SSC-Campus Due Diligence

Run due diligence on SSC-Campus: check compliance and get alerts when suppliers change.

Netherlands · www.logius.nl · 9 vendors

Logius is the digital government service of the Netherlands Ministry of the Interior and Kingdom Relations. It develops and maintains government-wide ICT solutions and common standards. These services simplify communication and digital transactions between authorities, citizens, and businesses in the Netherlands.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 9 sub-vendors.

Insights

Last updated 2026-05-02 · revision 2

9 direct vendors, 91 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

4 in-scope frameworks identified; showing 3.

GDPR (source) — Evidence found

Evidence: https://www.logius.nl/over-ons/privacy, https://www.logius.nl/privacyverklaring

NIS2 (source) — Evidence found

Evidence: https://www.logius.nl/over-ons/veiligheid, https://www.logius.nl/english

ISO 27001 (source) — No public evidence

Evidence: https://www.logius.nl/over-ons/veiligheid

Financials

Three-year financials

Financial Resilience Score: 9/10

Logius is a statutory government agency (agentschap) of the Dutch Ministry of the Interior and Kingdom Relations (BZK), operating under a cost-recovery baten-lasten model. Its funding is secured through multi-year budget allocations and service-level agreements with other government bodies, meaning there is effectively zero revenue risk from market competition. The organisation operates critical, non-substitutable national digital infrastructure including DigiD (serving ~17 million Dutch citizens), MijnOverheid, Digipoort, and PKIoverheid, making it structurally indispensable to the Dutch public sector. The agency's financial resilience is essentially as strong as the Dutch sovereign state itself. It is required to operate near break-even, with any surplus returned to the ministry or held in a capped equity buffer (eigen vermogen, limited to ~5% of total lasten). This model eliminates commercial financial risk, though it also means there is no profit generation or shareholder return. Recent years have shown modest positive saldi, consistent with the agency model, and no significant operating losses have been reported. Growth drivers are robust: the Dutch government's NL DIGIbeter digitalisation strategy ensures continued demand expansion, and usage metrics confirm this trajectory — DigiD reached a record 350 logins per second in the 2024 tax season, up from 250 the prior year, with 9 million ID-check users and 342 municipalities onboarded to Berichten over uw Buurt. Service availability metrics are strong, with Digipoort and Diginetwerk achieving near-100% uptime and DigiD/MijnOverheid exceeding 99%. Key risks include infrastructure modernisation complexity (the ICT advisory board flagged the original migration plan as infeasible in 2023), cybersecurity exposure as a high-value national target, talent competition from the private sector, dependency on key external suppliers (notably Solvinity), and evolving EU regulatory compliance obligations under eIDAS 2.0, NIS2, and GDPR. These risks are real but manageable given the sovereign backing and mandatory mandate.

Key strengths: Sovereign mandate with guaranteed multi-year funding from Ministry of BZK, Operator of critical, non-substitutable national digital infrastructure (DigiD, MijnOverheid, Digipoort, PKIoverheid), Cost-recovery baten-lasten model eliminates commercial revenue risk, Growing demand driven by Dutch government NL DIGIbeter digitalisation strategy, Record DigiD usage (350 logins/sec in 2024 tax season; 9 million ID-check users), Near-100% service availability across core infrastructure platforms, Expanding service portfolio with successful new launches in 2023–2024, Financial resilience effectively backed by Dutch sovereign credit

Risk factors: Infrastructure modernisation risk: ICT advisory board (Adviescollege ICT-toetsing) assessed original migration plan as infeasible in 2023; revised strategy carries cost overrun and continuity risk, Cybersecurity exposure: high-value target for cyberattacks as operator of national digital identity infrastructure, Budget dependency on political and parliamentary decisions; austerity or reprioritisation could constrain investment, Systemic concentration risk: entire Dutch public sector depends on Logius infrastructure; prolonged outage has nationwide impact, Talent and capacity constraints: competition with private sector for skilled IT professionals, Key supplier dependency, notably potential Solvinity takeover situation, Ongoing compliance burden from eIDAS 2.0, GDPR, NIS2, and evolving EU digital identity regulations

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report