Novo Nordisk A/S
Denmark · www.novonordisk.com · 13 vendors
Novo Nordisk A/S is a leading global healthcare company headquartered in Denmark. It specializes in the research, development, and manufacturing of pharmaceutical products, primarily focusing on serious chronic diseases such as diabetes, obesity, and rare blood and endocrine disorders. The company aims to drive change to defeat these diseases by pioneering scientific breakthroughs and expanding access to its medicines.
Resilience scores
- Digital Sovereignty: 8
- Digital Resilience: 7
- Financial Resilience: 8
Technology vendors
- Adobe Inc. — Technology — United States
- Demandware — Technology — United States
- Power BI — Technology — United States
- and 12 more
Services catalogue
5 services in catalogue across 2 categories; runs on 13 sub-vendors.
- Pharmaceutical Partnership
- Report collaboration
- Project funding
Insights
Last updated 2026-09-13 · revision 17
13 direct vendors, 224 subvendors
Direct vendors by controlling owner country (sample)
- United Kingdom: 1
- Germany: 1
- Unknown: 1
Subvendors by controlling owner country (sample)
- Moldova: 1
- United States: 156
- France: 6
Migration Readiness: 8/10
Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.
Novo Nordisk exhibits a high level of migration readiness, primarily driven by its extensive adoption of cloud platforms (AWS, Microsoft Azure) and SaaS solutions (Microsoft 365, Veeva Systems, Salesforce). This indicates a significant portion of their infrastructure is already modernized, reducing the effort and complexity of further migrations. The company's investment in modern technologies like Amazon Bedrock, Agentic AI, Machine Learning platforms, and Cloud-based HPC further enhances its adaptability. Strong financial growth provides ample resources to fund migration initiatives. Furthermore, the presence of both AWS and Azure suggests a multi-cloud strategy, which can mitigate single-vendor lock-in. However, critical missing information regarding specific 'Regulatory Environment' and 'Data Residency Requirements' is a significant impediment to achieving an even higher score, as these factors can introduce substantial complexity and cost to migration projects. While multi-cloud, specialized enterprise systems like SAP and industry-specific platforms like Veeva, along with specific cloud services, could still present forms of vendor lock-in or require specialized migration strategies. The 'Vendor Lock-in Risk: Unknown' and the contradictory 'Total Vendors: 0' also make it challenging to fully assess the vendor landscape's impact on migration flexibility.
Compliance
13 in-scope frameworks identified; showing 3.
NIS2 (source) — Assessment Required
NIS2 (EU Directive 2022/2555, transposed into Danish law via the Danish NIS2 Act effective October 2024) classifies pharmaceutical manufacturers as 'Important Entities' under Annex II (manufacturing of pharmaceutical products). Novo Nordisk, with 69,505 employees and revenues exceeding DKK 200 billion, vastly exceeds the medium enterprise threshold (50+ employees or €10M+ turnover). As a critical supplier of insulin and GLP-1 medicines to millions of patients across the EU, any disruption to their IT/OT systems would have significant societal impact, potentially elevating them to 'Essential Entity' status under national implementation. Risk is High because: (1) NIS2 imposes mandatory incident reporting (24-hour initial notification), cybersecurity risk management measures, supply chain security requirements, and board-level accountability; (2) non-compliance penalties can reach €7M or 1.4% of global annual turnover for Important Entities; (3) the pharmaceutical sector is a high-value cyberattack target; (4) formal NIS2 compliance certification/assessment evidence has not been publicly disclosed. The risk is elevated by the company's recent AWS strategic partnership (August 2026) expanding its digital footprint.
Evidence: https://annualreport.novonordisk.com/2025/governance/risk-management.html, https://www.novonordisk.com/sustainable-business/esg-portal.html, https://annualreport.novonordisk.com/2025/, https://www.novonordisk.com/news-and-media/news-and-ir-materials/news-details.html?id=916594
EU Clinical Trials Regulation — Compliant
As a major pharmaceutical company conducting clinical trials across the EU, Novo Nordisk is subject to the EU Clinical Trials Regulation (CTR 536/2014), which became fully applicable in January 2023 via the CTIS (Clinical Trials Information System). Risk is High because: (1) clinical trial non-compliance can result in trial suspension, marketing authorization withdrawal, and significant financial penalties; (2) the CTR imposes strict requirements on informed consent, data protection (intersecting with GDPR), trial transparency, and pharmacovigilance; (3) Novo Nordisk's extensive R&D pipeline (673 submissions/approvals in 2025) means a large number of active trials under CTR scope; (4) the EMA and national competent authorities actively monitor CTR compliance.
