SONFOR

Denmark · owned by Sønderborg Kommune (Denmark) · sonfor.dk · 20 vendors

SONFOR is a 100% municipally owned utility company serving Sønderborg Municipality in Denmark. The company provides water supply, wastewater treatment, waste management, recycling services, and district heating, with a focus on sustainable solutions and environmental protection.

Resilience scores

Technology vendors

Insights

Last updated 2026-08-11 · revision 2

20 direct vendors, 167 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

SONFOR demonstrates low to medium migration readiness. The internal tech stack appears traditional, listing systems like WordPress, E|Forsyning, RenoWeb, and Betalingsservice (PBS/Nets), without any explicit mention of cloud-native technologies, containerization, or microservices. This suggests that a migration to modern cloud environments would likely require significant re-platforming or re-architecting efforts, rather than a straightforward lift-and-shift. Specialized utility systems (E|Forsyning, RenoWeb) and payment services (Betalingsservice) are likely deeply integrated and could present substantial vendor lock-in challenges, complicating efforts to switch providers or modernize these core functions. Critical information regarding the 'Regulatory Environment' and 'Data Residency Requirements' is missing, which could introduce unforeseen complexities and constraints for cloud adoption and data movement. Furthermore, the absence of financial stability data (revenue concentration, growth history) makes it impossible to assess the company's capacity to fund a potentially large-scale migration initiative. Assuming the company relies on vendors for '25 services', the number of external dependencies could add complexity to migration planning and execution. These factors collectively indicate a challenging path to cloud migration and a lower readiness score.

Compliance

8 in-scope frameworks identified; showing 3.

CSRD (source) — Assessment Required

The EU Corporate Sustainability Reporting Directive (CSRD) requires companies meeting certain size thresholds to report on sustainability matters using European Sustainability Reporting Standards (ESRS). SONFOR is a 100% municipally-owned holding company with 9 subsidiaries. As a public-interest entity or large company, it may fall within CSRD scope depending on its balance sheet total, net turnover, and employee count. Danish implementation (Årsregnskabsloven amendments) applies from financial year 2024 for large public-interest entities and from 2025 for other large companies. The risk is Medium because SONFOR's sustainability activities (CSR policy, environmental reporting, green transition projects) suggest awareness of sustainability reporting obligations, but the exact CSRD applicability threshold needs verification against financial data.

Evidence: https://sonfor.dk/om-os/csr-politik/, https://sonfor.dk/om-os/aarsrapporter/, https://sonfor.dk/wp-content/uploads/2023/08/miljoredegorelse-2016-rev-2018.pdf, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2464

ISO 27001 (source) — Assessment Required

ISO 27001 is an internationally recognised information security management standard. While not legally mandatory in Denmark, it is highly relevant for SONFOR given: (1) NIS2 compliance — ISO 27001 certification is widely recognised as a strong indicator of NIS2 cybersecurity risk management compliance, and Danish NIS2 guidance references it; (2) Critical infrastructure — SONFOR operates essential services (water, wastewater, district heating) where information security failures could have serious public safety consequences; (3) Data sensitivity — SONFOR processes CPR numbers, financial data, consumption data, and operates SCADA/OT systems for infrastructure control. The risk is Medium because ISO 27001 is not legally mandated, but the absence of certification (or equivalent controls) in a NIS2-covered critical infrastructure operator increases overall cybersecurity risk exposure. No public evidence of ISO 27001 certification has been found.

Evidence: https://sonfor.dk/om-os/politikker/, https://sonfor.dk/om-os/, https://sonfor.dk/wp-content/uploads/2026/02/SONFOR-Privatlivspolitik.pdf

Danish Water Sector Act — Assessment Required

SONFOR was explicitly formed under the Danish Water Sector Act (Vandsektorloven) in 2009, as stated on its own website. This law governs the organisation, economic regulation, and benchmarking of Danish water and wastewater utilities. The Danish utility regulator (Forsyningstilsynet) oversees compliance including price caps, efficiency requirements, and investment frameworks. Non-compliance with economic regulation can result in regulatory sanctions, forced price reductions, and reputational damage. The risk is High because this is the primary sector-specific regulatory framework for SONFOR's core water and wastewater operations, and economic regulation in the Danish water sector is actively enforced.

Evidence: https://sonfor.dk/om-os/, https://sonfor.dk/om-os/aarsrapporter/, https://sonfor.dk/om-os/selskaber/, https://www.retsinformation.dk/eli/lta/2021/1693, https://forsyningstilsynet.dk/

Financials

Three-year financials

Financial Resilience Score: 8/10

SONFOR Holding A/S demonstrates strong financial resilience underpinned by its status as a 100% municipally-owned utility group in Sønderborg, Denmark. The company operates a regulated monopoly in essential services (water, wastewater, district heating, waste) with non-cyclical demand and implicit municipal credit support. The balance sheet is robust with equity of DKK 2.15 billion and an equity ratio of 58.9% at end-2025, and cash flow from operations remains solid at DKK 178 million in 2025 (DKK 209 million in 2024). Financing is accessed at low cost through KommuneKredit and Nykredit Realkredit with municipal guarantees. The 'hvile i sig selv' (cost-recovery) regulatory model means costs, including major capital investments, are ultimately recovered through tariffs, which limits long-term cash-flow risk but creates significant year-to-year accounting volatility (e.g., DKK -83M loss in 2022, DKK +59M profit in 2024 driven by tax windfalls). Reported profits are therefore not economically meaningful in isolation. Key risks include a heavy capex pipeline (DKK 200-360M annually, driving mortgage debt from DKK 696M to DKK 840M in 2025), the paused Lillebælt Vind offshore wind project (DKK 32M capitalized investment at risk), political pushback on district-heating tariffs, environmental contingencies, and geographic concentration in a single Danish municipality of ~74,000 inhabitants. Nonetheless, the combination of municipal ownership, regulated tariffs, and strong equity base provides a high level of financial resilience.

Key strengths: 100% ownership by Sønderborg Kommune providing implicit municipal credit support, Regulated monopoly utility with non-cyclical essential-service demand, Strong equity of DKK 2.15B and 58.9% equity ratio at end-2025, Solid operating cash flow of DKK 178M in 2025 (DKK 209M in 2024), Low-cost financing via KommuneKredit and Nykredit Realkredit with municipal guarantees, 'Hvile i sig selv' cost-recovery regulatory model ensures long-term tariff recovery of costs and investments

Risk factors: Large ongoing capex pipeline (DKK 200-360M/year) driving rising mortgage debt (DKK 696M → DKK 840M in 2025), Lillebælt Vind offshore wind project paused post year-end 2025; DKK 32M capitalized investment at valuation risk, Political and customer pushback on district-heating price increases on Nordals, Environmental contingency for Himmark treatment plant sludge (DKK 5M provision, potential DKK 7-8M upside), Significant single-year earnings volatility from timing differences between accounting and tariff regulation, Geographic concentration in single Danish municipality (~74,000 inhabitants), Leadership turnover: both CEO and board chair changed between 2024 and 2025, Declining equity ratio (73.6% in 2021 to 58.9% in 2025) as capex leverages the balance sheet

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report