NCC Danmark A/S

Denmark · owned by Independent (Denmark) · ncc.dk · 10 vendors

NCC is one of Denmark's largest construction and civil engineering companies, building and renovating homes, offices, schools, hospitals, roads, bridges, and infrastructure. The Danish entity operates as part of the Nordic NCC Group, offering services spanning construction, renovation, transformation, and infrastructure projects. NCC also develops and leases residential and commercial properties across Denmark.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-13 · revision 4

10 direct vendors, 197 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

NCC Danmark A/S exhibits a medium level of migration readiness. The company has already adopted several cloud-based services such as Cloudinary for asset management, Optimizely for digital experience, and Microsoft 365 for enterprise productivity, indicating a foundational understanding and willingness to leverage cloud technologies. The presence of AI/Machine Learning and data-informed construction processes suggests a modern, data-driven approach that aligns well with cloud-native architectures. Financially, NCC's strong revenue of SEK 57.1 billion provides ample capacity to fund significant migration initiatives. Crucially, the absence of explicit 'Data Residency Requirements' simplifies potential cloud migration strategies, offering greater flexibility in choosing cloud providers and regions. However, significant challenges exist. The 'Vendor Lock-in Risk: Unknown' is a major impediment; migrating 17 vendor services without clear understanding of contract terms, integration complexities, and exit strategies could be costly and time-consuming. While there is cloud adoption, the data does not explicitly mention cloud-native architectures like containerization or microservices, suggesting that some core systems might still be monolithic or legacy, requiring more effort for modernization during migration. Although regulatory awareness is high (GDPR, NIS2 potential), compliance requirements will still necessitate careful planning and execution during any migration to ensure data protection and operational continuity. The vendor geographic diversity, while present across 2 countries, is not extensive, which could add some complexity to vendor management during a large-scale migration.

Compliance

10 in-scope frameworks identified; showing 3.

EU Procurement Regulations — Assessment Required

NCC Danmark A/S is a major contractor for Danish public sector projects (schools, hospitals, roads, bridges, water treatment plants, energy infrastructure). As a participant in public procurement, NCC must comply with the Danish Public Procurement Act (Udbudsloven, Act No. 1564 of 15 December 2015, implementing EU Directives 2014/24/EU and 2014/25/EU). This includes requirements for: exclusion grounds (criminal convictions, tax evasion, corruption), ESPD (European Single Procurement Document) submissions, and compliance with contract conditions. Risk is Medium because NCC's business model is heavily dependent on winning public contracts, and any compliance failures (e.g., cartel behaviour, corruption) could result in exclusion from public procurement — a severe business impact.

Evidence: https://www.ncc.dk/om-ncc/ansvarlighed/compliance/, https://www.ncc.dk/om-ncc/ansvarlighed/compliance/adfardskodeks/forretningsmoral/, https://www.ncc.dk/om-ncc/medier/pressemeddelelser/

Danish Working Environment Act — Assessment Required

The construction sector has the highest occupational safety and health (OSH) risk profile of any industry in Denmark and the EU. The Danish Working Environment Act (Arbejdsmiljøloven, consolidated Act No. 2062 of 16 November 2021) and EU Framework Directive 89/391/EEC impose extensive obligations on construction employers. NCC Danmark A/S, as one of Denmark's largest construction companies with thousands of workers on active construction sites, faces significant OSH compliance obligations and enforcement risk. The Danish Working Environment Authority (Arbejdstilsynet) actively inspects construction sites and issues improvement notices and fines. The construction sector accounts for a disproportionate share of workplace fatalities and serious injuries in Denmark. Risk is High because: (1) construction is inherently high-risk; (2) NCC operates numerous simultaneous construction sites; (3) Arbejdstilsynet actively enforces in this sector; (4) subcontractor management adds complexity; (5) non-compliance can result in work stoppages, fines, and reputational damage.