Evidence: https://annualreport.novonordisk.com/2025/strategic-aspirations/innovation-and-therapeutic-focus.html, https://annualreport.novonordisk.com/2025/introducing-novo-nordisk/2025-at-a-glance.html, https://www.novonordisk.com/science-and-technology/r-d-pipeline.html
US FDA Regulations — Compliant
The US is Novo Nordisk's largest single market, and FDA compliance is critical for their commercial success. Risk is High because: (1) FDA non-compliance (Warning Letters, Import Alerts, consent decrees) can halt US product sales — a catastrophic business impact; (2) the FDA actively inspects foreign pharmaceutical manufacturers; (3) Novo Nordisk's Danish manufacturing sites producing US-marketed products are subject to FDA inspection; (4) the high-profile nature of Ozempic/Wegovy (semaglutide) means heightened FDA scrutiny; (5) drug promotion and advertising regulations (21 CFR Part 202) are complex and frequently enforced. However, Novo Nordisk's long-standing FDA-approved product portfolio suggests established compliance systems.
Evidence: https://annualreport.novonordisk.com/2025/strategic-aspirations/commercial-execution.html, https://annualreport.novonordisk.com/2025/strategic-aspirations/innovation-and-therapeutic-focus.html, https://www.novonordisk.com/our-products/our-medicines.html
Financials
Three-year financials
- 2025: revenue DKK 309B, EBIT DKK 128B, equity DKK 194B
- 2024: revenue DKK 290B, EBIT DKK 128B, equity DKK 143B
- 2023: revenue DKK 232B, EBIT DKK 103B, equity DKK 107B
Financial Resilience Score: 8/10
Novo Nordisk exhibits strong financial resilience anchored by its dominant GLP-1 franchise (Ozempic, Wegovy, Rybelsus), which alone accounts for roughly 74% of group revenue. The company generated DKK 309B in revenue in 2025 with net profit of DKK 102B and equity growing 36% to DKK 194B. Free cash flow rebounded to DKK 28.3B in 2025 from -DKK 14.7B in 2024 (depressed by the Catalent acquisition), and the company successfully refinanced with EUR 10B in Eurobonds during 2025. The Novo Nordisk Foundation's controlling stake via Novo Holdings A/S provides a stable long-term anchor shareholder atypical of large-cap pharma peers. However, resilience is being tested by significant headwinds: US pricing pressure (including Medicare Part D Maximum Fair Price acceptance effective January 2027 and an MFN framework with the US Administration), intense competition from Eli Lilly's tirzepatide (Mounjaro/Zepbound growing 125%/80%), persistent compounded semaglutide grey market usage (~1 million US patients), and looming patent expirations (China 2026, US 2032). Management guidance for 2026 signals adjusted sales and profit contraction of 4-12%, and the September 2025 restructuring cutting 9,000 positions (DKK 9B charge) with DKK 8B targeted annual savings by end-2026 underscores the pressure. Share price fell 48% during 2025 (DKK 624 to DKK 325), reflecting market skepticism. Overall, the balance sheet strength, pipeline (Wegovy pill, Wegovy 7.2mg, CagriSema, Akero's efruxifermin), and ongoing capacity investments (DKK 60.1B capex in 2025) support an 8/10 resilience score.
Key strengths: Dominant GLP-1 franchise with ~68% volume share in International Operations, Strong equity base of DKK 194B (+36% YoY) and free cash flow recovery to DKK 28.3B, Novo Nordisk Foundation controlling shareholder providing long-term stability, Robust pipeline including Wegovy pill (world's first oral GLP-1 for weight management), Wegovy 7.2mg, and Akero acquisition (USD 4.7B + USD 0.5B CVR), Major capacity investments: DKK 60.1B capex in 2025, USD 5.6B further US manufacturing planned through 2028, Revenue more than doubled from DKK 141B (2021) to DKK 309B (2025), 22% CAGR
Risk factors: US pricing pressure including Medicare Part D MFP acceptance effective January 2027, Intense competition from Eli Lilly's tirzepatide (Mounjaro +125%, Zepbound +80%), Compounded semaglutide grey market with ~1M US patients; 10% of Wegovy prescriptions now cash market, Patent cliffs: semaglutide expires China 2026, some International Operations markets 2026, US 2032, 2026 guidance projects adjusted sales and profit contraction of 4-12%, Restructuring cutting 9,000 positions (5,000 in Denmark); DKK 9B Q3 restructuring charge, Share price collapsed 48% during 2025 (DKK 624 to DKK 325), High revenue concentration: GLP-1 semaglutide products ~74% of group revenue, New CEO transition (Maziar Mike Doustdar) during period of significant challenges
Revenue by geography
- US Operations: 55%
- EUCAN (Europe & Canada): 18%
- Emerging Markets: 10%
- APAC: 9%
- Region China: 8%
Revenue by product/service
- Ozempic: 41%
- Wegovy: 26%
- Insulin: 17%
- Rybelsus: 7%
- Rare blood (NovoSeven etc.): 4%
- Other: 2%
- Rare endocrine (Sogroya/Norditropin): 2%
- Victoza: 1%
Workforce by country
- Denmark: 29895
- Other: 21400
- United States: 9522
- India: 8688
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.