Pfeifer Holding GmbH

Austria · owned by Independent (Austria) · www.pfeifergroup.com · 18 vendors

Pfeifer Group is an Austrian family-owned timber processing company headquartered in Imst, Tyrol, founded in 1948. It manufactures a broad portfolio of wood products including glued laminated timber (BSH), cross-laminated timber (CLT), solid wood panels, formwork panels, formwork beams, sawn timber, palette blocks, and wood-based energy products such as pellets and briquettes. The group operates 13 production sites across Austria, Germany, Czech Republic, and Finland, employing approximately 2,600 people and exporting to over 90 countries.

Resilience scores

Technology vendors

Insights

Last updated 2026-08-30 · revision 2

18 direct vendors, 236 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Pfeifer Holding GmbH exhibits a medium level of migration readiness. The internal tech stack, featuring TYPO3 CMS and other traditional enterprise applications, does not explicitly indicate a cloud-native, containerized, or microservices-based architecture. This suggests that a significant migration effort would likely involve re-platforming or refactoring existing applications, increasing complexity and cost. The applicability of NIS2 regulations is a critical factor; any migration strategy must meticulously ensure continued compliance with stringent cybersecurity and operational resilience requirements, potentially limiting cloud provider choices or architectural approaches. Furthermore, 'Data Residency Requirements' are not specified, which is a crucial unknown that would need to be thoroughly investigated and defined to inform any cloud migration strategy. The 'Unknown' vendor lock-in risk is another significant challenge; if there are substantial dependencies or complex contracts with existing vendors for the 20 services, this could impede or delay migration efforts. On the positive side, the company's strong financial position, with an annual turnover of approximately 1.3 billion euros, provides ample capability to fund a comprehensive migration initiative. The presence of 'Bakehouse Video Hosting (Object Storage / CDN)' suggests some familiarity with modern infrastructure components, which could ease the transition for certain workloads. Additionally, the geographic diversity of vendor HQs across 7 countries might indicate a less monolithic vendor landscape, potentially offering more flexibility than a highly concentrated vendor base.

Compliance

10 in-scope frameworks identified; showing 3.

EU Whistleblower Protection Directive — Compliant

Risk is Low because Pfeifer Group has demonstrably implemented a whistleblowing channel, which is the primary compliance requirement of the Directive for companies with 50+ employees. The company's website prominently features a Whistleblowing link in its navigation and footer, indicating an established reporting mechanism. Austria transposed the Directive via the HinweisgeberInnenschutzgesetz (HSchG), effective 2023. Germany transposed it via the Hinweisgeberschutzgesetz (HinSchG), effective July 2023. Czech Republic and Finland have also transposed the Directive. With a functioning whistleblowing system in place, the primary compliance obligation is met.

Evidence: https://www.pfeifergroup.com/de/servicenavigation/whistleblowing/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32019L1937, https://www.ris.bka.gv.at/GeltendeFassung.wxe?Abfrage=Bundesnormen&Gesetzesnummer=20012316

ISO 27001 (source) — Assessment Required

ISO 27001 is an internationally recognized standard for information security management systems (ISMS). While not legally mandatory for timber manufacturers, it is increasingly relevant for: (1) NIS2 compliance — ISO 27001 certification is widely accepted as evidence of meeting NIS2 cybersecurity risk management requirements (Art. 21); (2) Supply chain security — Pfeifer's customers (construction, packaging, energy sectors) increasingly require supplier cybersecurity assurances; (3) Cross-border operations — 13 sites across 4 countries with interconnected IT systems create significant cybersecurity risk surface; (4) Third-party processor reliance — the company uses Microsoft Dynamics 365, Google Analytics, Zoom, and other cloud platforms, requiring robust ISMS controls. Risk is Medium because: no ISO 27001 certification has been found (despite ISO 50001 and ISO 9001 being certified), the company has not publicly disclosed any ISMS framework, and the absence of ISO 27001 creates a gap in demonstrating NIS2 compliance. However, the risk is not High because ISO 27001 is not legally mandated for this sector.

