Nordea Pension, Livsforsikringsselskab A/S

Denmark · owned by Nordea (Finland) · nordeapension.dk · 17 vendors

Nordea Pension, Livsforsikringsselskab A/S is a Danish pension and life insurance company operating as part of the Nordea Group. It offers a wide range of pension savings, life insurance, health insurance, and disability insurance products for both private individuals and businesses. The company also provides senior advisory services and focuses on health promotion and disease prevention for its customers.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-04 · revision 3

17 direct vendors, 184 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Nordea Pension's migration readiness is assessed as 40, indicating a medium-low level of readiness. The primary challenges stem from the highly regulated financial services environment and stringent data residency requirements within the EU/EEA. These factors necessitate meticulous planning, significant investment in compliance, and potentially limit the choice of cloud providers or require specific regional deployments, adding complexity and cost to any migration effort. The internal tech stack, featuring "proprietary employer pension portal" and "proprietary customer self-service portal," suggests a reliance on custom-built systems that may not be inherently cloud-native, containerized, or based on microservices architectures. Migrating such systems often involves substantial refactoring or re-platforming, increasing effort and risk. While the Nordea Group's stable financial performance provides the capacity to fund a migration, the "unknown" vendor lock-in risk, coupled with the contradictory vendor data ("Total Vendors: 0" vs. 18 services and diverse vendor locations), makes it difficult to fully assess external dependencies. If there are few vendors for many services, or if the proprietary systems are deeply integrated with specific vendor technologies, this could present significant lock-in challenges. The lack of explicit mention of modern architectural patterns (e.g., microservices, containerization) further suggests that a significant architectural transformation might be required for a full cloud migration.

Compliance

11 in-scope frameworks identified; showing 3.

CSRD (source) — Assessment Required

The Corporate Sustainability Reporting Directive (CSRD) requires large companies and listed companies to report on sustainability matters using European Sustainability Reporting Standards (ESRS). As a subsidiary of the Nordea Group (a large Nordic financial group), Nordea Pension may be covered either directly (if it meets size thresholds independently) or through group-level CSRD reporting. The risk is Medium because: (1) CSRD is being phased in from 2024-2028; (2) large financial entities are in the first wave; (3) the Nordea Group is subject to CSRD at group level; (4) the company references UN Global Compact membership and responsible investment practices, suggesting ESG awareness; (5) non-compliance with CSRD reporting requirements can result in regulatory sanctions.

Evidence: https://www.nordeapension.dk/pension/opsparing/ansvarlig-investering/, https://www.nordeapension.dk/rapporter/, https://www.nordeapension.dk/om-os/

DORA (source) — Assessment Required

DORA (Regulation EU 2022/2554) became applicable on 17 January 2025 and directly applies to insurance undertakings as defined in Solvency II. Nordea Pension, as a licensed life insurance company, is explicitly within DORA's scope. DORA imposes mandatory requirements for: ICT risk management, ICT incident reporting, digital operational resilience testing, ICT third-party risk management, and information sharing. The risk is rated High because: (1) DORA is a directly applicable EU Regulation (no national transposition needed); (2) it became effective January 2025 — a recent and significant compliance obligation; (3) non-compliance can result in fines up to 1% of average daily worldwide turnover for up to 6 months; (4) the company relies on third-party IT processors (including outside EU/EEA) which must now be managed under DORA's ICT third-party risk framework; (5) Finanstilsynet is the competent authority for DORA oversight of Danish insurance entities.

Evidence: https://www.nordeapension.dk/om-os/, https://www.nordeapension.dk/finanstilsynets-redegoerelse/, https://www.nordeapension.dk/saadan-anvender-vi-data/

NIS2 (source) — Assessment Required

Nordea Pension operates in the financial services sector (life insurance and pension), which falls under the 'financial market infrastructures' and 'financial sector' categories of NIS2 Annex I (Essential Entities). As a subsidiary of the Nordea Group — one of the largest financial groups in the Nordic region — the company almost certainly exceeds the NIS2 size thresholds (50+ employees, €10M+ turnover). Denmark transposed NIS2 into national law via the 'Lov om sikkerhed i net- og informationssystemer' (NIS2-loven), effective October 2024, supervised by the Centre for Cyber Security (CFCS) and sector-specific authorities including Finanstilsynet. Non-compliance with NIS2 can result in fines up to €10M or 2% of global annual turnover for essential entities, plus potential management liability. The risk is rated High because: (1) financial sector is explicitly listed as Essential Entity sector; (2) cyber threats to financial institutions are severe and frequent; (3) NIS2 imposes mandatory incident reporting (24-hour initial notification), supply chain security, and board-level accountability; (4) Danish enforcement is active through CFCS and Finanstilsynet.

Evidence: https://www.nordeapension.dk/finanstilsynets-redegoerelse/, https://www.nordeapension.dk/saadan-anvender-vi-data/, https://www.nordeapension.dk/om-os/

Financials

Three-year financials

Financial Resilience Score: 7/10

Nordea Pension, Livsforsikringsselskab A/S is a regulated Danish life insurer supervised by Finanstilsynet under the Solvency II framework, which imposes strong prudential capital, reserving, and disclosure requirements. The company publishes annual SFCR reports with QRT exhibits providing transparency on own funds versus SCR, indicating a robust regulatory backbone. It benefits from the Nordea brand, strong bank-based distribution, a diversified product suite spanning unit-linked pensions, health, life/disability protection, and direct real estate holdings via Nordea Pension Ejendomme. However, specific financial figures (premium income, technical result, profit, equity, solvency ratio) could not be extracted in this session, limiting quantitative assessment. A notable governance concern is the publication of 'Supplerende korrigerende information' (supplementary corrective information) to the 2022 annual report, indicating a post-publication accounting correction whose nature and magnitude warrant further review. As with all life insurers, results are sensitive to interest rate movements, equity market performance, credit spreads, and longevity/biometric risks, and the Danish pension market is competitive with ongoing fee compression on unit-linked products.

Key strengths: Regulated under Solvency II with Finanstilsynet supervision, Nordea brand and strong bank distribution channel, Diversified product suite (pensions, health, life, disability), Direct real estate portfolio via Nordea Pension Ejendomme, UN Global Compact signatory / ESG framework, Three customer segments: private, commercial, agricultural

Risk factors: 2022 annual report required supplementary corrective information, Interest rate sensitivity on technical provisions, Equity market exposure via unit-linked products, Competitive Danish pension market with fee compression, Longevity/biometric risk on traditional guaranteed books, Single-country concentration (Denmark only)

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report