Kamstrup A/S

Denmark · owned by OK A.M.B.A. (Denmark) · www.kamstrup.com · 19 vendors

Kamstrup is a Danish technology company specialising in smart metering solutions for energy and water utilities. The company develops and manufactures intelligent meters, data communication systems, and software for electricity, heat, cooling, and water measurement. Kamstrup serves utility companies and submetering markets globally, helping them optimise resource management and improve operational efficiency.

Resilience scores

Disruption prediction

Kamstrup A/S has an estimated 11% probability of disruption in the next 6 months.

8 of Kamstrup A/S's 19 vendors monitored for disruptions.

Technology vendors

Services catalogue

5 services in catalogue across 3 categories; runs on 19 sub-vendors.

Insights

Last updated 2026-09-13 · revision 17

19 direct vendors, 247 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Kamstrup A/S exhibits medium migration readiness, characterized by a mix of enabling factors and significant challenges. On the positive side, the company's strong and consistent financial growth provides ample capacity to fund potential migration initiatives. Their existing adoption of cloud platforms like Sitecore Cloud and Azure for parts of their internal tech stack indicates a foundational understanding and capability in cloud environments, which can facilitate further cloud migration. The ISO 27001 certification also provides a robust information security framework that can guide secure migration processes. However, several factors present substantial hurdles. The 'High risk' associated with NIS2 compliance is a major concern. As an essential entity in critical infrastructure, any migration of core systems or data would need to rigorously adhere to NIS2 cybersecurity and risk management requirements, potentially adding significant complexity, cost, and time. Similarly, the 'Medium risk' for SOC2 compliance suggests that customer requirements might necessitate achieving this certification for migrated services, further complicating the process. Data residency requirements under GDPR and potential additional localization requirements under NIS2 for critical infrastructure data, especially given their global operations, could also restrict migration options and increase complexity. Regarding vendor relationships, the data is ambiguous. While 'Total Vendors: 0' is stated, the presence of 'Vendor HQ Countries' and 'Vendor Owner Countries' suggests external dependencies. The use of specific platforms like Sitecore (for CMS) and Azure (for cloud hosting) implies a degree of platform-specific vendor lock-in for these components, which could make migration away from them challenging. The geographic diversity of vendor HQs (US, AU, NZ, CA, SE) is moderate, which neither significantly eases nor complicates migration from a geographic concentration perspective. The hardware-centric nature of many of their products means that migration readiness primarily applies to their software platforms and data management systems, rather than the physical metering devices themselves.

Compliance

9 in-scope frameworks identified; showing 3.

NIS2 (source) — Assessment Required

NIS2 (EU Directive 2022/2555, transposed into Danish law via the Danish NIS2 Act effective October 2024) is highly likely to apply to Kamstrup A/S on multiple grounds: (1) Kamstrup manufactures and operates smart metering infrastructure for energy (electricity, district heating) and water utilities — sectors explicitly listed as Essential Entities under NIS2 Annex I; (2) Kamstrup's cloud-based data management platforms (READy, Head-End systems) constitute digital infrastructure for critical utility operators; (3) Kamstrup almost certainly exceeds the medium enterprise threshold (50+ employees, €10M+ turnover) given their global operations across 20+ countries; (4) As a supplier of critical infrastructure technology to Essential Entities, Kamstrup may be classified as an Important Entity in the manufacturing sector (Annex II) or as part of the supply chain obligations imposed on their utility customers. Risk is High because: NIS2 imposes significant obligations (incident reporting within 24/72 hours, supply chain security, board-level accountability, mandatory security measures) with fines up to €10M or 2% of global turnover for Essential Entities; Danish enforcement by the Danish Agency for Digital Government (Digitaliseringsstyrelsen) and sector-specific authorities is active; non-compliance in critical infrastructure is a top regulatory priority across the EU.

Evidence: https://www.kamstrup.com/en-us/about-us/data-security, https://www.kamstrup.com/en-en

Danish Data Protection Act — Compliant

The Danish Data Protection Act (Act No. 502 of 23 May 2018, as amended) supplements GDPR with Danish-specific provisions. As a Danish company, Kamstrup is subject to both GDPR and the Danish Data Protection Act. The Danish Data Protection Authority (Datatilsynet) is the supervisory authority. Risk is Medium for the same reasons as GDPR — smart meter data sensitivity, dual controller/processor roles, and cross-border transfers — with the additional consideration that Datatilsynet has been an active enforcer of data protection rules in Denmark.

Evidence: https://www.kamstrup.com/en-us/about-us/privacy-policy, https://www.kamstrup.com/en-us/about-us/data-security

SOC 2 (source) — Assessment Required

Kamstrup operates cloud-based data management platforms (READy platform, Head-End systems, MyKamstrup portal) that process utility consumption data on behalf of their customers. This positions them as a cloud service provider/SaaS vendor, which is the primary target audience for SOC 2 attestation. Risk is Medium because: (1) Kamstrup's US utility customers increasingly require SOC 2 Type II reports as part of vendor due diligence; (2) the absence of a publicly available SOC 2 report may create competitive disadvantage and procurement barriers in the North American market; (3) their ISO 27001 certification partially addresses the same security control objectives but SOC 2 is specifically required by many US enterprise customers; (4) without SOC 2, customers cannot independently verify the security, availability, and confidentiality of Kamstrup's cloud services. Risk is not High because SOC 2 is a voluntary framework (not a legal mandate) and ISO 27001 provides an alternative assurance mechanism.

Evidence: https://www.kamstrup.com/en-us/about-us/data-security

Financials

Three-year financials

Financial Resilience Score: 8/10

Kamstrup A/S demonstrates strong financial resilience as a financially healthy, cooperatively-owned Danish 'hidden champion' in smart metering. The company has achieved steady double-digit top-line growth (approximately 10% CAGR from 2021-2023) and maintains a solid equity ratio historically in the 40-50% range. Its ownership by OK a.m.b.a., a Danish consumer cooperative, provides a stable, patient capital base without PE-style leverage or short-term exit pressure, allowing reinvestment of profits into growth initiatives. The company benefits from structural end-market tailwinds including EU water-loss regulation, district-heating expansion, submetering mandates, U.S. AMI roll-outs, and grid electrification. Its installed base of 15-20 year meter assets generates recurring aftermarket software (READy, OMNIA) and service revenue. Market leadership in ultrasonic metering for district heating and water in Europe, combined with a top-3 global position in smart-water metering, provides competitive moat. However, EBIT margins have trended down from ~13-14% in 2021 to ~9-11% in 2023, reflecting component-cost inflation (semiconductors), currency headwinds, and heavier R&D and North American commercial investment. Project lumpiness on large utility AMI contracts and cyber/regulatory exposure on critical infrastructure represent key watch items.

Key strengths: Market leadership in ultrasonic metering for district heating and water in Europe, Top 3 global smart-water metering vendor position, Structural tailwinds from EU water regulation, district heating, and AMI rollouts, Recurring revenue from 15-20 year installed base and software (READy, OMNIA), Stable cooperative ownership (OK a.m.b.a.) with no leverage pressure, Strong equity ratio historically 40-50%, Vertical integration with own manufacturing in Denmark and Poland, Consistent double-digit revenue growth (~10% CAGR)

Risk factors: Component and commodity cost exposure (semiconductors, brass/copper, plastics), EBIT margin compression from ~13-14% to ~9-11%, Project lumpiness and tender risk on large utility AMI contracts, Currency exposure (majority of sales outside Denmark in EUR, USD, GBP, SEK, NOK), Cyber/data-security exposure on critical infrastructure, Concentrated ownership limits capital-markets access for M&A

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report