Evidence: https://www.pfeifergroup.com/de/downloads/zertifikate/, https://www.iso.org/isoiec-27001-information-security.html, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555

EU Timber Regulation — Assessment Required

Risk is High because: (1) The EU Deforestation Regulation (EUDR, Regulation 2023/1115) directly targets companies placing timber and wood products on the EU market — Pfeifer's core business; (2) EUDR requires operators to conduct due diligence to ensure products are deforestation-free and legally harvested; (3) Pfeifer processes 5.4 million cubic meters of roundwood annually, making it one of the largest timber processors in Europe and a high-priority target for EUDR compliance scrutiny; (4) The company sources timber from Austria, Germany, Czech Republic, and Finland — all considered low-risk countries, which reduces but does not eliminate compliance burden; (5) EUDR penalties include fines of at least 4% of annual EU turnover and confiscation of products; (6) The regulation's applicability date has been delayed (now applying from December 2025 for large operators), but compliance preparation is urgent. The company holds PEFC and FSC certifications which are positive indicators but do not automatically satisfy EUDR requirements.

Evidence: https://www.pfeifergroup.com/de/downloads/zertifikate/, https://www.pfeifergroup.com/de/unternehmen/strategie/einkaufsbeziehungen/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32023R1115, https://environment.ec.europa.eu/topics/forests/deforestation/regulation-deforestation-free-products_en

Financials

Financial Resilience Score: 6/10

Pfeifer Holding GmbH is a substantial, vertically integrated, family-owned Austrian wood-processing group with clear top-3 European positions in several timber product categories. The business benefits from significant scale (2,600 employees, 13 sites across 4 countries, 5.4 million m³ annual roundwood intake), vertical integration through its '100% Wertschöpfung' strategy that monetizes every part of the log across sawn timber, glulam/CLT, formwork, pallet blocks, pellets and green electricity. This diversification dampens single-product cyclicality. Geographic diversification across Austria, Germany, Czech Republic and Finland (enhanced by the 2023 Pölkky acquisition) plus exports to 90 countries reduces single-market exposure. However, the business is inherently exposed to significant risks. Timber commodity prices swung dramatically 2021-2023, and margins are structurally volatile. Construction-cycle exposure through glulam, CLT, formwork and construction timber is significant, particularly in the DACH region which contracted sharply in 2023-2024 with rising interest rates. The pellet market collapsed in 2023 after a 2022 spike. Central European spruce supply faces climate and bark beetle risks. As a private GmbH, transparency is limited and creditors rely on Firmenbuch filings that appear with a lag. The family ownership and reinvestment culture typically supports moderate leverage, but precise financial figures could not be verified. Historically, industry press has reported Pfeifer Group turnover in the €800 million – €1 billion+ range during boom years (2021-2022), with subsequent decline in 2023 as timber prices normalized. Given the strong market positions, vertical integration and geographic diversification balanced against commodity cyclicality and construction market exposure, a moderate resilience score is appropriate.

Key strengths: European market leader in formwork panels and pallet blocks; top-3 in Central-European sawn timber, pellets and formwork beams; top-5 in glulam, Vertical integration via '100% Wertschöpfung' strategy monetizing every part of the log, Geographic diversification across 13 sites in 4 countries (Austria, Germany, Czech Republic, Finland), 2023 acquisition of Finnish sawmiller Pölkky (Pfeifer Nordics) added Nordic pine capacity, Family ownership with reinvestment culture supporting moderate leverage, Export diversification across 90 countries, 75+ year operating history since founding in 1948

Risk factors: Commodity price cyclicality - sawn timber prices swung dramatically 2021-2023, Construction-cycle exposure especially in DACH region contracted sharply 2023-2024, Pellet market volatility - demand and pricing collapsed in 2023 after 2022 spike, Roundwood supply and bark beetle risk in Central European spruce, Limited private-company transparency with lagged Firmenbuch filings, Integration risk from recent Finnish Pölkky acquisition

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report