politi.dk

www.politi.dk · 8 vendors

Resilience scores

Technology vendors

Insights

Last updated 2026-07-14 · revision 7

8 direct vendors, 151 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Politi.dk exhibits low-to-medium migration readiness, primarily due to significant data residency and regulatory constraints. The most substantial challenge is the explicit requirement for core law enforcement data (e.g., POLSAS, Kriminalregistret, DNA register) to be stored and processed within Danish sovereign jurisdiction under Danish government IT infrastructure. This severely limits the adoption of generic public cloud solutions or non-sovereign environments. The regulatory landscape is highly complex, involving GDPR, LED, NIS2, PNR, SIS, Eurodac, EES, and various Danish laws. Documented 'Partially Compliant' statuses and 'High Risk' for LED, along with 'Assessment Required' for NIS2 and ISO 27001, indicate that any migration would necessitate extensive re-validation of compliance, adding significant complexity and cost. The internal tech stack, including Sitecore CMS and various 'digital case management systems,' is not explicitly described as cloud-native, containerized, or microservices-based, suggesting a likely mix of traditional enterprise applications and potential legacy components that would be challenging to migrate. While the 'Total Vendors: 0' data is contradictory, the reliance on Sitecore as a core CMS could present vendor lock-in challenges if a platform change is desired. On the positive side, politi.dk benefits from strong financial stability with consistent revenue growth, providing the capacity to fund migration initiatives. Furthermore, a large internal IT organization (Koncern IT with 500+ staff) offers significant in-house expertise and resources to manage complex transformation projects. However, these strengths are largely overshadowed by the fundamental sovereign data requirements and the intricate regulatory environment.

Compliance

10 in-scope frameworks identified; showing 3.

GDPR (source) — Partially Compliant

Politi.dk (Danish National Police) is a Danish public authority headquartered in Copenhagen, Denmark — an EU Member State — and processes vast quantities of personal data about citizens, suspects, witnesses, employees, and asylum seekers. GDPR is therefore universally applicable. The organisation has formally appointed a Data Protection Officer (DPO), published a detailed privacy notice, and explicitly references both GDPR (Regulation 2016/679) and the Danish Data Protection Act (Databeskyttelsesloven, Act No. 502/2018) on its website. However, law enforcement processing is primarily governed by the Law Enforcement Directive (LED) transposed into Danish law as the Retshåndhævelsesloven (Act No. 410/2017), which runs in parallel with GDPR for administrative/HR/website processing. The risk level is Medium rather than High because: (1) a DPO is formally appointed and publicly identified (Henrik Rubæk Jørgensen, dpo@politi.dk); (2) a comprehensive privacy notice is published; (3) the organisation is a public authority with strong legal accountability mechanisms. Risk is not Low because: (a) the organisation processes extremely sensitive special-category data (biometrics, DNA, criminal records, health data) at massive scale; (b) Datatilsynet (the Danish DPA) has supervisory authority and has historically issued decisions against public authorities; (c) cross-border data sharing with Europol, Eurodac, SIS, EES, and PNR systems creates complex compliance obligations; (d) no public ISO 27001 or independent audit certification has been found.

Evidence: https://politi.dk/om-hjemmesiden/politiets-brug-af-personoplysninger, https://politi.dk/en/about-the-website/privacy-policy, https://www.retsinformation.dk/eli/lta/2018/502, https://www.retsinformation.dk/Forms/R0710.aspx?id=189891, https://eur-lex.europa.eu/legal-content/DA/TXT/?uri=CELEX:32016R0679, https://politi.dk/virksomheden/rigspolitiet

Eurodac Regulation — Compliant

Rigspolitiet participates in the Eurodac fingerprint database as required by EU Regulation 603/2013. The privacy notice provides detailed information about Eurodac data processing, data subject rights, and oversight by both Datatilsynet and the European Data Protection Supervisor (EDPS). Risk is Low because the legal framework is well-established.

Evidence: https://politi.dk/om-hjemmesiden/politiets-brug-af-personoplysninger, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32013R0603

EU PNR Directive — Compliant

Rigspolitiet has established a dedicated PNR (Passenger Name Record) unit as required by the EU PNR Directive (2016/681) and the Danish PNR Act. The privacy notice provides detailed information about PNR data processing, retention periods (5 years, with masking after 6 months), and data subject rights. Risk is Medium because: (1) PNR data involves sensitive personal data of all air passengers; (2) cross-border data sharing with Europol and other EU PNR units creates complex compliance obligations; (3) the restriction on data subject access rights (blanket exemption for PNR unit) requires careful legal justification.

Evidence: https://politi.dk/om-hjemmesiden/politiets-brug-af-personoplysninger, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016L0681

Financials

Three-year financials

Financial Resilience Score: 10/10

Dansk Politi (Danish National Police) is a state authority under the Danish Ministry of Justice, not a commercial enterprise. Its financial resilience is effectively that of the Kingdom of Denmark, which holds a AAA sovereign credit rating. The entity is funded directly through the annual Finanslov (§11.23 Politiet) with no commercial revenue, no going-concern risk, and no counterparty exposure in a corporate sense. Funding predictability is unusually strong due to the Flerårsaftale (multi-year political agreement) mechanism, which locks in budget envelopes over 4-year periods. Successive agreements (2016–2019, 2020, 2021–2023, 2024–2027) have consistently expanded the budget in nominal terms, driven by rising political priority around gang crime, terror, cyber, migration/border control, and drone defence. The 2024–2027 agreement is expected to lift the total budget toward ~DKK 15B by the outer years. While there is no default risk, operational risks exist: ~80% of costs are personnel-related and thus exposed to public-sector wage settlements (OK24); IT modernisation programmes have historically overrun; and expanding mandates (NSK, drone defence, border control) can arrive faster than incremental funding. Rigsrevisionen has also criticised case-handling backlogs, which could shape future appropriation conditions.

Key strengths: Sovereign backing by AAA-rated Kingdom of Denmark, Multi-year Flerårsaftale funding certainty through 2027, Consistent nominal budget growth: ~DKK 7-8B (2007) to ~DKK 13B (2023), toward ~DKK 15B by 2027, Direct appropriation via Finanslov §11.23 Politiet, Growing political priority for law enforcement funding

Risk factors: High personnel cost share (~80%) exposed to public-sector wage settlements, IT modernisation programmes with history of cost overruns (e.g., POLSAG), Scope creep from new mandates (drone defence, cyber, borders) outpacing funding, Rigsrevisionen criticism of case-handling backlogs (violent and economic crime), Political-prioritisation risk in future appropriation cycles

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report