TDC Erhverv A/S

Denmark · owned by DKTUK Limited (United Kingdom) · tdc.dk · 22 vendors

TDC Erhverv is Denmark's leading B2B telecommunications and IT services provider, offering internet, telephony, network solutions, cybersecurity, and collaboration tools to over 50,000 businesses. The company provides end-to-end digital infrastructure solutions including WAN, LAN, mobility, and managed security services. It operates a local Security Operations Centre (SOC) and leverages Danish cyber threat intelligence to protect businesses against digital threats.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-13 · revision 2

22 direct vendors, 313 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

TDC Erhverv A/S demonstrates a high degree of migration readiness, primarily due to its advanced and cloud-centric technology stack. The company has heavily invested in and adopted modern platforms such as Microsoft Azure, Microsoft 365, and related security services (Entra ID, Intune, Defender). Their product offerings, including "Managed Cloud (Azure)", "Cloud Telephony", "GPU as a Service (Sovereign AI)", and "Network as a Service (NaaS)", indicate a strong embrace of cloud-native and service-oriented architectures. This modern infrastructure significantly reduces the technical complexity typically associated with migrations from legacy, monolithic systems. The company also exhibits strong capabilities in navigating complex regulatory and data residency requirements, which are often major barriers to cloud migration. Their expertise in GDPR, NIS2, and Danish telecommunications law, coupled with solutions like "CloudKey®" for sovereign data control and "Sovereign AI" for compliant AI workloads, means they are well-equipped to handle data sovereignty and compliance during any migration efforts. Stable revenue from the parent company suggests the financial capacity to fund strategic migration initiatives. While the "Total Vendors: 0" data point is ambiguous and prevents a direct assessment of vendor lock-in based on the number of distinct vendors, the deep integration with the Microsoft ecosystem (Azure, M365, etc.) suggests a significant platform dependency. This could simplify migrations within the Microsoft cloud but might introduce complexity if migrating to a different cloud provider. However, given their existing cloud maturity and specialized solutions for compliance, TDC Erhverv A/S is very well-positioned for future migrations.

Compliance

10 in-scope frameworks identified; showing 3.

GDPR (source) — Compliant

TDC Erhverv A/S is headquartered in Denmark (EU), making GDPR universally applicable. The company processes extensive personal data including customer data (names, addresses, phone numbers, IP addresses, CPR numbers, IMEI/ICC numbers, location data, traffic data, financial data), employee data, and supplier data across its telecom services. Risk is Medium rather than Low because: (1) telecom companies are high-value targets for data breaches; (2) the company processes sensitive categories of data including CPR numbers and location/traffic data; (3) data is shared with third-party sub-processors, some outside the EU; (4) Danish Datatilsynet is an active enforcement authority. However, the company demonstrates strong compliance posture through a published DPO, detailed privacy notices, documented legal bases, SCCs for third-country transfers, and EDPB-aligned supplementary measures.

Evidence: https://tdc.dk/persondatameddelelse/, https://tdc.dk/persondatameddelelse-eng, https://tdc.dk/cookiepolitik/, https://tdc.dk/vilkaar#databehandleraftaler, https://www.datatilsynet.dk/, https://tdc.dk/persondata

NIS2 (source) — Compliant

TDC Erhverv A/S is a major Danish telecommunications provider operating on Denmark's largest mobile network (TDC NET) with 5G nationwide coverage, serving 50,000+ business customers. Telecommunications is explicitly listed as an Essential Entity sector under NIS2 Annex I (digital infrastructure and electronic communications). The company clearly exceeds the medium enterprise threshold (50+ employees, €10M+ turnover). Risk is Medium because: (1) as an Essential Entity, TDC Erhverv faces the highest tier of NIS2 obligations including proactive supervision; (2) telecom infrastructure is a prime target for cyberattacks; (3) NIS2 was transposed into Danish law (Lov om net- og informationssikkerhed) with enforcement by the Danish Centre for Cyber Security (CFCS) and the Danish Business Authority; (4) however, TDC Erhverv actively markets NIS2 compliance solutions to customers and has a dedicated NIS2 product page, indicating strong internal awareness and likely compliance. The company also operates a 24/7 Security Operations Center (SOC) and Cyber Threat Intelligence services.

Evidence: https://tdc.dk/produkter/NIS2/, https://tdc.dk/soc/, https://tdc.dk/incident-response/, https://tdc.dk/threat-intelligence/, https://tdc.dk/mobilnet/, https://www.cfcs.dk/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555

Danish Marketing Practices Act — Compliant

TDC Erhverv publishes a cookie policy and obtains consent for marketing communications, as evidenced by its website and privacy notice. The company explicitly states it only contacts customers with offers via email, post, phone, or SMS with prior consent. Risk is Low as the company demonstrates active compliance with consent-based marketing requirements.

Evidence: https://tdc.dk/cookiepolitik/, https://tdc.dk/persondatameddelelse/, https://tdc.dk/nyhedsbrev/

Financials

Three-year financials

Financial Resilience Score: 6/10

TDC Erhverv A/S benefits from its position as the largest Danish B2B telecoms provider with approximately 50,000 business customers, generating strong recurring revenues and high customer switching costs. The company is backed by deep-pocketed long-term owners including Macquarie infrastructure funds and major Danish pension funds (PFA, PKA, ATP), providing significant financial stability and access to capital. Its diversified portfolio spans connectivity, managed services, cybersecurity, unified communications, and cloud, with structural tailwinds from NIS2, GDPR compliance and enterprise cyber demand supporting the higher-margin services mix. However, resilience is tempered by structural erosion of legacy voice, SMS and low-end mobile revenues, intense competition from Telia, Telenor, 3 (Hi3G) and Global Connect, and high group-level leverage typical of infrastructure-fund ownership that has become more costly since the 2022 interest-rate rises. The company also has 100% Denmark revenue exposure with no geographic diversification, and ongoing IT-transformation costs at the Nuuday parent level have historically produced volatile bottom-line results. Without verified three-year financial figures, a mid-range score reflects the combination of strong incumbent scale offset by cyclical and structural pressures.

Key strengths: Incumbent scale with ~50,000 Danish business customers, Ownership by Macquarie and Danish pension funds (PFA, PKA, ATP), Diversified portfolio shifting toward higher-margin managed services and cybersecurity, Structural tailwinds from NIS2, GDPR and enterprise cyber demand, Strong recurring revenues and high customer switching costs

Risk factors: Structural erosion of legacy voice, SMS and low-end mobile revenues, Intense competition from Telia, Telenor, 3 (Hi3G) and Global Connect, High group-level leverage exposed to elevated interest rates, Ongoing IT-transformation costs producing volatile bottom-line results, 100% Denmark revenue exposure with no geographic diversification

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report