Evidence: https://www.ncc.dk/om-ncc/ansvarlighed/compliance/adfardskodeks/menneskerettigheder/, https://www.ncc.dk/om-ncc/medier/nyheder/skansomme-arbejdsmetoder-testes/, https://at.dk/, https://www.retsinformation.dk/eli/lta/2021/2062

GDPR (source) — Partially Compliant

NCC Danmark A/S is headquartered in Denmark (EU member state) and processes extensive personal data including employee data, customer data, supplier data, KYC data, whistleblower reports, and biometric/CCTV data. GDPR is unambiguously applicable. The company has published a comprehensive, detailed privacy notice covering multiple data subject categories, legal bases, retention principles, and data transfer safeguards — demonstrating active GDPR compliance efforts. However, no publicly available DPO appointment record, formal GDPR audit report, or supervisory authority certification has been found. The privacy notice references ISO 27000 security standards and standard contractual clauses for third-country transfers, indicating structured compliance. Risk is Medium rather than High because the company demonstrates clear awareness and documented processes, but the absence of verifiable third-party audit evidence or DPO registration leaves residual uncertainty about full operational compliance. Fines under GDPR can reach €20M or 4% of global annual turnover, which for a large Nordic contractor represents significant financial exposure.

Evidence: https://www.ncc.dk/kontakt-os/om-dette-website/meddelelse-om-privatlivsbeskyttelse/, https://www.ncc.dk/kontakt-os/om-dette-website/meddelelse-om-beskyttelse-af-jobansogeres-privatliv/, https://www.ncc.dk/kontakt-os/om-dette-website/cookies/, https://www.ncc.dk/kontakt-os/om-dette-website/dine-rettigheder/, https://www.ncc.dk/kontakt-os/om-dette-website/information-om-kameraovervagning-pa-nccs-arbejdspladser/, https://www.ncc.dk/kontakt-os/om-dette-website/behandling-af-personlige-oplysninger-ncc-forsakring/, https://www.ncc.dk/kontakt-os/om-dette-website/information-om-behandling-af-personlige-oplysninger--konsulter-och-leverantorer/

Financials

Three-year financials

Financial Resilience Score: 7/10

NCC Danmark A/S benefits significantly from being part of NCC AB, a large listed Nordic construction group with approximately SEK 56 billion in revenue and around 11,500 employees. The parent group has strong liquidity, supported by a green-bond financing programme (SEK 1.25 bn issued 2024) and an active share repurchase programme, which provides meaningful financial backing to the Danish subsidiary. The Danish entity's activities are well-diversified across building, renovation/transformation, infrastructure (foundations, district heating, water treatment, high-voltage substations), and asphalt/stone materials. This reduces dependence on any single construction segment. Recent contract wins with Energinet (~DKK 130M), Himmerland Boligforening (~DKK 150M), and various public water/wastewater and road projects indicate a strong pipeline of counter-cyclical public-sector work. However, the company faces meaningful headwinds. The Danish residential new-build market has been weak since 2022-2023 due to rising interest rates and construction-cost inflation, pressuring margins across Nordic contractors. Fixed-price construction contracts also expose NCC to project-execution risk and potential write-downs, and the business is working-capital intensive with strong competition from Per Aarsleff, MT Højgaard, and Zublin.

Key strengths: Parent-group backing from NCC AB (SEK 56B revenue, ~11,500 employees), Green-bond financing programme (SEK 1.25B issued 2024), Diversified Danish activities across building, infrastructure, and asphalt, Recurring public-sector work (Energinet, housing associations, water/wastewater), Sustainability positioning aligned with EU/Danish procurement rules (DGNB Gold, Nordic Swan, timber, low-CO2 asphalt), Rotation toward public infrastructure and energy transition projects in 2025-2026 order book

Risk factors: Cyclical Danish construction market with weak residential new-build since 2022-2023, Fixed-price contract exposure creating project-execution and write-down risk, Working-capital intensity typical of large-project contracting, Strong competition from Per Aarsleff, MT Højgaard, Zublin and other Nordic contractors, Interest rate and construction-cost inflation pressuring margins

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report