Punktum dk A/S

Denmark · owned by Dansk Internet Forum (Denmark) · punktum.dk · 27 vendors

Punktum dk is the official administrator and registry for all .dk domain names, responsible for managing and maintaining the Danish country-code top-level domain (ccTLD). The organization works to ensure that the Danish part of the internet is as secure and stable as possible. It operates as a neutral, non-profit oriented entity under Danish law.

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 27 sub-vendors.

Insights

Last updated 2026-09-13 · revision 8

27 direct vendors, 333 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 6/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Punktum dk A/S demonstrates medium migration readiness (Score: 55). Strengths: A significant strength is the company's recent experience with a "planned platform migration" in 2023, which involved a "major overhaul" of its registrar-facing systems. This indicates internal capability, experience in managing complex transitions, and likely a more modernized baseline for future migrations. The stable financial growth (DKK 110M to DKK 119M over three years) suggests adequate resources to fund further migration initiatives. Weaknesses: The regulatory environment presents substantial challenges. GDPR and NIS2 are mandatory with high associated risks, requiring stringent data protection and cybersecurity measures throughout any migration. Crucially, strict "Data Residency Requirements" mandate processing personal data of EU residents within the EU/EEA or adequacy countries, severely limiting choices for cloud providers and regions and potentially increasing migration complexity and cost. Danish national laws may impose additional restrictions. While the tech stack includes standard components like DNS, WHOIS, and EPP, migrating these critical internet infrastructure services can be inherently complex. The "unknown" vendor lock-in risk also introduces uncertainty regarding the ease of transitioning away from existing services or platforms.

Compliance

4 in-scope frameworks identified; showing 3.

SOC 2 (source) — Assessment Required

While not legally mandatory, SOC2 compliance would be valuable for a critical infrastructure provider like a domain registry to demonstrate security controls to customers and partners. The risk is moderate as it's primarily a competitive and trust issue rather than a legal compliance requirement.

GDPR (source) — Assessment Required

As a Danish company processing personal data of domain registrants (names, addresses, email addresses, phone numbers), GDPR compliance is mandatory. Non-compliance can result in fines up to 4% of annual turnover or €20 million. Given their role as a domain registry handling personal data of all .dk domain registrants, the data processing volume is substantial, increasing both compliance complexity and potential fine exposure.

Evidence: https://punktum.dk

ISO 27001 (source) — Assessment Required

As a critical digital infrastructure provider, ISO 27001 certification would be highly valuable for demonstrating information security management capabilities. While not legally mandatory, it's increasingly expected for organizations handling critical infrastructure. Risk is moderate as it affects reputation and competitive positioning.

Financials

Three-year financials

Financial Resilience Score: 9/10

DK Hostmaster A/S demonstrates excellent financial resilience, primarily due to its unique position as the sole administrator of the .dk top-level domain and its non-profit mandate. As the exclusive registry for .dk domains, the company benefits from a highly stable and predictable revenue stream driven by mandatory registration and renewal fees. Demand for .dk domains is relatively inelastic, ensuring consistent income regardless of broader economic fluctuations. The company has consistently generated positive operating income and net profits over the past three years. This indicates efficient cost management and a sustainable operational model. A continuously growing equity base (16-17% annual growth) signifies strong financial health and the ability to self-finance operations and future investments without heavy reliance on external debt. This provides a substantial buffer against unforeseen expenses or operational challenges. Its role as a critical national infrastructure provider for the internet in Denmark means it operates with a degree of regulatory stability and public trust, further enhancing its resilience. The core business model is well-established, with mature processes for domain management, reducing exposure to high-risk ventures or volatile market conditions. The only minor factor preventing a perfect 5/5 is the inherent concentration risk in being tied to a single national domain, though this is mitigated by its monopoly position and essential service status.

Key strengths: Stable and Predictable Revenue, Consistent Profitability, Strong and Growing Equity, Essential Service Nature, Low Operational Risk

Risk factors: Concentration risk in being tied to a single national domain

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report