Telia Eesti AS

Estonia · www.telia.ee · 17 vendors

Telia Eesti AS is the largest IT and telecommunications company in Estonia, providing a wide range of integrated mobile, broadband, TV, and IT solutions. The company serves both residential and business customers and is a subsidiary of the multinational Telia Company. It actively invests in developing Estonia's information society and advanced technologies like 5G.

Resilience scores

Technology vendors

Services catalogue

5 services in catalogue across 3 categories; runs on 17 sub-vendors.

Insights

Last updated 2026-07-30 · revision 6

17 direct vendors, 220 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Telia Eesti exhibits medium migration readiness. Its strengths lie in a modern technology foundation that includes 'Cloud Services & Managed IT,' 'Network Virtualisation (NFV/SDN),' and 'AI/ML Solutions,' indicating a foundational capability for cloud adoption. The company's financial stability, with consistent revenue growth, provides the necessary resources to fund migration initiatives. A robust ISO 27001 certification across its data centers and business IT services ensures a secure environment for data and systems during migration, aiding compliance. Existing use of SaaS platforms like Workday, Cloudinary, and Vimeo also demonstrates experience with cloud-based solutions. The geographic diversity of vendor headquarters (5 countries) suggests a potentially lower risk of lock-in with any single vendor, offering more flexibility in choosing migration partners, despite the contradictory 'Total Vendors: 0' data point. However, significant challenges exist. Strict EU and Estonian data residency and sovereignty requirements under GDPR and national regulations will necessitate careful selection of cloud regions (primarily EU/EEA) and robust data transfer impact assessments, potentially limiting migration options and increasing complexity. As an 'Essential Entity' under the NIS2 Directive, Telia Eesti must maintain stringent cybersecurity risk management and incident reporting during any migration, adding significant regulatory overhead. The presence of 'Fixed voice / legacy' services, though a small portion of revenue, indicates some older systems that may require specific strategies for modernization or decommissioning. The 'Vendor Lock-in Risk: Unknown' and the ambiguity around the total number of vendors make it difficult to fully assess the complexity of disentangling from existing vendor relationships.

Compliance

5 in-scope frameworks identified; showing 3.

SOC 2 (source) — Assessment Required

While SOC2 is not mandatory, it's increasingly expected for technology service providers, especially those serving business customers or handling sensitive data. Telia Eesti provides IT services to business clients and operates data centers, making SOC2 relevant for competitive positioning and customer trust. Medium risk as lack of SOC2 could impact business opportunities with security-conscious customers, though ISO 27001 certification provides similar assurance.

Evidence: https://www.telia.ee/ettevottest/uldinfo/

NIS2 (source) — Compliant

As a major telecommunications operator in Estonia (EU member state), Telia Eesti is classified as an Essential Entity under NIS2 Directive. Telecommunications infrastructure is critical for national security and economic stability. Non-compliance could result in severe penalties (up to €10M or 2% of annual turnover) and operational restrictions. High risk due to critical infrastructure status and strict cybersecurity requirements, but company demonstrates strong security framework with ISO 27001 certification.

Evidence: https://www.telia.ee/ettevottest/uldinfo/, https://www.telia.ee/en/ettevottest/uldinfo

ISAE 3000 (source) — Assessment Required

ISAE 3000 is typically used for assurance reporting on non-financial information. While not mandatory for telecommunications operators, it could be relevant for sustainability reporting or specific customer assurance requirements. Low risk as this is primarily for enhanced transparency rather than regulatory compliance.

Evidence: https://www.telia.ee/ettevottest/uldinfo/

Financials

Three-year financials

Financial Resilience Score: 7/10

Telia Eesti AS demonstrates solid financial resilience underpinned by its position as the #1 mobile network operator in Estonia, a subscription-based recurring revenue model, and the full financial and strategic backing of its parent, Telia Company AB. The company benefits from an integrated quad-play offering (mobile, fixed broadband, TV, B2B IT), which drives cross-selling, reduces churn, and provides revenue diversification beyond traditional telecoms. The parent's stated commitment of approximately €50 million per year in Estonian capex signals sustained investment in network quality and 5G leadership, reinforcing competitive positioning. The B2B IT and enterprise services segment — encompassing cloud, cybersecurity, and managed services — represents the fastest-growing revenue stream and is increasingly material to the overall mix, partially offsetting structural decline in legacy fixed-voice revenues. ESG credentials (100% renewable electricity since 2016, multiple ISO certifications) reduce regulatory and reputational risk, while Estonia's advanced digital society creates a structurally supportive demand environment for high-quality connectivity and IT services. Key risks temper the resilience score. The Estonian market is small (~1.4 million population) and highly competitive, with Elisa Eesti and Tele2 Estonia as active rivals, limiting subscriber growth and pressuring ARPU. As a wholly owned subsidiary, Telia Eesti is subject to intercompany charges (brand licence fees, shared services) and regular dividend extraction by the parent, which can compress standalone equity and financial flexibility. Transfer pricing and parent-level strategic reviews add further uncertainty. Geopolitical and cybersecurity risks are elevated given Estonia's proximity to Russia and its role as a NATO member operating critical national infrastructure. Macroeconomic headwinds — Estonia experienced GDP contraction in 2022–2023 — could pressure consumer and enterprise spending. The high capex-to-revenue ratio (~19–20%) and dual fixed/mobile network maintenance create ongoing D&A burdens. Overall, the company is financially sound but constrained by market size, competitive dynamics, and parent dependency.

Key strengths: #1 mobile network operator in Estonia by quality (Rohde & Schwarz certified), 100% ownership by Telia Company AB providing capital access and group backing, Subscription-based recurring revenue model with high customer lock-in, Integrated quad-play model (mobile, broadband, TV, B2B IT) enabling cross-selling, ~€50M annual capex commitment from parent for network modernisation and 5G, Fast-growing B2B IT and enterprise services segment diversifying revenue, 100% renewable electricity since 2016; multiple ISO certifications reducing ESG risk, Digital Estonia tailwind sustaining demand for connectivity and IT services, 5G and 5G+ leadership ahead of competitors

Risk factors: Small, saturated Estonian market (~1.4M population) limiting subscriber growth, Intense competition from Elisa Eesti and Tele2 Estonia pressuring pricing and ARPU, Intercompany charges (brand licence fees, shared services) reducing standalone profitability, Regular dividend extraction by parent limiting equity base and financial flexibility, Transfer pricing risk and exposure to parent-level strategic reviews, Elevated geopolitical and cybersecurity risk given Estonia's proximity to Russia and NATO obligations, Estonian GDP contraction in 2022–2023 pressuring consumer and enterprise spending, High capex-to-revenue ratio (~19–20%) and dual network maintenance creating D&A burden, EU and Estonian telecoms regulatory risk (spectrum, roaming, GDPR, net neutrality)

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report