Kommunalbanken AS

Norway · owned by Norwegian Ministry of Local Government and Regional Development (Kingdom of Norway) (Norway) · kommunalbanken.no · 12 vendors

Kommunalbanken AS (KBN) is a Norwegian state-owned financial institution that provides long-term, low-cost loans to Norwegian municipalities, county authorities, and other public-sector entities. It is fully owned by the Norwegian state and serves as the primary source of financing for the Norwegian local government sector. KBN raises funds in international capital markets and on-lends to municipalities to finance public infrastructure and welfare services.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-12 · revision 3

12 direct vendors, 216 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Kommunalbanken AS exhibits a medium level of migration readiness, primarily supported by its strong financial capacity but significantly hampered by critical data gaps and a complex regulatory landscape. The "Consistent growth in net interest income and profit before tax from 2020 to 2022" indicates a robust financial position, providing the necessary capital to fund a potentially extensive and costly migration initiative. However, the readiness is severely constrained by the absence of crucial technical and operational details. There is a complete lack of information on "Internal Tech Stack" and "Key Technologies." Without knowing if the current environment is legacy, monolithic, or already incorporates modern, cloud-native principles (e.g., containerization, microservices), it is impossible to accurately estimate the technical effort, complexity, and potential costs involved in a migration. This is a major unknown that significantly lowers the readiness score. Furthermore, "Data Residency Requirements: Not specified" is a critical missing piece of information. For a financial institution operating under GDPR and stringent Norwegian financial regulations, data residency is often a non-negotiable requirement, heavily influencing the choice of cloud providers, regions, and architectural design. This unknown introduces substantial risk and potential constraints for any migration strategy. The regulatory environment itself presents significant challenges. As a financial institution, Kommunalbanken is subject to strict oversight by "Finanstilsynet" and must comply with complex regulations (e.g., CRR/CRD IV, MiFID II, GDPR). The "NIS2 Assessment Required" adds another layer of compliance complexity, particularly for cloud adoption, as it will necessitate robust cybersecurity and resilience measures for essential entities. These regulatory hurdles often require extensive due diligence, risk assessments, and potentially bespoke cloud solutions, increasing migration complexity and timelines. Lastly, "Vendor Lock-in Risk: Unknown" is a concern. While "Vendor Geographic Diversity: 4 unique countries" is a positive for resilience, the actual number of vendors for "Total Services: 14" and the complexity of existing contracts are unknown. If there is high lock-in with a few critical vendors, disentanglement and migration could be significantly more challenging and costly. The contradiction in the provided data regarding "Total Vendors: 0" versus the detailed vendor geographic information is noted; this assessment proceeds under the assumption that vendor relationships exist as implied by the detailed vendor country data.

Compliance

11 in-scope frameworks identified; showing 3.

GDPR (source) — Partially Compliant

Kommunalbanken AS is established in Norway, which is part of the European Economic Area (EEA), making GDPR directly applicable to its processing of any personal data.

While KBN primarily deals with public sector entities, it still processes personal data of employees and business contacts. A data breach could lead to fines and reputational harm, though the scale of personal data is likely smaller than a retail bank.

Evidence: https://www.kbn.com/en/about-us/company-information/, https://www.kbn.com/en/about-us/ethics/code-of-conduct/

ISAE 3000 (source) — Assessment Required

This is a voluntary assurance standard. It is increasingly used to provide independent assurance over sustainability reports, which KBN produces. This is becoming best practice under frameworks like CSRD.

ISAE 3000 is a standard for assurance over non-financial information. Risk is primarily reputational if sustainability or other non-financial reports are found to be inaccurate. The demand for this is growing but may not yet be universal.

Financial Undertakings Act — Compliant

Kommunalbanken AS is a financial institution headquartered and operating in Norway, placing it directly under the supervision of the Norwegian Financial Supervisory Authority (Finanstilsynet).

This is the primary legislation governing financial institutions in Norway. Non-compliance would lead to severe sanctions from Finanstilsynet, including license revocation. As a state-owned, highly-rated entity, the likelihood of non-compliance is low.

Evidence: https://www.kbn.com/en/investor/fact-sheet/faq/, https://www.finanstilsynet.no/en/publications/annual-report/annual-report-2023/reports-from-the-supervised-sectors-for-2023/banks-and-other-financing-activity/, https://www.regjeringen.no/en/dep/fin/about-the-ministry/subordinateagencies/the-financial-supervisory-authority/id270404/, https://www.finanstilsynet.no/contentassets/1adff534dfcb4b389da036e94666fd26/tilsynsrapport-kommunalbanken-as.pdf, https://www.finanstilsynet.no/en/supervision/banking-and-finance/, https://www.annualreports.com/Company/kommunalbanken-as

Financials

Three-year financials

Financial Resilience Score: 9/10

Kommunalbanken AS demonstrates exceptional financial resilience anchored by its 100% ownership by the Kingdom of Norway, giving it sovereign-equivalent credit standing with AAA/Aaa ratings from S&P and Moody's. Its lending book is virtually risk-free from a credit perspective because Norwegian municipalities cannot go bankrupt under Norwegian law, resulting in historically negligible loss provisions. The bank maintains very strong capital ratios, with CET1 typically at 18-20%+ and a leverage ratio comfortably above minimum requirements. KBN's funding profile is diversified across international debt markets in multiple currencies (USD, EUR, GBP, AUD, JPY) with matched-tenor debt hedged via derivatives, and it operates one of Europe's oldest green bond programmes (since 2010). Net interest income has grown meaningfully over the past three years, driven by higher Norwegian policy rates lifting margins on its floating-rate loan book and liquidity portfolio yields. Equity has grown consistently through retained earnings. Key risk considerations include single-sector and single-country concentration (Norwegian local government), IFRS earnings volatility from mark-to-market on derivatives and own debt, and political/regulatory dependency on state ownership and municipal borrowing legislation. Competitive pressure from KLP Kommunekreditt and commercial banks could compress lending margins over time. Overall, however, the combination of sovereign backing, low credit risk, strong capitalization, and stable core earnings supports a very high resilience score.

Key strengths: 100% Norwegian state ownership providing sovereign-equivalent credit standing, AAA/Aaa credit ratings from S&P and Moody's, Very low credit risk - Norwegian municipalities cannot go bankrupt by law, Strong CET1 capital ratio typically 18-20%+, Deep, diversified international multi-currency funding access, Pioneer in green bonds since 2010, Stable, predictable core earnings from floating-rate loan book, Consistent profitability across 2015-2024 on core-earnings basis

Risk factors: Concentration risk: single-sector (Norwegian local government) and single-country exposure, IFRS earnings volatility from mark-to-market on funding derivatives and own debt, Interest-rate and basis risk from cross-currency funding hedged into NOK floating, Political/regulatory risk tied to continued state ownership and municipal borrowing legislation, Competitive pressure from KLP Kommunekreditt and commercial banks compressing lending margins, Evolving CRR/CRD capital requirements requiring ongoing capital retention

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report