POST Luxembourg

Luxembourg · www.post.lu/en/business/ict-services/cloud-solutions · 17 vendors

POST Luxembourg is the leading postal and telecommunications operator in Luxembourg. It also provides a comprehensive range of ICT services, including cloud solutions, data management, and cybersecurity, alongside financial services for individuals and businesses. The company plays a vital role in the country's digital transformation and infrastructure.

Resilience scores

Technology vendors

Services catalogue

4 services in catalogue across 1 category; runs on 17 sub-vendors.

Insights

Last updated 2026-04-14 · revision 3

17 direct vendors, 211 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

POST Luxembourg's migration readiness is assessed as low to medium, primarily due to significant gaps in critical data. The internal tech stack (cloud-native vs. legacy, containerization, microservices adoption) is unknown, which is a fundamental factor in determining migration complexity and effort. Similarly, specific regulatory compliance requirements and data residency constraints are not provided, which could introduce substantial challenges and costs during a migration. Although the data states "Total Vendors: 0", other provided information indicates a vendor ecosystem with geographic diversity, including vendor HQs in 7 unique countries and vendor owners in 8 unique countries. However, the "Vendor Lock-in Risk" is unknown; if there is significant lock-in with existing vendors, it could complicate vendor transitions or re-platforming efforts. The presence of 21 services suggests a potentially complex IT landscape requiring careful planning. On the positive side, the company's substantial revenue (€1,100M in 2023) indicates a potential financial capacity to fund a significant migration initiative. The geographic diversity of its vendor base could also be an advantage, potentially offering more flexibility in selecting new partners or technologies during a migration, reducing reliance on a single region for vendor support. However, without more detailed information on the current technology landscape and specific compliance needs, a high readiness score cannot be justified.

Compliance

5 in-scope frameworks identified; showing 3.

SOC 2 (source) — Assessment Required

SOC2 is relevant for cloud service providers serving US customers. POST Luxembourg offers cloud solutions and may serve international clients. While not mandatory, SOC2 compliance provides competitive advantage and customer assurance. Medium risk as it affects market access and customer trust rather than regulatory penalties.

ISAE 3000 (source) — Assessment Required

ISAE 3000 provides assurance framework for non-financial information. Relevant for cloud service providers offering assurance on controls and processes. Low risk as it's primarily for customer assurance rather than regulatory compliance, though it supports other compliance requirements.

NIS2 (source) — Assessment Required

POST Luxembourg operates in postal services (Important Entity under NIS2) and ICT services (potentially Essential Entity for digital infrastructure). As Luxembourg's national postal operator, they likely exceed size thresholds. NIS2 non-compliance can result in significant fines and operational restrictions. High risk due to likely applicability and severe consequences.

Financials

Three-year financials

Financial Resilience Score: 6/10

POST Luxembourg is a state-owned enterprise fully owned by the Luxembourg government, which provides a strong implicit backstop and reduces the risk of financial distress or insolvency. This government ownership ensures stable access to capital and a degree of protection from competitive market pressures that purely private companies face. The company operates as a national postal and telecommunications operator in one of Europe's wealthiest countries, giving it a relatively stable and affluent customer base. However, POST Luxembourg operates in two structurally challenging sectors: traditional postal services, which face secular volume decline due to digitalization, and telecommunications, which is highly capital-intensive and competitive. The combination of these pressures requires continuous investment in infrastructure modernization and service diversification to maintain relevance and revenue stability. Financial disclosure for POST Luxembourg is limited given its status as a non-listed state-owned entity, making a full quantitative resilience assessment difficult. Estimated revenues of approximately €1.1 billion reflect a mid-sized national operator. The lack of publicly available EBIT, net income, debt levels, and equity data prevents a thorough assessment of leverage, profitability margins, or cash generation capacity. Overall, the state ownership and Luxembourg's strong sovereign credit profile anchor the resilience score above average, but the structural headwinds in postal volumes, capital intensity of telecom, and limited financial transparency constrain the score from reaching the highest levels.

Key strengths: 100% state ownership by the Luxembourg government providing implicit financial support, Dual operations in postal and telecommunications providing some revenue diversification, Operations in Luxembourg, one of the highest GDP per capita countries in Europe, Estimated revenues of approximately €1.1 billion indicating meaningful scale, Stable domestic market with low sovereign risk environment

Risk factors: Secular decline in traditional letter mail volumes due to digitalization, High capital expenditure requirements for telecom network upgrades (fiber, 5G), Limited financial transparency as a non-listed entity makes full assessment difficult, Competitive pressure in Luxembourg telecom market from other operators, Dependence on regulatory environment and government policy decisions, No publicly available data on debt levels, margins, or equity to confirm financial health

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report