Telefónica, S.A.

Spain · owned by Independent (Spain) · www.telefonica.com · 17 vendors

Telefónica, S.A. is a Spanish multinational telecommunications company headquartered in Madrid, Spain, and one of the largest telephone operators and mobile network providers in the world. It operates in Europe and Latin America under brands including Movistar, O2, and Vivo, offering fixed-line, mobile, broadband, and digital services. The company is listed on the Madrid, New York, London, and São Paulo stock exchanges.

Resilience scores

Disruption prediction

Telefónica, S.A. has an estimated 13% probability of disruption in the next 6 months.

12 of Telefónica, S.A.'s 17 vendors monitored for disruptions.

Technology vendors

Services catalogue

4 services in catalogue across 2 categories; runs on 17 sub-vendors.

Insights

Last updated 2026-06-11 · revision 2

17 direct vendors, 240 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Telefónica exhibits very high migration readiness, primarily driven by its exceptionally modern and cloud-native internal tech stack. The extensive adoption of Open RAN, Telco Cloud (NFV/SDN), OpenStack, Kubernetes, Docker, Cloud-Native IT (microservices-based BSS/OSS transformation), and Open Digital Architecture (TM Forum Open APIs) signifies a highly modular, virtualized, and containerized environment. This architectural foundation greatly reduces the complexity, effort, and risk associated with migrating services, applications, or entire network functions to new platforms or cloud environments. The strategic move towards disaggregated network components (Open RAN, Open Broadband/BNG) further enhances the feasibility of incremental and less disruptive migrations. The use of ML & AI for network operations also suggests advanced capabilities for managing migration complexities. However, there are some unknowns: "Data Residency Requirements: Not specified" could pose significant challenges if strict requirements emerge, especially for a multinational operator. The lack of data on financial stability means the capacity to fund large-scale migration projects cannot be assessed. Furthermore, the contradictory information regarding "Total Vendors: 0" and the "Vendor Lock-in Risk: Unknown" make it difficult to fully evaluate potential vendor-related migration hurdles, although the geographic diversity of vendor HQs (4 countries) is a positive factor against high concentration.

Compliance

4 in-scope frameworks identified; showing 3.

GDPR (source) — Compliant

As a major telecommunications company headquartered in Spain (EU) and operating across multiple EU countries, Telefónica processes vast amounts of personal data including customer, employee, and supplier data. While they have established comprehensive privacy governance structures including a Global Transparency Center, BCRs (Binding Corporate Rules), and privacy-by-design principles, the telecommunications sector faces high regulatory scrutiny and significant fines for non-compliance. The company's size and data processing scale create inherent compliance complexity.

Evidence: https://www.telefonica.com/es/centro-global-de-transparencia/, https://www.telefonica.com/es/centro-global-de-transparencia/privacidad/, https://www.telefonica.com/es/politica-de-privacidad/

SOC 2 (source) — Assessment Required

As a major telecommunications and technology services provider offering cloud services, digital solutions, and enterprise services, Telefónica likely needs SOC2 compliance for their B2B technology offerings. Many enterprise customers require SOC2 reports from service providers. However, no specific evidence of SOC2 compliance was found in available documentation. The medium risk reflects the likelihood that compliance is needed for business competitiveness, though non-compliance wouldn't result in regulatory penalties.

Evidence: https://www.telefonica.com/es/servicios/empresas/

ISO 27001 (source) — Assessment Required

As a major telecommunications company handling sensitive customer data and operating critical infrastructure, ISO 27001 certification would be expected for information security management. The company has established security governance and policies, but no specific ISO 27001 certification evidence was found. Medium risk reflects the importance of this standard for telecommunications companies and potential customer/regulatory expectations, though it's typically voluntary.

Evidence: https://www.telefonica.com/es/centro-global-de-transparencia/seguridad/

Financials

Three-year financials

Financial Resilience Score: 6/10

Telefónica demonstrates moderate financial resilience underpinned by its scale, infrastructure leadership, and consistent cash generation. The group serves 326.1 million accesses, operates the world's largest fibre footprint (162.9M premises passed), and generated €5,081M of OpCFaL and €2,069M of free cash flow from continuing operations in 2025. Its four-pillar core market model (Spain, Germany, Brazil, UK JV) diversifies country risk, and adjusted EBITDA grew 2.0% in constant terms in 2025, meeting guidance. However, the group carries substantial net financial debt of €26.8B and reported a sizeable net loss of €4,318M in 2025, driven by restructuring charges, asset impairments, and losses on Hispam divestments. Credit ratings sit near the lower band of investment grade, and the company is undergoing significant strategic repositioning under the new 'Transform & Grow' plan led by Chairman Marc Murtra. Capital discipline is improving, with CapEx/sales at 12.4% (below the 12.5% target) and CapEx down 7.2% YoY. The Spanish business achieved simultaneous growth in revenue, EBITDA and OpCFaL for the first time since 2008, and Telefónica Tech grew revenue 18.9% to €2,222M. Forward 2026 guidance projects revenue and EBITDA growth of 1.5–2.5% with ~€3B free cash flow, suggesting management expects the transition to stabilize the financial profile.

Key strengths: 326.1M total accesses and world's largest fibre footprint (162.9M premises passed), Diversified four-pillar core market model (Spain, Germany, Brazil, UK VMO2 JV), Strong recurring cash flow: €5,081M OpCFaL and €2,069M FCF in 2025, 2025 targets met: revenue +1.5%, adjusted EBITDA +2.0%, CapEx/sales 12.4%, Telefónica Tech growing 18.9% to €2,222M, Spain posted first simultaneous revenue/EBITDA/OpCFaL growth since 2008, Disciplined CapEx down 7.2% YoY to €4,340M

Risk factors: High net debt of €26.8B in a volatile rate environment, Large 2025 reported net loss of €4,318M from restructuring and impairments, Credit ratings near lower band of investment grade, Significant Brazilian real FX translation exposure, Mature Spanish consumer market and intense European competition, Execution risk on remaining Hispam exits (Mexico still pending), Workforce restructuring (Spain ERE) generating large one-off costs, Modest growth at UK VMO2 JV (+0.2% revenue, +0.9% EBITDA)

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report