PinkRoccade

Netherlands · owned by Coda Group / Atos Origin (historically); currently operating as independent Dutch IT brand under separate ownership per division (Netherlands) · pinkroccade.nl · 42 vendors

PinkRoccade is a Dutch IT company operating two main divisions: PinkRoccade Local Government, which provides software and IT solutions for Dutch municipalities and local government bodies, and PinkRoccade Healthcare, which delivers IT systems and software for the Dutch healthcare sector. The company focuses on digital transformation and process automation for public sector and healthcare organizations in the Netherlands.

Resilience scores

Technology vendors

Insights

Last updated 2026-07-30 · revision 19

42 direct vendors, 353 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

PinkRoccade demonstrates a medium level of migration readiness, with several foundational strengths offset by substantial regulatory and data residency challenges. The company's existing use of Microsoft Azure and its offering of 'Cloud & Managed Services' indicate internal expertise and a strategic direction towards cloud adoption, providing a valuable starting point for further migration efforts. The geographic diversity of its vendor base (9 countries) could also offer flexibility in sourcing migration-related services and technologies, assuming there isn't deep lock-in with a few critical vendors (the 'Unknown' vendor lock-in risk remains a concern, especially given potential platform lock-in with Microsoft technologies). However, the migration path is significantly complicated by a highly stringent regulatory environment and strict data residency requirements. Regulations such as GDPR, NIS2, Dutch Healthcare Quality, and the Dutch Government Information Security Baseline (BIO) impose complex compliance obligations, particularly for sensitive healthcare and government data. These regulations, coupled with explicit data residency requirements for Dutch healthcare data (often within Netherlands/EU) and government data (potentially Netherlands-based), severely limit the choice of cloud regions and architectures. This will likely increase the complexity, cost, and timeline of any large-scale migration, requiring careful planning to ensure compliance. The internal tech stack, while including Azure, also features traditional enterprise components like Windows Server, SQL Server, .NET, and Java, suggesting a mix of applications that may require significant refactoring or re-platforming rather than simple 'lift-and-shift' migrations, further adding to the challenge. While financially stable, the lack of strong growth might limit the capital available for extensive and costly migration projects.

Compliance

7 in-scope frameworks identified; showing 3.

Dutch Healthcare Quality, Complaints and Disputes Act — Assessment Required

As an IT service provider to Dutch healthcare institutions, PinkRoccade may need to comply with healthcare-specific regulations regarding quality management and patient safety. The risk level is medium as healthcare IT systems directly impact patient care and safety, and regulatory scrutiny in healthcare IT is increasing.

GDPR (source) — Assessment Required

GDPR is mandatory for all EU companies processing personal data. PinkRoccade, being a Dutch company providing IT solutions to healthcare and government sectors, inevitably processes large volumes of sensitive personal data including health data (special category under GDPR) and citizen data. Non-compliance risks include fines up to 4% of annual turnover or €20M, whichever is higher. Healthcare and government sectors are high-priority enforcement areas.

NIS2 (source) — Assessment Required

NIS2 likely applies as PinkRoccade provides digital infrastructure and ICT services to essential sectors (healthcare, public administration). As an ICT service provider to critical sectors, they may qualify as Important Entities under NIS2. Risk level is medium as enforcement is still developing, but non-compliance could result in significant fines and operational restrictions.

Financials

Three-year financials

Financial Resilience Score: 7/10

Based on the historical financial data from 2002-2004, PinkRoccade demonstrated good financial resilience, especially considering the challenging economic environment for IT services in the early 2000s. Profitability Improvement: The most striking aspect is the significant year-over-year growth in EBIT (18.16% in 2004 and 38.07% in 2003). This indicates effective cost management and improved operational efficiency, allowing the company to generate higher profits from relatively stable or slightly declining revenue. Stable Revenue Base: While revenue saw a minor dip in 2003, it remained substantial and stabilized in 2004, suggesting a solid customer base and demand for its core services. Strengthening Balance Sheet: Consistent growth in equity (over 5% annually) points to a healthy financial structure and the ability to retain earnings, providing a buffer against potential downturns. Market Position: As a leading IT services provider in the Netherlands, PinkRoccade likely benefited from its established market position and long-term contracts, contributing to its stability. The company was in a relatively strong financial position, showing improving profitability and a solid balance sheet, which likely made it an attractive acquisition target.

Key strengths: Profitability Improvement (significant year-over-year growth in EBIT), Stable Revenue Base, Strengthening Balance Sheet (consistent growth in equity), Established Market Position (leading IT services provider in the Netherlands)

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report