Sorø Kommune

Denmark · owned by Independent (Denmark) · soroe.dk · 26 vendors

Sorø Kommune is a Danish municipal government serving the Sorø area in the Region of Zealand, Denmark. It provides a wide range of public services to residents and businesses, including citizen services, social welfare, planning, culture, and local governance. The municipality is governed by an elected municipal council (kommunalbestyrelse) and is reachable at its town hall (rådhus) in Sorø.

Resilience scores

Technology vendors

Insights

Last updated 2026-08-15 · revision 30

26 direct vendors, 272 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Sorø Kommune's migration readiness is assessed as medium-low, largely due to a highly restrictive regulatory and data residency environment. The municipality operates under stringent GDPR and Danish Data Protection Act requirements, particularly concerning special category data (health, social services) and CPR numbers. Crucially, strong Danish public sector data localization preferences, coupled with the Arkivloven (Danish Archives Act) and NIS2 cybersecurity requirements, mandate that sensitive data and public records remain accessible within Denmark/EU. These constraints significantly limit the choice of cloud providers and migration strategies, making any move to global cloud platforms complex and costly. While the municipality's financial stability is a strong enabler for funding migration efforts, the technical stack, which includes Umbraco CMS and integrations with national platforms, is not explicitly described as cloud-native, containerized, or microservices-based. This suggests that a migration might involve significant re-platforming or re-architecting rather than a straightforward lift-and-shift. The vendor relationship data is ambiguous, with 'Total Vendors: 0' contradicting other vendor information. Assuming the municipality has vendors for its 60 services, the 'Unknown' vendor lock-in risk means this factor cannot be fully assessed. However, without clear evidence of a cloud-ready architecture or a strategy to navigate the strict data residency and regulatory landscape, migration will present substantial challenges.

Compliance

7 in-scope frameworks identified; showing 3.

Danish Archives Act — Assessment Required

The Danish Archives Act requires public authorities to preserve records of historical and administrative value and to transfer eligible records to the Danish National Archives (Rigsarkivet) or approved municipal archives. Sorø Kommune explicitly references the Archives Act on its data protection page as governing data retention and deletion. The risk level is Medium because: (1) non-compliance with archiving obligations can result in loss of historically significant records and regulatory sanctions; (2) the intersection of GDPR deletion rights and archiving obligations creates compliance complexity; (3) no public audit of Sorø Kommune's archiving practices has been found.

Evidence: https://soroe.dk/om-soroe-kommune/databeskyttelse

Danish Whistleblower Protection Act — Compliant

The Danish Whistleblower Protection Act (implementing EU Whistleblower Directive 2019/1937) requires public authorities with 50+ employees to establish an internal whistleblower scheme. Sorø Kommune has demonstrably implemented a compliant whistleblower scheme with a dedicated portal (soroe.integrityline.com), published annual reports (2022, 2023, 2024, 2025), and clear scope covering employees, former employees, contractors, and suppliers. The risk level is Low as the municipality has visibly and actively complied with this requirement.

Evidence: https://soroe.dk/om-soroe-kommune/whistleblowerordning, https://soroe.integrityline.com/, https://cdn.soroe.dk/soroekommune/Media/639112479687645960/Årsrapport for Whistleblowerordningen i Sorø Kommune 2025.pdf, https://cdn.soroe.dk/soroekommune/Media/638797123012709391/Årsrapport for Whistleblowerordningen i Sorø Kommune 2024.pdf

ISO 27001 (source) — Assessment Required

ISO 27001 is an internationally recognised voluntary standard for information security management. While not legally mandatory for Danish municipalities, it is highly relevant given Sorø Kommune's NIS2 obligations (which require equivalent risk management measures) and its processing of large volumes of sensitive personal data. Many Danish public authorities pursue ISO 27001 certification or equivalent frameworks to demonstrate cybersecurity maturity. The risk level is Medium because: (1) absence of ISO 27001 or equivalent certification increases the risk of inadequate information security controls; (2) NIS2 compliance effectively requires ISO 27001-equivalent measures; (3) Datatilsynet and CFCS may scrutinise security measures during audits. No public evidence of ISO 27001 certification for Sorø Kommune has been found.

Evidence: https://soroe.dk/om-soroe-kommune/databeskyttelse, https://www.sikkerdigital.dk/

Financials

Three-year financials

Financial Resilience Score: 9/10

Sorø Kommune demonstrates exceptionally strong financial resilience as a Danish municipality operating under national fiscal supervision. Over 2020-2024, the municipality materially strengthened its balance sheet: equity grew ~32% from DKK 909M to DKK 1,197M, while long-term debt declined ~24% from DKK 786M to DKK 596M. Debt per inhabitant fell from DKK 26,198 to DKK 19,438, and liquidity per inhabitant rose nearly 50% to DKK 6,440. The municipality has produced five consecutive years of large operating surpluses (DKK 93-129M annually), providing ample capacity to fund investments and repay debt. The entity received a clean audit opinion from PwC in June 2025 with no material misstatements. Income concentration is stable and predictable, with 67% from municipal income tax and 27% from general grants and equalisation transfers. The taxable income base has grown 16.9% over five years and the population is expanding modestly (+2.2%). Tax rates (26.3% income tax, 25.74‰ land tax) have been unchanged since 2021, indicating fiscal discipline. As a public sector entity, Sorø Kommune benefits from an effectively sovereign-linked risk profile—it cannot be liquidated and operates under the state's Budget- og Regnskabssystem framework. Key pressures include rising costs in child/family placements (DKK 9.4M overrun in 2024), special education (DKK 8.9M overrun) and elderly care (DKK 6.6M overrun), plus a tripled capital investment programme (DKK 31M to DKK 94M) that has narrowed the overall result. However, these pressures are well within the municipality's operating surplus capacity.

Key strengths: Five consecutive years of large operating surpluses (DKK 93-129M), Equity grew 32% over 2020-2024 to DKK 1,197M, Long-term debt reduced 24% to DKK 596M, Clean PwC audit opinion for 2024, Stable and diversified income base (67% income tax, 27% grants/equalisation), Growing tax base: population +2.2%, taxable income +16.9% over 5 years, Liquidity per inhabitant up 47% to DKK 6,440, Sovereign-linked risk profile as Danish municipality, Stable tax rates unchanged since 2021, Investment portfolio returned 8.01% in 2024

Risk factors: Rising child/family placement costs (DKK 9.4M overrun in 2024), Special education overrun of DKK 8.9M in 2024, Elderly care demographic pressure (DKK 6.6M overrun), Capital investment tripled 2020-2024, narrowing overall surplus, DKK 615.7M in guarantees on external loans to utilities, Pension provisions of DKK 163M subject to actuarial revision, Ongoing legal disputes (Degneparken DKK 5.2M, PCB DKK 1.8M, workplace injury up to DKK 4.2M), Collective tax sanction of DKK 0.9M from state in 2024

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report