execution and warranty risk on large HVDC/turnkey substation projects, Supply-chain and input inflation (grain-oriented electrical steel, copper, semiconductors), Capacity build ahead of demand — risk of stranded capacity if utility capex slows, FX translation risk from JPY reporting at parent level, Customer concentration among a small number of global transmission system operators, Quarterly margin lumpiness from large project accounting

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report