P4 Sp. z o.o.

Poland · www.play.pl · 11 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 11 sub-vendors.

Insights

Last updated 2026-08-02 · revision 1

11 direct vendors, 181 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

P4 Sp. z o.o. exhibits a good level of migration readiness, primarily driven by its existing adoption of hybrid cloud infrastructure and public cloud services (Scaleway/Iliad Group). This indicates practical experience and capability in managing cloud environments, which is a strong enabler for further migration. The use of modern web technologies like Next.js for its careers portal frontend and OpenID Connect/OAuth 2.0 for SSO suggests contemporary development practices that can facilitate cloud-native transformations. Furthermore, the absence of specified data residency requirements provides flexibility for cloud deployments. However, the assessment is constrained by the lack of explicit information regarding the adoption of containerization (e.g., Docker, Kubernetes) or microservices architectures, which are key indicators of advanced cloud-native readiness. The 'Total Vendors: 0' data point is an anomaly; assuming there are vendors, the actual number of vendors and the complexity of their contracts, which are critical for assessing vendor lock-in, remain unknown. Similarly, financial stability data, important for funding migration initiatives, is not available.

Compliance

10 in-scope frameworks identified; showing 3.

Polish KSC Act — Assessment Required

The Polish KSC Act (2018, amended 2024 to transpose NIS2) directly applies to operators of essential services and digital service providers in Poland. P4 Sp. z o.o. as a major telecommunications operator is almost certainly designated as an Operator of Essential Services (OES) or Important Entity under the KSC Act. The 2024 amendment introduced stricter requirements including supply chain security assessments (particularly relevant for 5G network equipment vendors), incident reporting to CERT Polska, and mandatory security audits. The risk is High due to Poland's active enforcement and the critical nature of P4's 5G infrastructure.

Evidence: https://www.play.pl/pomoc/dane-osobowe-i-bezpieczenstwo, https://www.gov.pl/web/cyfryzacja/krajowy-system-cyberbezpieczenstwa, https://www.play.pl/kampania/5g-w-play

ePrivacy Directive — Partially Compliant

The ePrivacy Directive (and its Polish implementation) imposes specific obligations on electronic communications providers regarding confidentiality of communications, traffic data retention, cookie consent, and direct marketing. P4 processes vast amounts of traffic and location data for 15 million subscribers. The risk is High because: (1) data retention obligations under Polish law (implementing EU Data Retention Directive legacy requirements) involve bulk retention of metadata; (2) cookie consent on play.pl must comply with ePrivacy rules; (3) direct marketing via SMS/email requires valid consent. The company's privacy page explicitly addresses marketing consents and cookie policies.

Evidence: https://www.play.pl/pomoc/polityka-prywatnosci-i-cookies, https://www.play.pl/pomoc/dane-osobowe-i-bezpieczenstwo, https://www.play.pl

NIS2 (source) — Assessment Required

P4 Sp. z o.o. is a major telecommunications operator (mobile network operator and internet service provider) in Poland with approximately 15 million subscribers. Under NIS2 Directive (EU) 2022/2555, telecommunications providers are explicitly classified as 'Important Entities' under Annex II (digital infrastructure and digital providers), and potentially as 'Essential Entities' given their scale. Poland transposed NIS2 via the Act on the National Cybersecurity System (KSC - Krajowy System Cyberbezpieczeństwa), amended in 2024. As a critical communications infrastructure provider, P4 is almost certainly designated as an operator of essential services or important entity. Non-compliance risks include fines up to €10 million or 2% of global annual turnover for Important Entities, or €7 million/1.4% for Essential Entities under Polish KSC law. The risk level is High due to the critical nature of telecom infrastructure and Poland's active enforcement of cybersecurity regulations.

Evidence: https://www.play.pl/pomoc/dane-osobowe-i-bezpieczenstwo, https://www.gov.pl/web/cyfryzacja/krajowy-system-cyberbezpieczenstwa, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555, https://www.play.pl

Financials

Three-year financials

Financial Resilience Score: 7/10

P4/Play demonstrates solid financial resilience underpinned by its position as one of Poland's top mobile operators with approximately 15 million subscribers and ~99% population coverage. The company benefits from scale, a cash-generative post-paid subscriber base, and historically strong EBITDA margins in the 30%+ range. Backing by iliad Group (with ~€9bn+ revenue) and ultimately Xavier Niel provides strong access to capital markets and refinancing capacity, adding a significant layer of parent support. The convergence strategy following the UPC Polska acquisition in April 2022 (~€1.5bn EV) transformed Play into a quad-play operator, improving ARPU potential and reducing churn. Poland segment EBITDAaL grew from ~€620m in 2021 to ~€800m in 2023, reflecting solid operational momentum. However, resilience is tempered by high leverage inherited from the LBO-style capital structure, rising interest rates increasing refinancing costs, and continued capex intensity from 5G spectrum auctions and fiber build-out. Competitive pressure in the Polish market (four MNOs plus MVNOs), regulatory intervention risk, and FX/inflation exposure (PLN revenues vs. EUR/USD-linked debt and capex) constrain the score. Overall, the combination of scale, parent support, and convergence strategy provides above-average resilience, but leverage and capex intensity prevent a higher rating.

Key strengths: Top-tier market position with ~15 million subscribers in Poland, Backing by iliad Group and Xavier Niel providing capital markets access, Convergence strategy (mobile + fixed + TV + B2B) post-UPC acquisition, Cash-generative business with historical EBITDA margins above 30%, Growing Poland segment revenue and EBITDAaL year-over-year, 5G deployment and FTTH expansion via Światłowód Inwestycje JV

Risk factors: High leverage with LBO-style capital structure carried over from PE ownership, Rising interest rates increasing refinancing costs, Intense competition from four MNOs plus MVNOs pressuring ARPU, FX exposure: PLN revenues vs. EUR/USD-linked debt and network capex, Polish inflation and energy costs pressuring margins, Spectrum and capex intensity from 5G and fiber build, Regulatory/political risk from UKE and KRRiT interventions

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report