Ramboll

Denmark · owned by Independent (Denmark) · ramboll.com · 42 vendors

Ramboll is a global engineering, architecture and consultancy company with more than 18,000 experts that create sustainable solutions for governments and companies all over the world. The company combines insights with the power to drive positive change to clients, focusing on ideas that can be realized and implemented.

Resilience scores

Technology vendors

Services catalogue

8 services in catalogue across 2 categories; runs on 42 sub-vendors.

Insights

Last updated 2026-05-18 · revision 17

42 direct vendors, 366 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Ramboll's migration readiness score is 45, indicating a medium level of readiness with significant challenges. A key opportunity is the existing adoption of Microsoft Azure, which provides a foundational cloud platform and can streamline the migration of compatible workloads. The use of modern development tools like GitHub and Azure DevOps also suggests capabilities for efficient migration and modernization efforts. The geographic diversity of vendors, while not fully understood in terms of lock-in, might offer some flexibility in sourcing alternative solutions. However, several substantial challenges impede higher readiness. The regulatory environment presents a major hurdle, with GDPR, NIS2, SOC2, and ISO 27001 all requiring assessment and carrying "High" or "Medium" risk levels. GDPR's strict requirements for data protection and cross-border transfers will heavily influence migration strategies, especially for personal and sensitive project data. This is compounded by explicit data residency requirements, particularly for EU data, and potential client-specific or local data localization laws across Ramboll's 27 countries of operation. These factors necessitate complex data architecture and may restrict cloud provider choices or data placement. Furthermore, Ramboll's extensive use of specialized engineering software (e.g., Building Information Modelling (BIM), Geographic Information Systems (GIS), Autodesk Revit, Bentley OpenBridge) often involves large datasets, specific integrations, and potentially on-prem dependencies, making migration technically challenging and time-consuming. Finally, the "Vendor Lock-in Risk: Unknown" is a critical concern, as the presence of enterprise software like SAP, Salesforce, and specialized engineering platforms often implies significant lock-in due to proprietary data formats, deep integrations, and licensing structures, which can make migration costly and difficult.

Compliance

4 in-scope frameworks identified; showing 3.

GDPR (source) — Assessment Required

As a Danish company headquartered in the EU with 18,000+ employees globally, Ramboll processes extensive personal data including employee records, client information, and project data. GDPR non-compliance can result in fines up to 4% of annual turnover or €20M. Given their size and EU operations, the likelihood of processing significant volumes of personal data is very high, making compliance critical.

SOC 2 (source) — Assessment Required

As a large consultancy handling client data and potentially providing technology services, SOC2 compliance may be required by clients, especially for data center and technology consulting services. While not legally mandated, SOC2 is often contractually required by enterprise clients for service providers handling sensitive data.

ISO 27001 (source) — Assessment Required

ISO 27001 is critical for large consultancy firms handling sensitive client data and intellectual property. While not legally mandated, it's often required by enterprise clients and is considered best practice for information security management. The risk is moderate as it's primarily a competitive and contractual requirement rather than regulatory.

Financials

Three-year financials

Financial Resilience Score: 7/10

Ramboll demonstrates strong financial resilience underpinned by a robust balance sheet, with a net interest-bearing cash position of DKK 451M, a rising equity ratio of 37.7% (up from 32.5% in 2023), and access to a committed funding facility of DKK 2.5 billion. Foundation ownership (98% Ramboll Foundation) provides long-term strategic stability and shields the firm from short-term capital-market pressures, while diversification across 9 geographies, 7 Global Business Areas, and 35+ countries reduces concentration risk. A stable order book (DKK 8.5bn) and continued M&A momentum (TransGrid Solutions, Temple, pending Envidan) support future growth. However, 2025 was a challenging year with revenue contracting -1.6%, EBITA margin compressing for the second consecutive year to 5.2% (from 6.1% in 2023), and net profit falling 31% YoY—roughly halved over two years. Headwinds included project delays/cancellations in Buildings, Architecture, and Energy (notably US green-energy policy reversals), a lost arbitration case, DKK 134M in restructuring/M&A costs, FX losses of DKK 169.5M, and a high effective tax rate of 49.4%. A fatal balcony collapse in Odense led to legal conviction and reputational scrutiny, and a CEO transition is underway in April 2026. Overall financial resilience remains solid but margin trajectory and macro/policy sensitivity warrant monitoring.

Key strengths: Net interest-bearing cash position of DKK 451M, Equity ratio rising to 37.7% (from 32.5% in 2023), Committed funding facility of DKK 2.5 billion available, 98% Foundation ownership provides long-term stability, Diversified across 9 geographies and 7 Global Business Areas, Stable order book of DKK 8.5bn (+0.4% YoY), Active M&A pipeline (TransGrid, Temple, pending Envidan), High client satisfaction (4.3/5) and stable employee engagement (7.7/10), 5-year revenue CAGR of ~5.0%

Risk factors: EBITA margin compression from 6.1% (2023) to 5.2% (2025), Net profit halved over two years (DKK 390.5M to DKK 204.8M), Revenue contracted -1.6% in 2025, first decline in 5 years, Organic growth turned negative at -2.5% in 2025, Exposure to green-energy policy shifts, notably US energy policy reversals, DKK 134M in non-recurring restructuring and M&A costs, FX loss of DKK 169.5M in 2025 (vs DKK 92M in 2024), High effective tax rate of 49.4% in 2025, Reputational/legal exposure from Odense balcony collapse fatality, CEO transition with long-serving Jens-Peter Saul departing April 2026, Lost arbitration case impacting 2025 results

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report