Nordic Semiconductor

Norway · www.nordicsemi.com · 9 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 9 sub-vendors.

Insights

Last updated 2026-07-27 · revision 1

9 direct vendors, 176 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 8/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Nordic Semiconductor exhibits strong migration readiness, largely driven by its significant adoption of cloud-native principles and modern development practices. Their product offerings, such as nRF Cloud, Fuel Gauge, and AI-Assisted Development Tools, are inherently cloud-based, demonstrating a clear strategic direction towards scalable, flexible architectures. Internally, the use of AWS for infrastructure and Memfault for embedded observability, coupled with the Zephyr RTOS and GitHub, indicates a solid foundation for cloud migration and modern software development. These technologies promote portability and reduce technical debt. The company's focus on IoT security and compliance also suggests established processes for managing technical and regulatory aspects of migrations. Potential challenges include the presence of enterprise platforms like Sitecore CMS/Content Hub and Telligent Community Platform, which, depending on their customization and integration levels, could introduce some complexity during migration. However, these platforms can often be migrated to cloud environments. The absence of specified data residency requirements is a neutral point but could become a factor if strict regulations emerge. Similarly, the lack of financial stability data makes it difficult to assess the company's capacity to fund large-scale migration initiatives. Vendor relationships, while moderately diverse, show a concentration in US-based providers, which could simplify some migrations but also create dependencies. Overall, the company's modern tech stack and strategic embrace of cloud solutions position it well for future migrations.

Compliance

11 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Assessment Required

ISO 27001 is highly relevant for Nordic Semiconductor given: (1) They are a technology company handling sensitive IP (chip designs, firmware), (2) They operate nRF Cloud, a cloud platform with customer data, (3) They serve enterprise customers in regulated industries who may require ISO 27001 certification from suppliers, (4) As a semiconductor company, they are a potential target for industrial espionage and supply chain attacks. Risk is Medium because ISO 27001 is not legally mandated but is a strong market expectation. Non-certification could affect enterprise sales and supply chain qualification processes.

Evidence: https://www.iso.org/isoiec-27001-information-security.html, https://www.nordicsemi.com/Products/Security, https://www.nordicsemi.com/About-nordic

EU Radio Equipment Directive — Compliant

Nordic Semiconductor's wireless products (Bluetooth, Wi-Fi, cellular IoT chips and modules) must comply with the EU Radio Equipment Directive (2014/53/EU) to be sold in the EU market. As an established semiconductor company with decades of EU market presence, Nordic maintains CE marking compliance. Risk is Low as this is a well-established compliance area for Nordic.

Evidence: https://www.nordicsemi.com/Products/Wireless, https://ec.europa.eu/growth/sectors/electrical-engineering/red-directive_en, https://www.nordicsemi.com/About-nordic/Quality-and-environment

PSA Certified — Compliant

PSA Certified is a product security certification framework, not a regulatory requirement. Nordic Semiconductor has publicly achieved PSA Certified status for multiple products. Risk is Low as this is a voluntary certification that Nordic has already obtained, demonstrating proactive security posture.

Evidence: https://www.psacertified.org/certified-products/, https://www.nordicsemi.com/Products/Security, https://www.nordicsemi.com/Nordic-news/2020/03/Nordic-Semiconductor-achieves-PSA-Certified-Level-2-for-nRF9160-SiP

Financials

Three-year financials

Financial Resilience Score: 7/10

Nordic Semiconductor demonstrates solid financial resilience despite the recent cyclical downturn in the IoT semiconductor market. The company maintains a strong balance sheet with a historical net cash position (roughly US$150-200m in cash equivalents) and no significant debt, which provides ample runway to sustain heavy R&D investment through the industry cycle. Its fabless model is capital-light, avoiding the fab capex risks that burden IDM competitors, and its market leadership in Bluetooth Low Energy (#1 by unit share per ABI Research) creates a wide moat with sticky, multi-year design wins across thousands of customers. However, the 2023-2024 downturn exposed meaningful cyclical vulnerability: revenue fell from a peak of ~US$742m in FY2022 to ~US$511m in FY2024, with EBIT collapsing from ~US$163m to an operating loss. R&D intensity has remained above 40% of revenue during the trough, pressuring margins. Concentration in Bluetooth LE (~85-90% of revenue) means Nordic's fortunes are tied to a single product family, while newer segments (cellular IoT, Wi-Fi, PMIC) have been slow to scale materially. Foundry dependence on TSMC adds geopolitical Taiwan risk, and USD-reporting with a NOK cost base introduces FX earnings sensitivity. Recovery signs in H2 2024 and into 2025 suggest the cycle is turning, supporting the moderate-to-strong resilience score.

Key strengths: Market leadership in Bluetooth LE ICs (#1 by unit share), Fabless, capital-light business model, Strong net cash position with no significant debt, Broad and diversified customer base across thousands of end customers, Long-cycle design wins with multi-year product life, Continued heavy R&D investment (~40%+ of revenue) sustaining product pipeline

Risk factors: Cyclicality of semiconductor/IoT market (severe 2023-24 destocking), High R&D intensity pressuring operating margin during downturns, Revenue concentration in Bluetooth LE (~85-90% of sales), Slow scaling of newer segments (cellular IoT, Wi-Fi), Foundry dependence on TSMC with Taiwan geopolitical exposure, FX exposure (USD revenue vs. NOK cost base), Competition from Silicon Labs, Qualcomm, NXP, TI, Espressif, Telink

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report