Hi3G Denmark ApS

Denmark · owned by CK Hutchison Holdings (Hong Kong) · tre.dk · 12 vendors

Hi3G Denmark ApS, operating under the brand name '3' (Tre), is a Danish mobile network operator offering mobile subscriptions, broadband, and 5G internet services. The company is known for its '3LikeHome' roaming offering, allowing customers to use their mobile plans in over 100 countries including EU, UK, USA, and parts of Asia and Latin America at no extra cost. It is part of the international '3' (Hutchison) group of telecommunications companies.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 12 sub-vendors.

Insights

Last updated 2026-09-13 · revision 8

12 direct vendors, 199 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Hi3G Denmark ApS exhibits medium migration readiness. The company's existing adoption of modern, cloud-based services such as Contentful (headless CMS), Imgix (image CDN), Algolia (site search), Cisco Jasper (IoT platform), Zylinc (cloud contact center), and Call2Teams (Microsoft Teams integration) indicates familiarity with external platforms and a move towards modular architectures, which are positive for migration. The moderately diverse vendor landscape, with named vendors like Cisco, Contentful, Arctic Wolf, and Zylinc, suggests a reduced risk of heavy vendor lock-in compared to a highly concentrated vendor base. However, significant challenges impede higher readiness. Strict data residency requirements under GDPR and Danish telecommunications law are major constraints, mandating that personal data of EU residents be processed within the EU/EEA or with appropriate safeguards, and potentially requiring certain traffic and location data to be stored within Denmark. The 'High risk' and 'Assessment Required' status for NIS2 compliance will necessitate extensive cybersecurity and business continuity planning for any migration, adding complexity and cost. The core business involves extensive 4G/5G network infrastructure, Distributed Antenna Systems (DAS), and Private LTE, which are hardware-centric and less amenable to direct 'migration' to public cloud environments in the traditional sense, though their management planes and services built upon them could be. The lack of financial stability data also means the ability to fund a large-scale migration is unknown.

Compliance

11 in-scope frameworks identified; showing 3.

EU Radio Equipment Directive — Assessment Required

As a mobile network operator deploying 4G and 5G radio equipment across Denmark, Hi3G Denmark ApS is subject to the EU Radio Equipment Directive (RED) and Danish spectrum licensing requirements administered by the Danish Business Authority (Erhvervsstyrelsen). The company holds spectrum licenses for 4G and 5G frequency bands. Risk is Medium because: (1) spectrum license compliance is an ongoing operational requirement; (2) 5G rollout creates new compliance obligations under RED and national spectrum plans; (3) non-compliance with spectrum conditions can result in license suspension or revocation; (4) the company's claim of '5G to 99% of the population' indicates active network deployment requiring ongoing regulatory compliance.

Evidence: https://www.3.dk/om3/om-virksomheden/, https://www.3.dk/netvark-i-international-topklasse, https://www.3.dk/abonnementer/fordele/5g-netvaerk

GDPR (source) — Partially Compliant

GDPR is universally applicable to Hi3G Denmark ApS as a Danish-registered telecommunications company (CVR: 26123445) headquartered in Copenhagen, Denmark — an EU member state. The company processes extensive categories of personal data including names, CPR numbers (Danish national ID), addresses, payment card details, traffic and location data, credit assessment data, and biometric-adjacent identity documents. Telecommunications companies are among the highest-risk GDPR sectors due to the volume and sensitivity of data processed (including traffic/location data under Article 9 equivalents and ePrivacy rules). The Danish Data Protection Authority (Datatilsynet) is an active enforcement body. Non-compliance risks fines of up to €20 million or 4% of global annual turnover. The company's privacy policy references GDPR articles explicitly and names a DPO (databeskyttelsesrådgiver), indicating active compliance efforts. However, the use of US-based processors (Meta, Google, Adyen) with acknowledged third-country transfer risks, and the complexity of lawful basis management across multiple processing activities, creates residual compliance risk. Status is 'Partially Compliant' because while a robust privacy policy and DPO are in place, no independent audit or certification of GDPR compliance has been publicly disclosed.

Evidence: https://www.3.dk/info/persondatapolitik/, https://www.3.dk/om3/om-virksomheden/, https://www.3.dk/, https://www.datatilsynet.dk/, https://report.whistleb.com/da/hi3g

SOC 2 (source) — Assessment Required

SOC 2 is a voluntary US auditing framework developed by the AICPA, applicable to service organizations that store, process, or transmit customer data in the cloud. While SOC 2 is not legally mandated in Denmark or the EU, Hi3G Denmark ApS provides cloud-adjacent digital services including the 'Mit 3' self-service platform, 5G internet services, and business telecommunications solutions (3 Business/Erhverv). Enterprise and business customers may contractually require SOC 2 Type II reports as evidence of security controls. The risk is Medium because: (1) the company serves business customers who may demand SOC 2 assurance; (2) the company uses cloud infrastructure and third-party processors; (3) absence of SOC 2 could be a competitive disadvantage in B2B markets. However, SOC 2 is not legally required and EU companies often use ISO 27001 as the equivalent framework instead.

Evidence: https://www.3.dk/business, https://www.3.dk/om3/om-virksomheden/

Financials

Three-year financials

Financial Resilience Score: 6/10

Hi3G Denmark ApS operates as the Danish arm of the '3' mobile brand, ultimately owned by CK Hutchison Holdings, a very large and well-capitalized Hong Kong-listed conglomerate. This parent backing provides meaningful financial resilience through access to group-level funding, procurement scale, and strategic support. The company has an established position as a Danish mobile network operator with its own spectrum holdings across multiple bands (700/900/1800/2100/2300/3500 MHz) and has completed 5G rollout on core bands. However, the Danish mobile market is notoriously price-competitive with very low ARPU by European standards, which pressures margins. Hi3G Denmark was loss-making for much of its early history following its 2003 launch and only reached operating profitability in the mid-2010s. The company has historically reported negative or modest equity due to accumulated deficits from network build-out, meaning the equity buffer may be thinner than headline revenue suggests and dependent on parent support. Ongoing heavy capex requirements for 5G densification and fibre/backhaul, combined with regulatory risks around spectrum fees and EU roaming rules, create continued financial pressure. Historical revenue has been in the DKK 1.7–2.0 billion range, but without access to recent årsrapporter, current profitability and equity position cannot be confirmed.

Key strengths: Ultimate parent CK Hutchison Holdings provides strong financial backing, Established MNO position in Denmark with own spectrum holdings, 5G network deployed from 2020 onwards, Reached operating profitability in mid-2010s, Historical revenue ~DKK 1.7–2.0 billion annually

Risk factors: Danish mobile market is highly price-competitive with low ARPU, Heavy capex obligations for 5G densification and backhaul, Historical accumulated losses resulting in thin equity buffer, Regulatory risk from spectrum auctions and EU roaming rules, Sector consolidation uncertainty (2015 Telia/Telenor merger blocked), Dependent on parent company support for equity strength

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report